231 matches found
CVE-2011-2523
CVE-2011-2523 Exploit para la vulnerabilidad de puerta trasera de vsFTPd escrito en Python usando Pwntools Uso root@kitploit: pip3 install pwntools python3 ./CVE-2011-2523.py optional...
CVE-2018-7449
CVE-2018-7449 1. 简介 我的工具使用Python编写，利用CVE-2018-7449漏洞执行一系列命令，导致FTP守护进程崩溃。 root@kitploit: 免责声明!!! 请注意，未经授权使用黑客工具是非法的，并可能导致法律问题。因此，重要的是仅在您拥有操作权限的系统上将此工具用于测试目的。 2. 利用此漏洞的条件 防火墙被禁用或已攻破 攻击者必须知道FTP账户的用户名和密码 FTP密码以未加密方式传输，可能被嗅探 3. 使用帮助 4. 灵感来源： SEGGER embOS/IP FTP Server 3.22 - 拒绝服务 - Windows dos...
proftpd-cve-2019-12815
ProFTPD 1.3.x README 状态 介绍 ProFTPD 是一个高度可配置的 FTP 守护进程，适用于 Unix 及类 Unix 操作系统。有关 ProFTPD 已知或被认为可以构建和运行的平台详情，请参阅 README.ports 文件。 ProFTPD 源于对安全且可配置的 FTP 服务器的需求。它深受 Apache 网络服务器的启发。与大多数其他 Unix FTP 服务器不同，它并非源自旧的 BSD ftpd 代码库，而是一个全新的设计和实现。 ProFTPD 广泛的配置能力为系统管理员在用户认证和访问控制方面提供了极大的灵活性，包括虚拟用户以及为单个用户提供简便的...
CVE-2007-1567
🐞 CVE-2007-1567: War FTP Daemon 1.65 - Stack-Based Buffer Overflow Classic stack-based buffer overflow in War FTP Daemon 1.65 demonstrating old-school remote code execution through malformed FTP commands. 📑 Table of Contents Why this repository exists Why this vulnerability is interesting Context...
CVE-2011-2523-PoC
vsftpd2.3.4 Exploit simple hecho en Python que explota la vulnerabilidad vsftpd 2.3.4 Modo de uso: python3 ftpxploit.py 127.0.0.1...
EUVD-2026-35295
A security flaw has been discovered in TOTOLINK EX200 4.0.3c.7646. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation results in least privilege violation. It is possible to launch the attack remotely. The exploit has been released to the publi...
CVE-2026-11494
A security vulnerability has been detected in TOTOLINK AC1200 T8 4.1.5cu.8611. This affects an unknown function of the file /etc/vsftpd.conf of the component vsftpd. The manipulation leads to least privilege violation. The attack may be initiated remotely. The exploit has been disclosed publicly...
TOTOLINK CP450 安全漏洞
TOTOLINK CP450 is an outdoor wireless customer terminal device developed by TOTOLINK Corporation. It is primarily used to provide wireless broadband access services, especially suitable for wireless network coverage in rural or remote areas. The TOTOLINK CP450 version 4.1.0cu.747 contains a...
vsFTPd-2.3.4-exploit-netcat-revshell-PoC
vsFTPd...
RHEL 9 : vsftpd (RHSA-2026:4522)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:4522 advisory. The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd:...
RHSA-2026:0608 Red Hat Security Advisory: vsftpd security update
Bulletin has no description...
ALSA-2026:0605 Moderate: vsftpd security update
The vsftpd packages include a Very Secure File Transfer Protocol FTP daemon, which is used to serve files over a network. Security Fixes: vsftpd: vsftpd: Denial of service via integer overflow in ls command parameter parsing CVE-2025-14242 For more details about the security issues, including the...
MiracleLinux 4 : krb5-appl-1.0.1-2.AXS4.1 (AXSA:2011-703:01)
The remote MiracleLinux 4 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2011-703:01 advisory. This package contains Kerberos-aware versions of the telnet, ftp, rcp, rsh, and rlogin clients and servers. While these have been replaced by tools such as...
CVE-2023-40303
GNU inetutils before 2.5 may allow privilege escalation because of unchecked return values of setid family functions in ftpd, rcp, rlogin, rsh, rshd, and uucpd. This is, for example, relevant if the setuid system call fails when a process is trying to drop privileges before letting an ordinary us...
H3C M102G 安全漏洞
H3C M102G is an intelligent gateway from China's Xinhua San H3C. A security vulnerability exists in the H3C M102G that stems from an improper configuration of vsftpd, which could allow a remote attacker to gain root-level control of the device...
CVE-2025-14910
A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handleretr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is...
CVE-2025-14910
A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handleretr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is...
CVE-2025-14910 Edimax BR-6208AC FTP Daemon Service handle_retr path traversal
A vulnerability was detected in Edimax BR-6208AC 1.02. This impacts the function handleretr of the component FTP Daemon Service. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. Edimax confirms this issue: "This product is...
Edimax BR-6208AC 路径遍历漏洞
The Edimax BR-6208AC is a wireless router from Edimax Taiwan, China. A path traversal vulnerability exists in the Edimax BR-6208AC version 1.02, which originates from a misbehavior of the function handleretr in the FTP Daemon Service component, and could lead to a path traversal attack...