PT-2023-1431

Name of the Vulnerable Software and Affected Versions Fortra GoAnywhere MFT versions prior to 7.1.2 Description Fortra GoAnywhere MFT is susceptible to a pre-authentication command injection due to the deserialization of attacker-controlled objects within the License Response Servlet. The Clop...

Fortra GoAnywhere MFT Unsafe Deserialization RCE

This module exploits CVE-2023-0669, which is an object deserialization vulnerability in Fortra GoAnywhere MFT. Module Options msf use exploit/multi/http/fortra/goanywherercecve20230669 msf undefinedgoanywherercecve20230669 show actions ...actions... msf undefinedgoanywherercecve20230669 set ACTIO...

PT-2023-33546 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 6.0.17 Description: A potential issue exists in the fs/ntfs3 component, specifically in the ntfs read mft function, where a duplicate condition is deleted. The actual impact and attack plausibility of this issue...

Velociraptor Version 0.6.7: Better Offline Collection, Encryption, and an Improved NTFS Parser Dig Deeper Than Ever

By Mike Cohen and Carlos Canto Rapid7 is excited to announce the release of version 0.6.7 of Velociraptor – an advanced, open-source digital forensics and incident response DFIR tool that enhances visibility into your organization’s endpoints. This release has been in development and testing for...

PT-2022-33391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15 through v5.19.3 Description: A potential security issue has been identified in the Linux Kernel, related to the ntfs read mft function. The actual impact and attack plausibility have not yet been proven...

CVE-2021-46830

A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a...

Path traversal

A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a...

CVE-2021-46830

A path traversal vulnerability exists within GoAnywhere MFT before 6.8.3 that utilize self-registration for the GoAnywhere Web Client. This vulnerability could potentially allow an external user who self-registers with a specific username and/or profile information to gain access to files at a...

CVE-2021-46830

The CVE-2021-46830 issue affects HelpSystems GoAnywhere MFT, specifically the Web Client self-registration feature. A path traversal vulnerability exists in GoAnywhere MFT versions prior to 6.8.3, where an external user who self-registers with a crafted username and/or profile information could a...

PT-2022-12936 · Unknown · Goanywhere Mft

Name of the Vulnerable Software and Affected Versions: GoAnywhere MFT versions prior to 6.8.3 Description: A path traversal issue exists that could allow an external user who self-registers with specific username and/or profile information to access files at a higher directory level than intended...

A crafted NTFS image can cause a heap-based buffer overflow in ntfs_mft_rec_alloc in NTFS-3G through 2021.8.22.

...

Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2022-82646)

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for reading and writing to NTFS partitions. tuxera NTFS-3G is vulnerable to a buffer overflow vulnerability that originates from a boundary error in ntfsmftrecalloc when handling untrusted input, which can be...

ALPINE-CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22...

UBUNTU-CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22...

CVE-2022-30788

A crafted NTFS image can cause a heap-based buffer overflow in ntfsmftrecalloc in NTFS-3G through 2021.8.22...

Tuxera NTFS-3G 缓冲区错误漏洞

Tuxera NTFS-3G is an open source, cross-platform set of drivers from Tuxera Finland for reading and writing to NTFS partitions. tuxera NTFS-3G is vulnerable to a buffer overflow vulnerability that originates from a boundary error in ntfsmftrecalloc when handling untrusted input, which can be...

CVE-2022-22774 TIBCO Managed File Transfer Command Center XXE Vulnerability

The DOM XML parser and SAX XML parser components of TIBCO Software Inc.'s TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Command Center, TIBCO Managed File Transfer Internet Server, and TIBCO Managed File Transfer Internet Server contains an easily exploitable vulnerabili...

CVE-2022-22774

The CVE-2022-22774 issue affects TIBCO Managed File Transfer Command Center and TIBCO Managed File Transfer Internet Server. The root cause is an XXE (XML External Entity) vulnerability in the DOM XML parser and SAX XML parser components, exploitable by an unauthenticated attacker with network ac...

ntfs-3g: Heap buffer overflow triggered by a specially crafted MFT section

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing the MFT, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

ntfs-3g: Out-of-bounds heap buffer access in ntfs_get_attribute_value() due to incorrect check of bytes_in_use value in MFT records

The ntfs3g package is susceptible to a heap overflow on crafted input. When processing NTFS attributes, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...