CVE-2023-53886 Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program

Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service...

CVE-2023-53886 Xlight FTP Server 3.9.3.6 Stack Buffer Overflow Vulnerability via Execute Program

Xlight FTP Server 3.9.3.6 contains a stack buffer overflow vulnerability in the 'Execute Program' configuration that allows attackers to crash the application. Attackers can trigger the vulnerability by inserting 294 characters into the program execution configuration, causing a denial of service...

CVE-2024-58299 PCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' Command

PCMan FTP Server 2.0 contains a buffer overflow vulnerability in the 'pwd' command that allows remote attackers to execute arbitrary code. Attackers can send a specially crafted payload during the FTP login process to overwrite memory and potentially gain system access...

CVE-2024-58299

PCMan FTP Server 2.0 has a buffer overflow in the pwd command that allows remote code execution. The flaw is stack-based and can be triggered during FTP login, potentially before authentication, per multiple sources. Affected component: pwd handling in PCMan FTP Server 2.0. Impact: arbitrary code...

PT-2025-50971

Name of the Vulnerable Software and Affected Versions PCMan FTP Server version 2.0 Description PCMan FTP Server 2.0 contains a buffer overflow in the 'pwd' command. This allows remote attackers to execute arbitrary code by sending a specially crafted payload during the FTP login process,...

TencentOS Server 4: pure-ftpd (TSSA-2025:0246)

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0246 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...

PT-2025-47269

Name of the Vulnerable Software and Affected Versions Serv-U versions prior to 15.5.3 Description A Path Restriction Bypass exists in Serv-U that allows a malicious actor with administrative privileges to execute code on a directory. This requires administrative privileges to exploit. On Windows...

SolarWinds Serv-U 安全漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U that stems from a lack of an authentication process that could lead to code execution by an attacker with administrator privileges...

SolarWinds Serv-U 安全漏洞

SolarWinds Serv-U is an FTP File Transfer Protocol server software from SolarWinds USA. A security vulnerability exists in SolarWinds Serv-U that stems from a logic error that could lead to code execution by an attacker with administrator privileges...

Maxum Rumpus FTP Server 跨站请求伪造漏洞

Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site request forgery vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from cross-site request forgery...

Maxum Rumpus FTP Server 跨站脚本漏洞

Maxum Rumpus FTP Server is an FTP server software from Maxum. A cross-site scripting vulnerability exists in Maxum Rumpus FTP Server version 9.0.12, which stems from improper input neutralization and could lead to cross-site scripting attacks...

[SECURITY] [DLA 4360-1] pure-ftpd security update

Debian LTS Advisory DLA-4360-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón November 03, 2025 https://wiki.debian.org/LTS Package : pure-ftpd Version : 1.0.49-4.1+deb11u1 CVE ID : CVE-2021-40524 Debian Bug : 993810 It was discovered that pure-ftpd, a secu...

Debian dla-4360 : pure-ftpd - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4360 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4360-1 [email protected] https://www.debian.org/lts/security/...

EUVD-2025-35161

The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code...

CVE-2025-10639 Usage of Hardcoded FTP Credentials EfficientLab WorkExaminer Professional

The WorkExaminer Professional server installation comes with an FTP server that is used to receive the client logs on TCP port 12304. An attacker with network access to this port can use weak hardcoded credentials to login to the FTP server and modify or read data, log files and gain remote code...

CVE-2025-59980

An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to files on the device. When the FTP server is enabled and a user named "ftp" or "anonymous" is configured, that user can...

CVE-2025-59980 Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed

An Authentication Bypass by Primary Weakness in the FTP server of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to get limited read-write access to files on the device. When the FTP server is enabled and a user named "ftp" or "anonymous" is configured, that user can...

EUVD-2012-6578

Malware in sbrugna...

EUVD-2005-4548

Malware in sbrugna...

EUVD-2008-4119

Malware in sbrugna...