Maxum Rumpus FTP Server 跨站请求伪造漏洞

Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site request forgery vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from cross-site request forgery...

EUVD-2019-9271

Malware in sbrugna...

EUVD-2019-9269

Malware in sbrugna...

EUVD-2001-0692

Malware in sbrugna...

EUVD-2019-9270

Malware in sbrugna...

EUVD-2019-9272

Malware in sbrugna...

EUVD-2019-9280

Malware in sbrugna...

EUVD-2022-49178

Malicious code in bioql PyPI...

EUVD-2022-41732

Malicious code in bioql PyPI...

EUVD-2022-49179

Malicious code in bioql PyPI...

CVE-2019-19670

A HTTP Response Splitting vulnerability was identified in the Web Settings Component of Web File Manager in Rumpus FTP Server 8.2.9.1. A successful exploit can result in stored XSS, website defacement, etc. via ExtraHTTPHeader to RAPR/WebSettingsGeneralSet.html...

CVE-2019-19662

A CSRF vulnerability exists in the Web File Manager's Create/Delete Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can Create and Delete accounts via RAPR/TriggerServerFunction.html...

CVE-2019-19659

A CSRF vulnerability exists in the Web File Manager's Edit Accounts functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can take over a user account by changing the password, update users' details, and escalate privileges via RAPR/DefineUsersSet.html...

CVE-2019-19660

A CSRF vulnerability exists in the Web File Manager's Network Setting functionality of Rumpus FTP Server 8.2.9.1. By exploiting it, an attacker can manipulate the SMTP setting and other network settings via RAPR/NetworkSettingsSet.html...

CVE-2019-19661

A Cookie based reflected XSS exists in the Web File Manager of Rumpus FTP Server 8.2.9.1, related to RumpusLoginUserName and snp...

CVE-2022-46370

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification...

CVE-2022-46368

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery CSRF – vulnerability may allow unauthorized action on behalf of authenticated users...

CVE-2022-46368

Rumpus - FTP server version 9.0.7.1 Cross-site request forgery CSRF – vulnerability may allow unauthorized action on behalf of authenticated users...

Cross site scripting

Rumpus - FTP server version 9.0.7.1 Persistent cross-site scripting PXSS – vulnerability may allow inserting scripts into unspecified input fields...

Design/Logic Flaw

Rumpus - FTP server version 9.0.7.1 Improper Token Verification– vulnerability may allow bypassing identity verification...