CVE-2026-20298 Sensitive Information Disclosure through the storage/passwords REST Endpoint in Splunk Enterprise

In Splunk Enterprise versions below 10.4.1, 10.2.5, 10.0.8, and 9.4.13, and Splunk Cloud Platform versions below 10.5.2605.0, 10.4.2604.6, 10.3.2512.15, 10.2.2510.18, and 10.1.2507.24, a low-privileged user that does not hold the 'admin' or 'power' Splunk roles could view stored credential hashes...

EUVD-2025-122579

Malicious code in rest-command-callback-command npm...

EUVD-2000-0641

Malware in sbrugna...

EUVD-2025-15700

Malicious code in bioql PyPI...

CVE-2025-4871

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-4871 PCMan FTP Server REST Command buffer overflow

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...

CVE-2025-4871

CVE-2025-4871 describes a buffer overflow in PCMan FTP Server 2.0.7’s REST Command Handler, caused by improper validation of input length/size. The issue is exploitable remotely over the network with no authentication or user interaction required, and is asserted to have public exploit activity i...

CVE-2025-4871: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the...

Information disclosure

Azure CLI REST Command Information Disclosure Vulnerability...

PT-2023-23976 · Splunk · Splunk Cloud Platform +1

Name of the Vulnerable Software and Affected Versions: Splunk Enterprise versions prior to 9.0.5 Splunk Enterprise versions prior to 8.2.11 Splunk Enterprise versions prior to 8.1.14 Splunk Cloud Platform versions prior to 9.0.2303.100 Description: A low-privileged user can trigger an HTTP respon...

WFTPD 2.4.1RC11 REST Command Malformed File Write DoS

No description provided by source. source: http://www.securityfocus.com/bid/1506/info WFTPD versions prior to 2.4.1RC11 suffer from a number of vulnerabilities. 1 Issuing a STAT command while a LIST is in progress will cause the ftp server to crash. 2 If the REST command is used to write past the...

HP-UX FTPD 1.1.214 .4 REST Command Memory Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7825/info A vulnerability has been discovered in the HP-UX 11 ftpd daemon. The problem can be triggered using the FTP REST command. By specifying a specially calculated numeric argument to the command, it is possible to...

Cerberus FTP Server 4.0.9.8 (REST) Remote BOF and Crash

Exploit for windows platform in category remote exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0...

Cerberus FTP Server 4.0.9.8 Buffer Overflow

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

FreeFloat FTP Server REST Buffer Overflow

require 'msf/core' class Metasploit3 'FreeFloat FTP Server REST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the REST command. , 'Author' = 'C4SS!0 G0M3S', Discovery Vuln. 'KaHPeSeSe' Metasploit Module , 'License' = MSFLICENSE, 'Version...

Freefloat FTP Server - REST Remote Buffer Overflow (Metasploit)

Freefloat FTP Server - REST Remote Buffer Overflow Metasploit require 'msf/core' class Metasploit3 'FreeFloat FTP Server REST Buffer Overflow', 'Description' = %q This module exploits a FreeFloat FTP Server Buffer Overflow found in the REST command. , 'Author' = 'C4SS!0 G0M3S', Discovery Vuln...

CVE-2006-6775

acFTP 1.5 allows remote authenticated users to cause a denial of service via a crafted argument to the 1 REST or 2 PBSZ command...

acFTP FTP Server DoS

Crash on REST command with invalid argument...

CVE-2004-1848

Ipswitch WS_FTP Server 4.0.2 is affected by a remote denial-of-service vulnerability involving a REST command with an oversized size argument, followed by a STOR of a smaller file, which can cause disk consumption and bypass file-size restrictions. The issue is documented under CVE-2004-1848; rel...

HP-UX FTPD <= 1.1.214.4 ""REST"" Remote Brute Force Exploit

No description provided by source. / Author: phased /str0ke / include sys/types.h include sys/socket.h include netinet/in.h include arpa/inet.h include netdb.h include stdio.h include unistd.h int main int argc, char argv int sock, rc; long int i; struct sockaddrin saddr; struct hostent h; char...