CVE-2016-3728

Summary: CVE-2016-3728 describes an eval-injection in Foreman’s Smart-Proxy TFTP module (tftp_api.rb) that allows an attacker to execute arbitrary code via the PATH_INFO PXE template type. Affected: Foreman/Smart-Proxy prior to 1.10.4 and 1.11.x prior to 1.11.2. Impact: remote code execution with...

CVE-2016-3728

It was found that the “variant” parameter in the TFTP API of Foreman was passed to the eval function. An attacker could possibly use this flaw to execute arbitrary code with the privileges of the Foreman user...

Cisco IOS Software TFTP Server Denial of Service Vulnerability (cisco-sa-20150722-tftp)

A vulnerability in the TFTP server feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

TallSoft SNMP TFTP Server 1.0.0 DoS Vulnerability - Active Check

TallSoft SNMP TFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

TallSoft SNMP TFTP Server 1.0.0 Denial Of Service

Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TFTP Server 2.2 DoS...

TallSoft SNMP/TFTP Server 1.0.0 - Denial of Service

Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TFTP Server 2.2 DoS...

TallSoft SNMPTFTP Server 1.0.0 - Denial of Service

TallSoft SNMPTFTP Server 1.0.0 - Denial of Service Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TF...

TallSoft SNMP/TFTP Server 1.0.0 - Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: TallSoft SNMP TFTP Server 1.0.0 - DoS Date: 28-03-2016 Software Link: http://www.tallsoft.com/snmptftpserver.exe Exploit Author: Charley Celice stmerry Contact: https://twitter.com/charleycelice Credits: Based off TallSoft Quick TF...

HPSBGN3547 rev.2 - HP Device Manager, Remote Read Access to Arbitrary Files

Potential Security Impact Remote read access to arbitrary files. Source: HP, HP Product Security Response Team PSRT VULNERABILITY SUMMARY Directory traversal vulnerability in the TFTP Server 1.0.0.24 in Ipswitch WhatsUp Gold allows remote attackers to read arbitrary files via a .. dot dot in the...

Quick Tftp Server 2.3 Read Mode DoS Vulnerability - Active Check

Quick Tftp Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Quick Tftp Server Pro 2.3 - Read Mode Denial of Service

Exploit Title: Quick Tftp Server Pro 2.3 TFTP mode Remote Overflow DoS Date: 21/01/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage: http://www.tallsoft.com/tftpserver.htm Software Link:...

Quick Tftp Server Pro 2.3 - Read Mode Denial of Service

Exploit for windows platform in category dos / poc Exploit Title: Quick Tftp Server Pro 2.3 TFTP mode Remote Overflow DoS Date: 21/01/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage:...

Quick Tftp Server Pro 2.3 - Read Mode Denial of Service

Quick Tftp Server Pro 2.3 - Read Mode Denial of Service Exploit Title: Quick Tftp Server Pro 2.3 TFTP mode Remote Overflow DoS Date: 21/01/2016 Exploit Author: Guillaume Kaddouch Twitter: @gkweb76 Blog: https://networkfilter.blogspot.com GitHub: https://github.com/gkweb76/exploits Vendor Homepage...

[SECURITY] Fedora 22 Update: mingw-curl-7.47.0-1.fc22

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

CVE-2015-6403

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400...

Information disclosure

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400...

CVE-2015-6403

The CVE-2015-6403 issue affects Cisco Small Business SPA30x, SPA50x, and SPA51x IP Phones (firmware 7.5.7). The root cause is inadequate file integrity checks during firmware image validation in the TFTP implementation, enabling a local attacker with shell access to load a Trojan horse image onto...

CVE-2015-6403

The TFTP implementation on Cisco Small Business SPA30x, SPA50x, SPA51x phones 7.5.7 improperly validates firmware-image file integrity, which allows local users to load a Trojan horse image by leveraging shell access, aka Bug ID CSCut67400...

Multiple Cisco IP Phones Firmware Image Upload Vulnerability

A vulnerability in the TFTP implementation of the Cisco Small Business SPA30X and SPA50X IP Phones could allow an unauthenticated, local attacker to load arbitrary firmware images onto the affected device. The vulnerability is due to insufficient file integrity checks of the firmware image. An...

Oracle: Security Advisory (ELSA-2009-1238)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...