Lucene search
+L

459 matches found

OSV
OSV
•added 2017/11/15 4:29 p.m.•19 views

CVE-2017-15269

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server...

4.3CVSS5.8AI score0.015EPSS
SaveExploits4References3
NVD
NVD
•added 2017/11/15 4:29 p.m.•29 views

CVE-2017-15269

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server...

4.3CVSS4.7AI score0.015EPSS
SaveExploits4References3
Cvelist
Cvelist
•added 2017/11/15 4:00 p.m.•50 views

CVE-2017-15269

The PSFTPd 10.0.4 Build 729 server does not prevent FTP bounce scans by default. These can be performed using "nmap -b" and allow performing scans via the FTP server...

4.9AI score0.015EPSS
SaveExploits4References3
zdt
zdt
•added 2017/11/15 12:00 a.m.•84 views

PSFTPd Windows FTP Server 10.0.4 Build 729 - Log Injection / Use-After-Free Vulnerability

Exploit for windows platform in category dos / poc Multiple Vulnerabilities in PSFTPd Windows FTP Server ===================================================== Overview -------- Confirmed Affected Versions: 10.0.4 Build 729 Confirmed Patched Versions: None Vendor: Sergei Pleis Softwareentwicklung...

5CVSS4.9AI score0.08742EPSS
SaveExploits4
Packet Storm
Packet Storm
•added 2017/11/10 12:00 a.m.•87 views

PSFTPd Windows FTP Server 10.0.4 Build 729 Use-After-Free / Log Injection

X41 D-Sec GmbH Security Advisory: X41-2017-006 Multiple Vulnerabilities in PSFTPd Windows FTP Server ===================================================== Overview -------- Confirmed Affected Versions: 10.0.4 Build 729 Confirmed Patched Versions: None Vendor: Sergei Pleis Softwareentwicklung Vend...

5.6AI score0.08742EPSS
SaveExploits4
Broadcom
Broadcom
•added 2017/05/02 12:00 a.m.•16 views

BSA-2017-269

Security Advisory ID : BSA-2017-269 Component : OpenSSH Revision : 1.0: Interim The default configuration forOpenSSHenablesAllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such asAnonCVS. Affected Products...

6.4CVSS6.8AI score0.11574EPSS
SaveExploits0
OpenVAS
OpenVAS
•added 2017/02/07 12:00 a.m.•42 views

Debian: Security Advisory (DSA-3783-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.41943EPSS
SaveExploits1References3
NVD
NVD
•added 2017/02/01 3:59 p.m.•32 views

CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

5.9CVSS5.5AI score0.03098EPSS
SaveExploits0References6
OSV
OSV
•added 2017/02/01 3:59 p.m.•9 views

DEBIAN-CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

5.9CVSS9.5AI score0.03098EPSS
SaveExploits0References1
Prion
Prion
•added 2017/02/01 3:59 p.m.•35 views

Code injection

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

2.6CVSS6.9AI score0.03098EPSS
SaveExploits0References6Affected Software3
Debian CVE
Debian CVE
•added 2017/02/01 3:00 p.m.•33 views

CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

5.9CVSS5.9AI score0.03098EPSS
SaveExploits0
CVE
CVE
•added 2017/02/01 3:00 p.m.•129 views

CVE-2016-9963

Exim (mail transfer agent) is affected by CVE-2016-9963. Exim before 4.87.1 may leak the private DKIM signing key to log files via vectors related to log files and bounce messages. The leakage is contingent on specific configurations and log access, enabling an attacker with log access to obtain ...

5.9CVSS4.8AI score0.03098EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2016/12/16 12:00 a.m.•13 views

UBUNTU-CVE-2016-9963

Exim before 4.87.1 might allow remote attackers to obtain the private DKIM signing key via vectors related to log files and bounce messages...

5.9CVSS6.6AI score0.03098EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2016/12/15 12:00 a.m.•43 views

exim -- DKIM private key leak

The Exim project reports: Exim leaks the private DKIM signing key to the log files. Additionally, if the build option EXPERIMENTALDSNINFO=yes is used, the key material is included in the bounce message...

5.9CVSS1.7AI score0.03098EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2016/10/12 12:00 a.m.•15 views

VulnCheck KEV: CVE-2004-1653

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...

6.4CVSS7.4AI score0.11574EPSS
SaveIn wildExploits0References2
Openbugbounty
Openbugbounty
•added 2016/08/09 8:51 p.m.•10 views

onlywire.com Open Redirect vulnerability

Vulnerable URL: http://onlywire.com/bounce?t=http://www.openbugbounty.org Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 38606 VIP website status:| Yes Check onlywire.com...

6.8AI score
SaveExploits0
hackapp
hackapp
•added 2016/04/01 10:00 a.m.•17 views

PAC-MAN Bounce - Base64 encoded String, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application PAC-MAN Bounce published at the 'play' market has multiple vulnerabilities...

SaveExploits0References1Affected Software1
hackapp
hackapp
•added 2016/04/01 9:46 a.m.•16 views

Bounce - Customized SSL, WebView SSL handling enabled, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Bounce published at the 'play' market has multiple vulnerabilities...

1AI score
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
•added 2015/10/30 9:17 a.m.•24 views

CVE-2004-1653

The default configuration for OpenSSH enables AllowTcpForwarding, which could allow remote authenticated users to perform a port bounce, when configured with an anonymous access program such as AnonCVS...

6.4CVSS7AI score0.11574EPSS
SaveExploits0References2
securityvulns
securityvulns
•added 2015/05/11 12:00 a.m.•60 views

Filezilla FTP server bounce attack

DATA connection IP address is not restricted...

2.4AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder