UBUNTU-CVE-2021-41054

tftpdfile.c in atftp through 0.7.4 has a buffer overflow because buffer-size handling does not properly consider the combination of data, OACK, and other options...

Dlink DSL2750U Command Injection

Exploit Title: Dlink DSL2750U - 'Reboot' Command Injection Date: 17-06-2021 Exploit Author: Mohammed Hadi HadiMed Vendor Homepage: https://me.dlink.com/consumer Software Link: https://dlinkmea.com/index.php/product/details?det=c0lvN0JoeVVhSXh4TVhjTnd1OUpUUT09 Version: ME1.16 Tested on: firmware...

Exploit for External Control of System or Configuration Setting in Dlink Dsl-2750U_Firmware

firmware-analysis 1. DS...

Exploit for External Control of System or Configuration Setting in Dlink Dsl-2750U_Firmware

firmware-analysis 1. DS...

SolarWinds TFTP Server 11.0.4.101 Remote Unauthenticated Reconfiguration Vulnerability

SolarWinds TFTP Server version 11.0.4.101 suffers from a remote unauthenticated reconfiguration vulnerability that could result in code execution. Older versions of SolarWinds' TFTP Server, which could have been installed from a standalone download or bundled with certain paid products, may have...

NETGEAR JGS516PE/GS116Ev2 Firmware Update Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A firmware update vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP server being active by default. An attacker could exploit this vulnerability to update the...

NETGEAR JGS516PE/GS116Ev2 Denial of Service Vulnerability

The NETGEAR JGS516PE/GS116Ev2 is a 16-port Gigabit Smart Managed Plus switch. A denial of service vulnerability exists in the NETGEAR JGS516PE/GS116Ev2 version 2.6.0.43. The vulnerability stems from the TFTP server not being able to handle multiple connections. An attacker could exploit the...

Code injection

The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a denial of service attack...

CVE-2020-35233

The CVE-2020-35233 issue affects NETGEAR JGS516PE/GS116Ev2 switches (version 2.6.0.43). The root cause is the TFTP server’s inability to properly handle multiple concurrent connections, which can be exploited to trigger a denial-of-service resulting in device reboots. Publicly documented details ...

CVE-2020-35233

The TFTP server fails to handle multiple connections on NETGEAR JGS516PE/GS116Ev2 v2.6.0.43 devices, and allows external attackers to force device reboots by sending concurrent connections, aka a denial of service attack...

CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to...

CVE-2020-35801

Affected devices: NETGEAR ProSAFE switches JGS516PE, JGS524Ev2, JGS524PE, and GS116Ev2 (pre-2.6.0.48). Description: incorrect configuration of security settings leaves a TFTP server active by default, allowing remote authenticated users to update the switch firmware. Impact: potential unauthorize...

CVE-2020-35801

Certain NETGEAR devices are affected by incorrect configuration of security settings. This affects JGS516PE before 2.6.0.48, JGS524Ev2 before 2.6.0.48, JGS524PE before 2.6.0.48, and GS116Ev2 before 2.6.0.48. A TFTP server was found to be active by default. It allows remote authenticated users to...

EulerOS 2.0 SP8 : libssh (EulerOS-SA-2020-2517)

According to the version of the libssh package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - libssh 0.9.4 has a NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL.CVE-2020-16135 Note that Tenable Network Security has...

CVE-2020-26130

Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...

CVE-2020-26130

Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...

Design/Logic Flaw

Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...

PT-2020-16304 · Multithreaded Studios · Open Tftp Server

Name of the Vulnerable Software and Affected Versions: Open TFTP Server multithreaded version 1.66 Open TFTP Server single port version 1.66 Description: The issue is related to insufficient access restrictions in the default installation directory of Open TFTP Server, allowing an attacker to...

CVE-2020-26130

Issues were discovered in Open TFTP Server multithreaded 1.66 and Open TFTP Server single port 1.66. Due to insufficient access restrictions in the default installation directory, an attacker can elevate privileges by replacing the OpenTFTPServerMT.exe or the OpenTFTPServerSP.exe binary...

CVE-2020-26130

CVE-2020-26130 affects Open TFTP Server 1.66 in both multithreaded and single-port builds. The root cause is insufficient access restrictions in the default installation directory, enabling privilege escalation by replacing the OpenTFTPServerMT.exe (multithreaded) or OpenTFTPServerSP.exe (single-...