Windows Gather FlashFXP Saved Password Extraction

This module extracts weakly encrypted saved FTP Passwords from FlashFXP. It finds saved FTP connections in the Sites.dat file. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather...

FlashFXP v3.6.0 - Buffer Overflow Vulnerability

Document Title: =============== FlashFXP v3.6.0 - Buffer Overflow Vulnerability Release Date: ============= 2011-07-20 Vulnerability Laboratory ID VL-ID: ==================================== 121 Product & Service Introduction: =============================== FlashFXP is a FTP File Transfer Protoc...

flashfxp without any tools to view the password-vulnerability warning-the black bar safety net

Method: Click“Site”-“site Manager”, and then in the Quick Connect or the following list of sites at the right-click the site name, and then select“Copy to clipboard”then it will pop up a“whether to copy the user name and password”, click that, then paste it into the Notepad inside is plain text...

The use of cain to restore the encrypted ftp password-vulnerability warning-the black bar safety net

Author: Lu Yu, source:it168, responsible editor: Han Bo Ying, 2008-04-24 0 9:1 6 Stumbled upon Cain in the penetration process, there is a good use of skills, let's take a look at flashfxp encryption ciphertext, flashfxp connection records stored in the Stats. dat this file. Perhaps you will...

CVE-2003-1483

CVE-2003-1483 affects FlashFXP 1.4, where the password storage uses a weak encryption algorithm. The underlying issue is insecure password handling, enabling attackers to decrypt stored passwords and gain access. Public details consistently report this weakness without specifying exploitation sta...

CVE-2003-1483

FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access...

FlashFXP PWD命令远程缓冲区溢出漏洞

FlashFXP是一款流行的FTP客户端程序。 FlashFXP不正确处理PWD命令，远程攻击者可以利用漏洞进行缓冲区溢出攻击，可能以应用程序进程权限执行任意指令。 当发送包含5420 \，并至少一个不同字符分割的PWD命令，可导致应用程序不稳定，开始会消耗大量CPU资源，然后断开连接，进入无限循环。 0 FlashFXP FlashFXP 3.4.0 build 1145 目前没有解决方案提供： a href="http://www.flashfxp.com/" target="blank"http://www.flashfxp.com//a...

CVE-2007-0825

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service CPU consumption via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow...

Buffer overflow

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service CPU consumption via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow...

CVE-2007-0825

FlashFXP 3.4.0 build 1145 allows remote servers to cause a denial of service CPU consumption via a response to a PWD command that contains a long string with deeply nested directory structure, possibly due to a buffer overflow...

CVE-2007-0825

FlashFXP 3.4.0 build 1145 is affected by a denial-of-service vulnerability that can be triggered by a remote server sending a response to a PWD command containing a very long string with a deeply nested directory structure, potentially causing a buffer overflow and high CPU usage. The issue is do...

FlashFXP 3.4.0 build 1145 Remote Buffer Overflow DoS Exploit

No description provided by source. / FlashFXP V 3.4.0 build 1145 Buffer Overflow DoS ...

FlashFXP 3.4.0 build 1145 Remote Buffer Overflow DoS Exploit

Exploit for unknown platform in category dos / poc ============================================================ FlashFXP 3.4.0 build 1145 Remote Buffer Overflow DoS Exploit ============================================================ / FlashFXP V 3.4.0 build 1145 Buffer Overflow DoS There's a...

FlashFXP 3.4.0 build 1145 - Remote Buffer Overflow (Denial of Service) (PoC)

FlashFXP 3.4.0 build 1145 - Remote Buffer Overflow Denial of Service PoC / FlashFXP V 3.4.0 build 1145 Buffer Overflow DoS There's a strange bug in FlashFXP. When sending a long PWD command with more than 5420 \ separated by at least one different char, it is possible to make the app unstable. It...

FlashFXP 3.4.0 build 1145 - Remote Buffer Overflow (Denial of Service) (PoC)

/ FlashFXP V 3.4.0 build 1145 Buffer Overflow DoS There's a strange bug in FlashFXP. When sending a long PWD command with more than 5420 \ separated by at least one different char, it is possible to make the app unstable. It will first freeze during 45s consuming 100% resources, and then, if the...

Very classic webshell to mention the right-vulnerability warning-the black bar safety net

Said to have spent nine cattle II Tiger of effort to get a webshell, the Of course, also want to continue to receive full server admin rights, as don't want to give the admin The not a good hacker to HEE HEE to better come with me, see what you can use to elevate privileges The first If the serve...

CVE-2002-1939

FlashFXP 1.4 prints FTP passwords in plaintext when there are transfers in the queue, which allows attackers to obtain FTP passwords of other users by editing the queue properties...

CVE-2002-1939

FlashFXP 1.4 stores FTP passwords in plaintext in the queue properties, which can be exposed when queue transfers are present. This allows an attacker who can edit the queue to obtain other users’ FTP credentials. The issue is documented in CVE-2002-1939 and echoed across multiple sources (NVD/Re...

CVE-2003-1483

FlashFXP 1.4 uses a weak encryption algorithm for user passwords, which allows attackers to decrypt the passwords and gain access...

FlashFXP < 2.1b923 Multiple Remote Overflows

FlashFXP, an FTP client, is installed on the remote host. This version is vulnerable to a stack-based buffer overflow attack when receiving a long response to the PASV command, or when processing a long host name. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid11710;...