Information disclosure

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message...

CVE-2023-2991 Fortra Globalscape Administration Server Information Disclosure

Fortra Globalscape EFT's administration server suffers from an information disclosure vulnerability where the serial number of the harddrive that Globalscape is installed on can be remotely determined via a "trial extension request" message...

CVE-2023-2991

CVE-2023-2991 concerns Fortra Globalscape EFT: the admin server exposes the hard drive serial number via a Remote/TER (trial extension request) flow. Technical detail: the vulnerability is an information disclosure in the EFT administration interface, enabling remote retrieval of the server’s HDD...

CVE-2023-2990

CVE-2023-2990 affects Fortra Globalscape EFT Admin Server. Versions prior to 8.1.0.16 are vulnerable to a denial-of-service when a compressed DeflateStream packet is processed, because a specially crafted message decompresses to itself and can trigger recursion/heap issues, potentially crashing t...

CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service...

CVE-2023-2990 Fortra Globalscape Administration Server Denial of Service

Fortra Globalscape EFT versions before 8.1.0.16 suffer from a denial of service vulnerability, where a compressed message that decompresses to itself can cause infinite recursion and crash the service...

CVE-2023-2989

CVE-2023-2989 affects Fortra Globalscape EFT administration server prior to 8.1.0.16, due to an out-of-bounds memory read that can permit authentication bypass. Public details describe a blind read flaw in the EFT admin protocol, enabling a logged-in attacker to impersonate another user under cer...

CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...

CVE-2023-2989 Fortra Globalscape Administration Server Out of Bounds Memory Read

Fortra Globalscape EFT versions before 8.1.0.16 suffer from an out of bounds memory read in their administration server, which can allow an attacker to crash the service or bypass authentication if successfully exploited...

Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server [FIXED]

!Multiple Vulnerabilities in Fortra Globalscape EFT Administration Server \FIXED\https://blog.rapid7.com/content/images/2023/06/GettyImages-1345443906.jpg Earlier this year, Rapid7 researchers undertook a project to analyze managed file transfer applications, due to the number of recent...

PT-2023-22460 · Fortra · Fortra Globalscape Eft

Name of the Vulnerable Software and Affected Versions: Fortra Globalscape EFT versions prior to 8.1.0.16 Description: The issue is related to a denial of service, where a compressed message that decompresses to itself can cause infinite recursion, leading to a service crash. Recommendations: For...

Globalscape Enhanced File Transfer 缓冲区错误漏洞

Globalscape Enhanced File Transfer Globalscape EFT is a best-in-class Managed File Transfer MFT solution from Globalscape USA. A security vulnerability exists in Globalscape Enhanced File Transfer versions prior to 8.1.0.16 that stems from an out-of-bounds memory read issue that could cause the...

Prilex: the pricey prickle credit card complex

Prilex is a Brazilian threat actor that has evolved out of ATM-focused malware into modular point-of-sale malware. The group was behind one of the largest attacks on ATMs in the country, infecting and jackpotting more than 1,000 machines, while also cloning in excess of 28,000 credit cards that...

Threat Outbreak Alert RuleID16427: Email Messages Distributing Malicious Software on July 6, 2015

Medium Alert ID: 39668 First Published: 2015 July 7 19:20 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID16427 may contain the following files: Name | Size...