54 matches found
EUVD-2025-200022
A buffer overflow in the gcfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-65403
A buffer overflow in the gcfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service DoS via a crafted input...
LightFTP 安全漏洞
LightFTP is a lightweight FTP service for hfiref0x individual developers. A security vulnerability exists in LightFTP version v2.0, which stems from a buffer overflow in the gcfg.MaxUsers component that could lead to a denial of service attack...
CVE-2025-65403: Buffer Copy without Checking Size of Input
A buffer overflow in the gcfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service DoS via a crafted input...
PT-2025-48489
Name of the Vulnerable Software and Affected Versions LightFTP version 2.0 Description A buffer overflow exists in the g cfg.MaxUsers component of the software. This flaw allows attackers to potentially cause a Denial of Service DoS by providing a specially crafted input. Recommendations At the...
CVE-2025-65403
A buffer overflow in the gcfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-65403
LightFTP version v2.0 is vulnerable to a buffer overflow in the g_cfg.MaxUsers component. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted input. No information regarding a patched version or official fix is currently provided in the documentation.
CVE-2025-65403
A buffer overflow in the gcfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-65403
A buffer overflow in the gcfg.MaxUsers component of LightFTP v2.0 allows attackers to cause a Denial of Service DoS via a crafted input...
EUVD-2017-1490
Malware in sbrugna...
EUVD-2023-28106
Malicious code in bioql PyPI...
CVE-2023-24042
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...
CVE-2017-1000218
LightFTP version 1.1 is vulnerable to a buffer overflow in the "writelogentry" function resulting a denial of services or a remote code execution...
CVE-2024-11144 Race Condition with LightFTP
The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the crash occurs during file upload or download, it...
CVE-2024-11144
CVE-2024-11144 affects LightFTP server (notably version 2.3 per CNNVD/NVD entries) with a lack of thread safety that allows an anonymous remote attacker to crash the FTP service by sending anomalous data. Consequences include FTP service unavailability, potential incomplete file transfers and dat...
CVE-2024-11144 Race Condition with LightFTP
The server lacks thread safety and can be crashed by anomalous data sent by an anonymous user from a remote network. The crash causes the FTP service to become unavailable, affecting all users and processes that rely on it for file transfers. If the crash occurs during file upload or download, it...
LightFTP 安全漏洞
LightFTP is a lightweight FTP service by hfiref0x individual developers. A security vulnerability exists in LightFTP version 2.3, which stems from a lack of thread security on the server and can be caused to crash by anomalous data sent by an anonymous user from a remote network...
LightFTP 1.1 Denial Of Service
!/usr/bin/perl use Net::FTP; Exploit Title: LightFTP 1.1 - Denial of Service DoS Discovery by: Fernando Mengali Discovery Date: 15 january 2024 Vendor Homepage: N/A Notification vendor: No reported Tested Version: LightFTP 1.1 Tested on: Window XP Professional - Service Pack 2 and 3 - English...
CVE-2023-24042
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...
Race condition
A race condition in LightFTP through 2.2 allows an attacker to achieve path traversal via a malformed FTP request. A handler thread can use an overwritten context-FileName...