PCMan FTP Server CCC Command Handler Buffer Overflow Vulnerability

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from CCC Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...

CVE-2025-3374

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component CCC Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public a...

CVE-2025-3374 PCMan FTP Server CCC Command buffer overflow

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component CCC Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public a...

CVE-2025-3374

CVE-2025-3374 affects PCMan FTP Server 2.0.7, specifically the CCC Command Handler. The issue is described as a buffer overflow in an input validation failure, with the attack potentially executable remotely and exploit disclosed publicly. Several connected sources corroborate a critical vulnerab...

PCMan FTP Server 安全漏洞

PCMan FTP Server is PCMan open source set of FTP software. PCMan FTP Server suffers from a buffer overflow vulnerability that originates from CCC Command Handler failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...

PT-2025-15268 · Unknown · Pcman Ftp Server

Name of the Vulnerable Software and Affected Versions: PCMan FTP Server version 2.0.7 Description: A critical vulnerability was found in PCMan FTP Server, affecting an unknown functionality of the CCC Command Handler component. The manipulation leads to a buffer overflow, and the attack can be...

Juniper Junos OS Vulnerability (JSA75732)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA75732 advisory. - An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an...

CVE-2024-21593 Junos OS: MX Series with MPC10, MPC11, LC9600, and MX304: A specific MPLS packet will cause a PFE crash

An Improper Check or Handling of Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to cause a Denial of Service DoS. If an attacker sends a specific MPLS packet, which upon...

ccc-web.net Cross Site Scripting vulnerability OBB-3883951

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

OESA-2023-1193 curl security update

cURL is a computer software project providing a library libcurl and command-line tool curl for transferring data using various protocols. Security Fixes: libcurl keeps previously used connections in a connection pool for subsequent transfers to reuse if one of them matches the setup. However,...

CVE-2023-21040

In buildCommand of bluetoothccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Google Pixel 安全漏洞

Google Pixel, a smartphone from Google, is vulnerable to a logic error in the buildCommand of bluetoothccc.cc, which can be exploited to cause elevation of privileges...

PUB-A-238420277

In buildCommand of bluetoothccc.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

h1-ctf: ccc ctf

██████████ will send detailed report later Impact can get admin credentials...

Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities

Document Title: =============== Cyberoam CC v02.03.1 - Multiple Persistent Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1721 Cyberoam Ticket ID: 1001314 Case ID: CCC-4208 Release Date: ============= 2016-04-18 Vulnerability Laboratory ...

Bugzilla Vulnerability Exposes Bug Collections

Hundreds of open source software projects that make use of Bugzilla, Mozilla’s bug-tracking software, anxiously await a patch for a vulnerability that exposes private bugs collected by the system. Mozilla is today expected to make available a patch for the vulnerability in its account creation...

CVE-2012-1047

CVE-2012-1047 describes a directory traversal vulnerability in the WWWHELP Service (js/html/wwhelp.htm) of Cyberoam Central Console (CCC) 2.00.2 . The flaw allows remote attackers to include and execute arbitrary local files by using a “..” in the file parameter of an Online_help action. This is ...

Unfixed XSS vulnerability at www.interes.top.ge

Security researcher CCC, has submitted on 30/01/2011 a cross-site-scripting XSS vulnerability affecting www.interes.top.ge, which at the time of submission ranked 26537 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.oclc.dk

Security researcher CCC, has submitted on 25/06/2010 a cross-site-scripting XSS vulnerability affecting www.oclc.dk, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is currently unfixed. I...

Unfixed XSS vulnerability at ddrn.dk

Security researcher CCC, has submitted on 25/06/2010 a cross-site-scripting XSS vulnerability affecting ddrn.dk, which at the time of submission ranked 4815516 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/11/2010. It is currently unfixed...