EUVD-2017-8872

Malware in sbrugna...

EUVD-2017-14745

Malware in sbrugna...

PT-2023-19375

Name of the Vulnerable Software and Affected Versions LightFTP versions 1.0 through 2.2 LightFTP version 2.2 Description A race condition in the software allows an attacker to achieve path traversal via a malformed FTP request. This occurs because a handler thread can use an overwritten...

CVE-2020-35284

Flamingo aka FlamingoIM through 2020-09-29 allows ../ directory traversal because the only ostensibly unpredictable part of a file-transfer request is an MD5 computation; however, this computation occurs on the client side, and the computation details can be easily determined because the product'...

PT-2020-17309

Name of the Vulnerable Software and Affected Versions Flamingo aka FlamingoIM through 2020-09-29 Description The issue allows for ../ directory traversal. This is possible because the only unpredictable part of a file-transfer request, an MD5 computation, occurs on the client side. Since the...

CVE-2019-8273: Heap-based Buffer Overflow

UltraVNC revision 1211 has a heap buffer overflow vulnerability in VNC server code inside file transfer request handler, which can potentially result in code execution. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

CVE-2019-8276: Stack-based Buffer Overflow

UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service DoS. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

CVE-2019-8276

UltraVNC revision 1211 has a stack buffer overflow vulnerability in VNC server code inside file transfer request handler, which can result in Denial of Service DoS. This attack appears to be exploitable via network connectivity. This vulnerability has been fixed in revision 1212...

PT-2019-5274

Name of the Vulnerable Software and Affected Versions UltraVNC versions prior to revision 1212 Description The issue is related to a heap buffer overflow in the VNC server code, specifically within the file transfer request handler. This can potentially allow a remote attacker to execute arbitrar...

PT-2019-5271

Name of the Vulnerable Software and Affected Versions UltraVNC revision 1211 Description The issue is related to a stack buffer overflow in the VNC server code inside the file transfer request handler, which can result in Denial of Service DoS. This can be exploited via network connectivity...

CVE-2017-17715

The saveFile method in MediaController.java in the Telegram Messenger application before 2017-12-08 for Android allows directory traversal via a pathname obtained in a file-transfer request from a remote peer, as demonstrated by writing to tgnet.dat or tgnet.dat.bak...

CVE-2017-5668

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2017-5668

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2016-10189

BitlBee before 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list...

CVE-2016-10189

BitlBee before 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list...

CVE-2017-5668

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for...

PT-2017-7795

Name of the Vulnerable Software and Affected Versions BitlBee versions prior to 3.5 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and crash, and possibly execute arbitrary code. This can be achieved via a file transfer request...

CVE-2016-10189: NULL Pointer Dereference

BitlBee before 3.5 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list...

CVE-2017-5668: NULL Pointer Dereference

bitlbee-libpurple before 3.5.1 allows remote attackers to cause a denial of service NULL pointer dereference and crash and possibly execute arbitrary code via a file transfer request for a contact that is not in the contact list. NOTE: this vulnerability exists because of an incomplete fix for...

The vulnerability of the Dnsmasq software allows a remote attacker to compromise the accessibility of protected information.

The vulnerability in the tftprequest function of tftp.c in dnsmasq when using --enable-tftp allows malicious actors to trigger a service failure by using a TFTP-read request RRQ with an improperly configured blksize parameter...