325 matches found
EulerOS Virtualization 2.11.0 : libssh2 (EulerOS-SA-2024-1629)
According to the versions of the libssh2 package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attacke...
CVE-2024-22910
Cross Site Scripting XSS vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload...
CVE-2024-22910
Cross Site Scripting XSS vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload...
CrushFTP 安全漏洞
CrushFTP is a file transfer server. A security vulnerability exists in CrushFTP version v.10.6.0 and v.10.5.5, which stems from the presence of a cross-site scripting XSS vulnerability that allows attackers to execute arbitrary code via a crafted payload...
CrushFTP Directory Traversal
Exploit Title: CrushFTP Directory Traversal Google Dork: N/A Date: 2024-04-30 Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://www.crushftp.com/ Software Link: https://www.crushftp.com/download/ Version: below 10.7.1 and 11.1.0 as well as legacy 9.x Tested...
Exploit for Code Injection in Crushftp
CVE-2024-4040 PoC Python exploit for CVE-2024-4040 Descri...
CrushFTP < 11.1.0 - Directory Traversal Exploit
Exploit Title: CrushFTP Directory Traversal Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://www.crushftp.com/ Software Link: https://www.crushftp.com/download/ Version: below 10.7.1 and 11.1.0 as well as legacy 9.x Tested on: Windows10 import requests...
CrushFTP < 11.1.0 - Directory Traversal
Exploit Title: CrushFTP Directory Traversal Google Dork: N/A Date: 2024-04-30 Exploit Author: Abdualhadi khalifa https://twitter.com/absholily Vendor Homepage: https://www.crushftp.com/ Software Link: https://www.crushftp.com/download/ Version: below 10.7.1 and 11.1.0 as well as legacy 9.x Tested...
Metasploit Wrap-Up 05/10/2024
Password Spraying support Multiple bruteforce/login scanner modules have been updated to support a PASSWORDSPRAY module option. This work was completed in pull request 19079 from nrathaus as well as an additional update from our developers . When the password spraying option is set, the order of...
CVE-2024-22910
Cross Site Scripting XSS vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload...
CVE-2024-22910
CrushFTP contains a Cross Site Scripting (XSS) vulnerability that could allow an attacker to execute arbitrary code via a crafted payload affecting CrushFTP versions 10.5.5 through 10.6.0. The issue's root cause is tied to an XSS flaw in these versions, with the PT-2024-19606 advisory recommendin...
CVE-2024-22910
Cross Site Scripting XSS vulnerability in CrushFTP v.10.6.0 and v.10.5.5 allows an attacker to execute arbitrary code via a crafted payload...
PT-2024-19606 · Crushftp · Crushftp
Name of the Vulnerable Software and Affected Versions: CrushFTP versions 10.5.5 through 10.6.0 Description: A Cross Site Scripting XSS issue allows an attacker to execute arbitrary code via a crafted payload. Recommendations: For CrushFTP versions 10.5.5 through 10.6.0, update to a version that...
Exploit for Code Injection in Crushftp
CVE-2024-4040 A server side template injection vulnerability i...
Exploit for Code Injection in Crushftp
CVE-2024-4040: CrushFTP File Read Vulnerability Overview...
CrushFTP Zero-Day Exploitation Due to CVE-2024-4040
Vulnerability Scope & Details CrushFTP disclosed a zero-day vulnerability in their software on April 19, 2024. The vulnerability is published on CVE-2024-4040. Affected versions: 9.x versions before 10.7.1 11.1.0 The CVSS score is 9.8. The vulnerability allows remote attackers to bypass the VFS...
Exploit for Code Injection in Crushftp
Exploit Code for CVE-2024-4040 Overview This exploit code t...
Exploit for Code Injection in Crushftp
CVE-2024-4040-CrushFTP-server CrushFTP is a proprietary multi...
