6456 matches found
CVE-2018-11311
The CVE-2018-11311 entry concerns mySCADA myPRO 7, where the FTP server’s credentials are hardcoded (username: myscada, password: Vikuk63) in mys cadagate.exe. This allows remote authentication to the FTP service on port 2121, enabling actions such as uploading files or listing directories. Conne...
mySCADA myPRO 7 - Hard-Coded Credentials Vulnerability
Exploit for multiple platform in category remote exploits Exploit Title: mySCADA myPRO 7 - Hardcoded FTP Username and Password Exploit Author: Emre ÖVÜNÇ Vendor Homepage: https://www.myscada.org/mypro/ Software Link: https://www.myscada.org/download/ Version: v7 Tested on: Linux, Windows I. Probl...
Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : curl vulnerabilities (USN-3648-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3648-1 advisory. Dario Weisser discovered that curl incorrectly handled long FTP server command replies. If a user or automated system were tricke...
FTPShell Client 6.7 - Buffer Overflow Exploit
Exploit for windows platform in category remote exploits -- coding: utf-8 -- Exploit Title: FTPShell Client 6.7 - Remote Buffer Overflow Date: 2018-01-03 Exploit Author: Sebastián Castro @r4wd3r Vendor Homepage: http://www.ftpshell.com/index.htm Software Link: http://www.ftpshell.com/download.htm...
WU-FTPD Detection
This script tries to detect an installed WU-FTPD and its version on the remote host. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Design/Logic Flaw
In Apache Hive 2.1.0 to 2.3.2, when 'COPY FROM FTP' statement is run using HPL/SQL extension to Hive, a compromised/malicious FTP server can cause the file to be written to an arbitrary location on the cluster where the command is run from. This is because FTP client code in HPL/SQL does not veri...
Unauthorized Write To Arbitrary Location
Hive HPL/SQL is vulnerable to unauthorized write to arbitrary location. FTP client in HPL/SQL fails to validate the download destination location for COPY FROM FTP statement, thereby allowing a malicious FTP server to run the command to download the file to any location...
ruby: Command injection vulnerability in Net::FTP
It was discovered that the Net::FTP module did not properly process filenames in combination with certain operations. A remote attacker could exploit this flaw to execute arbitrary commands by setting up a malicious FTP server and tricking a user or Ruby application into downloading files with...
Buffer overflow
Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...
CVE-2014-1215
Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...
CVE-2014-1215
Core FTP Server is affected (versions prior to 1.2 build 508). The vulnerability consists of multiple buffer overflows that occur when reading data from config.dat and the Windows Registry, caused by insufficient boundary checks. A local attacker can exploit these overflows to gain privileges on ...
CVE-2014-1215
Multiple buffer overflows in Core FTP Server before 1.2 build 508 allow local users to gain privileges via vectors related to reading data from config.dat and Windows Registry...
JVN#92259864: TinyFTP Daemon vulnerable to buffer overflow
TinyFTP Daemon provided by Hisayuki Nomura is a FTP File Transfer Protocol server. TinyFTP Daemon contains a buffer overflow vulnerability CWE-121. Impact An attacker may be able to cause a denial-of-service DoS condition or execute arbitrary code. Solution Consider stop using Tiny FTP Daemon...
ftp.us2.freshrpms.net XSS vulnerability
Open Bug Bounty ID: OBB-578465 Description| Value ---|--- Affected Website:| ftp.us2.freshrpms.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Design/Logic Flaw
A vulnerability in the FTP server of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to log in to the FTP server of the device without a valid password. The attacker does need to have a valid username. The vulnerability is due to incorrect FTP user credential...
CVE-2018-0087
CVE-2018-0087 affects Cisco Web Security Appliance (WSA) via an FTP authentication bypass. Affects AsyncOS for WSA on virtual/hardware appliances running AsyncOS 10.5.1; vulnerability arises from incorrect FTP credential validation. If FTP is enabled on the management interface, an unauthenticate...
SEGGER embOS/IP FTP Server Denial of Service Vulnerability
SEGGER embOS/IP FTP Server is an FTP server from SEGGER Microcontroller, Germany. A security vulnerability exists in SEGGER embOS/IP FTP Server version 3.22. A remote attacker can cause a denial of service daemon crash by sending an invalid LIST, STOR, or RETR command to exploit the vulnerability...
CVE-2018-7449
SEGGER FTP Server for Windows before 3.22a allows remote attackers to cause a denial of service daemon crash via an invalid LIST, STOR, or RETR command...