TAU Threat Advisory: Imminent Ransomware threat to U.S. Healthcare and Public Health Sector

The Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency CISA issued a joint alert this week with regards to an imminent cybercrime threat to US hospitals and healthcare providers. The alert was coauthored by CISA, the Federal Bureau of Investigation FBI, and the...

conti-trans.de Cross Site Scripting vulnerability OBB-1345388

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

conti-trans.de Cross Site Scripting vulnerability OBB-1335874

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

US Criminal Court hit by Conti ransomware; critical data at risk

By Waqas Conti ransomware operators attacked the Fourth District Court of Louisiana and posted proof of attack on the Dark Web. This is a post from HackRead.com Read the original post: US Criminal Court hit by Conti ransomware; critical data at risk...

neumaticos-conti.com.ar XSS vulnerability

Vulnerable URL: http://www.neumaticos-conti.com.ar/www/neumaticosanes/Search.html?q=%22%3E%3Ciframe%2Fonload%3Dprompt%28%27XSSposed%27%29%3E=asSearch Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 10:15 GMT Vulnerability type:| XSS Vulnerabili...

conti-online.com XSS vulnerability

Vulnerable URL: http://www.conti-online.com/www/automotivekrkr/Search.html?q=%22%3E%3Ciframe%2Fonload%3Dprompt%28%27XSSposed%27%29%3E=asSearch Details: Description| Value ---|--- Patched:| Yes, at 30.11.2015 Latest check for patch:| 30.11.2015 10:12 GMT Vulnerability type:| XSS Vulnerability...

Command injection

Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...

CVE-2007-3492

Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...

CVE-2007-3492

The vulnerability CVE-2007-3492 affects Conti FtpServer 1.0, where remote authenticated users can trigger a denial of service (daemon crash) by sending a crafted string containing "//A:" in the LIST command argument. The connected documents provide the same description across NVD and CVE records ...

CVE-2007-3492

Conti FtpServer 1.0 allows remote authenticated users to cause a denial of service daemon crash via a certain string containing "//A:" in the argument to the LIST command...

contiftp-dos.txt

Conti FTP Server v1.0 Denial of Service author: 35c666 contact: : Download: http://www.procesualitatea.ro/bestplay/ContiFtpServerSetup.exe Bug: Conti Ftp Server crashes when a large //A: string is sent, denying legitimate users access to their accounts. greetz to all RST members at...

Conti FTP Server v1.0 DoS

Conti FTP Server v1.0 Denial of Service author: 35c666 contact: : Download: http://www.procesualitatea.ro/bestplay/ContiFtpServerSetup.exe Bug: Conti Ftp Server crashes when a large //A: string is sent, denying legitimate users access to their accounts. greetz to all RST members at...

Conti FTP Server DoS

LIST //A: request causes server to hang...

Conti FTP Server 1.0 - Large String Denial of Service

Conti FTP Server 1.0 - Large String Denial of Service source: https://www.securityfocus.com/bid/24672/info The Conti FTP Server is prone to a denial-of-service vulnerability. A remote attacker may be able to exploit this issue to deny service to legitimate users of the application. Conti FTP Serv...

Conti FTP Server 1.0 - Large String Denial of Service

source: https://www.securityfocus.com/bid/24672/info The Conti FTP Server is prone to a denial-of-service vulnerability. A remote attacker may be able to exploit this issue to deny service to legitimate users of the application. Conti FTP Server v1.0 Denial of Service author: 35c666 contact: :...

CVE-2006-6949

Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2006-6950

Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. dot dot in a filename argument...

CVE-2006-6949

Conti FTPServer 1.0 Build 2.8 stores user passwords in cleartext in MyServerSettings.ini, which allows local users to obtain sensitive information by reading this file...

CVE-2006-6950

The CVE-2006-6950 entry describes a directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8. The issue allows remote attackers to read arbitrary files and list arbitrary directories by providing a filename containing .. (dot dot). The available sources (NVD/NVD-linked entries) confirm ...

CVE-2006-6950

Directory traversal vulnerability in Conti FTPServer 1.0 Build 2.8 allows remote attackers to read arbitrary files and list arbitrary directories via a .. dot dot in a filename argument...