CVE-2022-44215

介绍 一个影响 Titan FTP 网络服务器的新漏洞被发现，编号为 CVE-2022-44215。Titan FTP 是由 South River Technologies 开发的商业软件，实现了用于文件共享的 FTP 协议。在其 HTTPS 版本 19.X 及更早版本中，已被证实存在 Open Redirection 漏洞。 描述 开放重定向漏洞是由于服务器未能正确清理用户输入所致。因此，服务器在重定向时直接使用用户提供的输入而未进行清理（白名单/黑名单）。在这种情况下，当 URL 中出现反斜杠 \ 时，Titan FTP 服务器会执行重定向。无论反斜杠是明文形式还是 URL...

EUVD-2008-0735

Malware in sbrugna...

EUVD-2008-5258

Malware in sbrugna...

EUVD-2004-1635

Malware in sbrugna...

EUVD-2004-0436

Malware in sbrugna...

EUVD-2019-2074

Malware in sbrugna...

EUVD-2022-47165

Malicious code in bioql PyPI...

EUVD-2022-37038

Malicious code in bioql PyPI...

CVE-2022-34005

An issue was discovered in TitanFTP aka Titan FTP NextGen before 1.2.1050. There is Remote Code Execution due to a hardcoded password for the sa account on the Microsoft SQL Express 2019 instance installed by default during TitanFTP NextGen installation, aka NX-I674 sub-issue 1. NOTE: as of...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

CVE-2008-5281

Heap-based buffer overflow in Titan FTP Server 6.05 build 550 allows remote attackers to execute arbitrary code via a long DELE command...

Titan FTP Administrative Password Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Titan FTP Administrative Password Disclosure', 'Description' = %q On Titan FTP servers prior to version 9.14.1628, an...

Titan FTP XCRC Directory Traversal Information Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Titan FTP XCRC Directory Traversal Information Disclosure', 'Description' = %q This module exploits a directory traversal vulnerability in the XC...

Titan FTP Server 6.26.630 SITE WHO Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Titan FTP Server 6.26.630 SITE WHO DoS', 'Description' = %q The Titan FTP server v6.26 build 630 can be DoS'd by issuing "SITE WHO". You need a...

Titan FTP Server Detection (HTTP)

HTTP based detection of Titan FTP Server. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.170552"...

Titan FTP Server Detection Consolidation

Consolidation of Titan FTP Server detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

Open redirect

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

Titan FTP server 输入验证错误漏洞

Titan FTP Server is an FTP file transfer server. A security vulnerability exists in Titan FTP server version 19.0 and prior versions that stems from an open redirection issue that allows an attacker to redirect users to arbitrary URLs...