CVE-2018-10916

It has been discovered that lftp does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A remote attacker may trick a user to use reverse mirroring on an attacker-controlled FTP server, resulting in the removal of all files...

Core FTP 2.0 - XRMD Denial of Service PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service PoC Exploit Author: Erik David Martin Vendor Homepage: http://www.coreftp.com/ Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Version 2.0, build 653, 32-bit...

Core FTP 2.0 XRMD Denial Of Service

Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service PoC Date: 2018-07-24 Exploit Author: Erik David Martin Vendor Homepage: http://www.coreftp.com/ Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Version 2.0, build 653, 32-bit Tested on: Windows XP Professional...

Code injection

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This...

CVE-2018-10627

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This...

Design/Logic Flaw

The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FTP server that by default allows anonymous access without a password, and provides full filesystem...

CVE-2016-9499

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

CVE-2016-9500

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

Information disclosure

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

CVE-2016-9499 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

CVE-2016-9499

CVE-2016-9499 concerns the Accellion FTP server prior to version FTA_9_12_220, where the server response reveals the username only if the username is invalid. This creates information disclosure that an attacker can use to enumerate valid user accounts. The linked records (NVD/NVD-derived entries...

CVE-2016-9500

CVE-2016-9500 affects the Accellion FTP server (FTA) prior to version FTA_9_12_220. The issue stems from the embedded Accusoft Prizm Content flash component, where parameters such as customTabCategoryName and customButton1Image can be exploited for cross-site scripting. The vuln is described acro...

CVE-2016-9500 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

Denial of Service Vulnerability in Quick Easy FTP Server

Quick Easy FTP Server is a small FTP server. A denial of service vulnerability exists in Quick Easy FTP Server, which can be exploited by an attacker to cause a denial of service...

Microsoft Windows FTP Server Denial of Service Vulnerability

Microsoft Windows 7, etc. are a series of operating systems from Microsoft, U.S.A. Windows FTP Server is one of the FTP File Transfer Protocol servers. A denial of service vulnerability exists in Microsoft Windows FTP Server, which arises from the program's failure to properly handle File Transfe...

CVE-2018-8206

A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol FTP connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

Description of the security update for the Windows FTP Server denial of service vulnerability in Windows Server 2008: July 10, 2018

Description of the security update for the Windows FTP Server denial of service vulnerability in Windows Server 2008: July 10, 2018 Summary A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol FTP connections. To learn more about the vulnerability, go to...

Microsoft Windows FTP Server CVE-2018-8206 Denial of Service Vulnerability

Description Microsoft Windows is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the target service to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10...

mySCADA myPRO 7 Authentication Bypass (CVE-2018-11311)

An authentication bypass vulnerability has been reported in mySCADA myPRO 7 FTP Server. The vulnerability is due to the presence of hard coded credentials. A remote attacker can exploit this vulnerability by accessing the FTP Server using those credentials...

Brave Software: `alert()` dialogs on `chrome-extension://` origin (internal pages)

Summary: Navigation to chrome-extension from the web is possible with 378805 ftp:// - chrome-extension://. A blank page is created during navigation to chrome-extension:// origin. Blank pages have "This page" title. It's possible to initiate alert with a social-engineering content and "This page"...