88 matches found
SystemVulnerabilityChecklist_Project4_Decodelabs
🔐 Lista de Verificación de Vulnerabilidades del Sistema Un ejercicio de evaluación de seguridad y endurecimiento de red realizado contra una máquina Linux objetivo vulnerable. El proyecto se centra en identificar vulnerabilidades críticas, evaluar su impacto e implementar mitigación basada en...
CVE-2015-3306-Home-Lab
ProFTPD 1.3.5 modcopy — Laboratorio de Simulación de RCE Este laboratorio está diseñado para simular la vulnerabilidad CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE Se utiliza para aprender Web Shell Injection RCE a través del módulo modcopy de ProFTPD Características ProFTPD 1.3.5...
CVE-2018-17873
CVE-2018-17873 Los routers indoor de WiFiRanger Core, GoAC y sus routers outdoor emparejados Sky Pro, EliteAC, EliteAC FM que ejecutan la versión de firmware 7.0.8rc3 y anteriores permiten acceso anónimo de lectura/escritura por FTP y han dejado la clave privada SSH en texto claro, lo que hace...
PT-2026-89500
Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...
[SECURITY] Fedora 44 Update: proftpd-1.3.9a-2.fc44
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...
EUVD-2007-1725
Malware in sbrugna...
EUVD-2001-0778
Malware in sbrugna...
EUVD-2004-1884
Malware in sbrugna...
EUVD-1999-0525
Malware in sbrugna...
EUVD-2001-1394
Malware in sbrugna...
EUVD-1999-1392
Malware in sbrugna...
EUVD-1999-0496
Malware in sbrugna...
CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild
A recently disclosed maximum-severity security flaw impacting the Wing FTP Server has come under active exploitation in the wild, according to Huntress. The vulnerability, tracked as CVE-2025-47812 CVSS score: 10.0, is a case of improper handling of null '\0' bytes in the server's web interface,...
VulnCheck KEV: CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
CVE-2024-36443
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP...