Lucene search
+L

4357 matches found

BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•12 views

The vulnerability of Modicon microprogrammed controllers relates to the transmission of confidential information in open text using the FTP protocol, allowing a intruder to disclose the protected information.

The vulnerability of Modicon microprogrammed controllers relates to the transmission of confidential information in open text using the FTP protocol. Exploiting this vulnerability can allow a remote attacker to disclose the protected information...

7.1CVSS6.5AI score0.00981EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2019/11/25 12:00 a.m.•14 views

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. This allows a malicious actor to download the updated embedded software with an invalid web server URL via FTP, thereby causing a service failure.

The vulnerability of Modicon microprogrammed controllers lies in the lack of checks for the integrity of updates to the embedded software. Exploiting this vulnerability allows a malicious actor to download updates to the embedded software via an FTP server without an active web server, thereby...

6.8CVSS5.6AI score0.00959EPSS
SaveExploits0References4
Huawei
Huawei
•added 2019/11/13 12:00 a.m.•55 views

Security Advisory - Improper File Management Vulnerability in Huawei Share

The Huawei Share function of some Huawei phones has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully exploit may cause some files on the victim...

5.7CVSS5.6AI score0.00301EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
•added 2019/11/12 12:00 a.m.•20 views

PT-2019-6021

Name of the Vulnerable Software and Affected Versions Modicon Controllers versions affected versions not specified Description A vulnerability exists in Modicon Controllers, which could cause the disclosure of FTP hardcoded credentials when using the Web server of the controller on an unsecure...

7.8CVSS7.2AI score0.01379EPSS
SaveExploits0References8
CNVD
CNVD
•added 2019/11/05 12:00 a.m.•17 views

Cisco Adaptive Security Software and Cisco Firepower Threat Defense Buffer Overflow Vulnerabilities

Cisco Firepower Threat Defense FTD and Cisco Adaptive Security Appliances Software ASA Software are both products of Cisco, Inc.Cisco Firepower Threat Defense is a set of unified software that provides next-generation firewall services. Defense is a set of unified software to provide...

8.6CVSS7.2AI score0.01772EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/11/05 12:00 a.m.•20 views

Cisco Adaptive Security Appliance Software Code Issue Vulnerability

Cisco Adaptive Security Appliances Software ASA Software is a set of firewalls and network security platforms from the U.S. company Cisco Cisco. The platform provides highly secure access to data and network resources and other features. A code issue vulnerability exists in the Secure Copy SCP...

6.8CVSS7AI score0.01488EPSS
SaveExploits0References1
OSV
OSV
•added 2019/10/31 5:15 p.m.•14 views

CVE-2019-18465

In Progress MOVEit Transfer 11.1 before 11.1.3, a vulnerability has been found that could allow an attacker to sign in without full credentials via the SSH SFTP interface. The vulnerability affects only certain SSH SFTP configurations, and is applicable only if the MySQL database is being used...

9.8CVSS7.2AI score0.01487EPSS
SaveExploits0References2
Penetration Testing Lab
Penetration Testing Lab
•added 2019/10/30 9:20 a.m.•76 views

Persistence – BITS Jobs

Windows operating systems contain various utilities which can be used by system administrators to perform various tasks. One of these utilities is the Background Intelligent Transfer Service BITS which can facilitate file transfer capability to web servers HTTP and share folders SMB. Microsoft...

1.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/10/30 12:00 a.m.•21 views

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability (CNVD-2019-41497)

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker can exploit this vulnerability to cause a denial of service by upgrading the controller v...

4.9CVSS6.8AI score0.00959EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/30 12:00 a.m.•16 views

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker could use this vulnerability to cause a denial of service by upgrading the firmware via t...

4.9CVSS6.7AI score0.00959EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/30 12:00 a.m.•12 views

Schneider Electric Modicon M580/M340/BMxCRA/140CRA Denial of Service Vulnerability (CNVD-2019-41493)

The Modicon M580/M340/BMxCRA/140CRA are programmable logic controllers from Schneider Electric. A denial of service vulnerability exists in the Schneider Electric Modicon M580/M340/BMxCRA/140CRA. An attacker can exploit this vulnerability to cause a denial of service by upgrading the controller v...

4.9CVSS6.8AI score0.24374EPSS
SaveExploits0References1
CNVD
CNVD
•added 2019/10/25 12:00 a.m.•17 views

LabF nfsAxe FTP client buffer overflow vulnerability

LabF nfsAxe FTP client is a file transfer client program. A buffer overflow vulnerability in LabF nfsAxe FTP client version 3.7 can be exploited by remote attackers to execute code...

9.8CVSS7.6AI score0.028EPSS
SaveExploits1References1
OSV
OSV
•added 2019/10/10 3:15 p.m.•11 views

CVE-2019-17320

NetSarang XFTP Client 6.0149 and earlier version contains a buffer overflow vulnerability caused by improper boundary checks when copying file name from an attacker controlled FTP server. That leads attacker to execute arbitrary code by sending a crafted filename...

9.8CVSS7.8AI score0.02178EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2019/10/08 11:44 a.m.•36 views

CVE-2018-15127

LibVNC before commit 502821828ed00b4a2c4bef90683d0fd88ce495de contains heap out-of-bound write vulnerability in server code of file transfer extension that can result remote code execution...

9.8CVSS2.7AI score0.15089EPSS
SaveExploits0References2
OSV
OSV
•added 2019/10/02 7:15 p.m.•13 views

CVE-2019-12693

A vulnerability in the Secure Copy SCP feature of Cisco Adaptive Security Appliance ASA Software could allow an authenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to the use of an incorrect data type for a length variable. An attacker could exploit...

4.9CVSS6.5AI score0.01488EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/10/02 12:00 a.m.•11 views

PT-2019-3392 · Cisco · Cisco Ftd +1

Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security ASA Software affected versions not specified Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the FTP inspection engine could allow an unauthenticated, remote...

8.6CVSS8.1AI score0.01772EPSS
SaveExploits0References6
Fedora
Fedora
•added 2019/09/29 2:22 a.m.•60 views

[SECURITY] Fedora 29 Update: curl-7.61.1-12.fc29

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

9.8CVSS6.7AI score0.49739EPSS
SaveExploits5
Vulnrichment
Vulnrichment
•added 2019/09/16 6:06 p.m.•11 views

CVE-2019-5482

Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3...

6.8AI score0.17939EPSS
SaveExploits0References14
Kitploit
Kitploit
•added 2019/09/14 8:41 p.m.•222 views

TinkererShell - A Simple Python Reverse Shell Written Just For Fun

A simple reverse shell written in python 3.7 just for fun. Actually it supports Windows and Linux OS and integrates some basic features like keylogging and AES encrypted communications. Supported operating systems: Windows Linux OSX Functions and characteristics: Reverse connection. AES encrypted...

7.5AI score
SaveExploits0References1
OSV
OSV
•added 2019/09/12 8:15 p.m.•8 views

CVE-2019-13530

Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part : M8096-67501, WLAN Version B, Firmware A.01.09, Part : N/A Replaced by Version C and WLAN Version B, Firmware A.01.09, Part : N/A Replaced by Version C. An attacker can us...

7.2CVSS5.8AI score0.01358EPSS
SaveExploits0References1
Rows per page
Query Builder