PT-2026-62589

Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware component: MFT Runtime Server. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracl...

DEBIAN-CVE-2026-44240

basic-ftp is an FTP client for Node.js. Prior to 5.3.1, basic-ftp is vulnerable to client-side denial of service when parsing FTP control-channel multiline responses. A malicious or compromised FTP server can send an unterminated multiline response during the initial FTP banner phase, before...

CVE-2018-25254

CVE-2018-25254 affects NICO-FTP 3.0.1.19. The vulnerability is a structured exception handler (SEH) buffer overflow in the FTP service that allows remote code execution when an attacker sends crafted FTP commands. Attackers can connect to the FTP service and send oversized data in response handle...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

🧨 Metasploitable 2 Penetration Testing Lab 📅 Duration 2026...

The vulnerability of the file_transfer() function in the software for SINEC Security Monitor allows a perpetrator to gain access to read and write any arbitrary files.

The vulnerability of the filetransfer function in the software used for SINEC Security Monitor’s security functions is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to gain access to read and write arbitrary files...

EUVD-2025-201922

A vulnerability has been identified in SINEC Security Monitor All versions V4.10.0. The affected application does not have proper authorization checks for the filetransfer feature in ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to read or write to any...

The vulnerability of FTP servers for managing Rumpus files, related to the manipulation of cross-site requests, allows attackers to execute CSRF attacks.

The vulnerability of the FTP server for managing Rumpus files is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...

EUVD-2016-1709

Malware in sbrugna...

EUVD-2012-5943

Malware in sbrugna...

EUVD-2009-3093

Malware in sbrugna...

EUVD-2018-18437

Malware in sbrugna...

EUVD-2019-17669

Malware in sbrugna...

EUVD-2020-27979

Malware in sbrugna...

EUVD-2003-0283

Malware in sbrugna...

EUVD-2014-3323

Malware in sbrugna...

EUVD-1999-1326

Malware in sbrugna...

EUVD-2007-1898

Malware in sbrugna...

Vulnerability fixed in CrushFTP

CrushFTP has fixed a vulnerability in versions 10 through 10.8.5 and 11 through 11.3.423. The vulnerability is located in CrushFTP's AS2 validation. This vulnerability allows an attacker to gain administrative access via HTTPS, especially when the DMZ proxy feature is not used. The vulnerability...

Linux Distros Unpatched Vulnerability : CVE-2020-1934

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Apache HTTP Server 2.4.0 to 2.4.41, modproxyftp may use uninitialized memory when proxying to a malicious FTP server. CVE-2020-1934 Note that Nessus relies o...

The vulnerability of the graphical SFTP and SCP client for the Windows operating system, WinSCP, arises from incorrect path name restrictions for access-controlled directories. This allows attackers to create a special file and control its path on a remote server.

The vulnerability of the graphical SFTP and SCP client programs for the Windows operating system is related to incorrect path name restrictions for access to restricted directories. Exploiting this vulnerability allows an attacker to create a special file and control its path on a remote server...