6457 matches found
Schneider Modicon M340 Web Server Hidden Information Disclosure Vulnerability
From the page provided by the Modicon M340's web server, the service only provides viewing, monitoring, diagnostics and username, password setting functions. However, after logging in with the Modicon M340's FTP server fixed login username and password: sysdiag/factorycast@schneider, you can find...
Yahoo!: Out-of-band read of arbitrary ASCII files on YQL backend servers via XML external parameter entities
The Yahoo Query Language YQL service allowed arbitrary XML documents to be loaded via the feednormalizer table and its prexslurl parameter. This enabled an attacker to exfiltrate data from the YQL backend servers by defining external parameter entities in the XML document that read local files. T...
Serv-U FTP Server < 15.1.0.458 Multiple Vulnerabilities
According to its banner, the installed version of Serv-U is a version prior to 15.1.0.458. It is, therefore, affected by a cross-site scripting vulnerability, an information-disclosure vulnerability, and multiple unspecified security vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security...
Yak! Chat Client 2.x FTP Server Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/11433/info Yak! Chat Client FTP server is reported prone to a remote directory traversal vulnerability. This issue presents itself due to insufficient sanitization of user-supplied data. This issue can ultimately allow an...
QPC Software QVT Term 4.3/QVT/Net 4.3 Suite FTP Server DoS Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/796/info The FTP server that ships with QPC's QVT line of products is vulnerable to a denial of service attack. The FTP server has an unchecked buffer in the logon function. If a username/password pair is specified that i...
Xynph FTP Server 1.0 Relative Path Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6587/info A problem with the handling of input has been reported in Xynph FTP Server. Under some circumstances, it may be possible for a remote user to escape the FTP root directory using relative path notation. This coul...
Freefloat FTP Server MKD Buffer Overflow (MSF)
No description provided by source. require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = AverageRanking include Msf::Exploit::Remote::Ftp def initializeinfo = superupdateinfoinfo, 'Name' = 'Freefloat FTP Server MKD Command Stack Overflow', 'Description' = %q This module exploits a buff...
CoffeeCup FTP Clients (Direct <= 6.2.0.62) (Free <= 3.0.0.10) BoF Exploit
No description provided by source. / CoffeeCup FTP Clients Buffer Overflow Vulnerability Exploit created by Komrade e-mail: unsecureataltervistadotorg web: http://unsecure.altervista.org Tested on: CoffeeCup Direct FTP 6.2.0.62 CoffeeCup Free FTP 3.0.0.10 on a Windows XP Professional sp2 operatin...
WS-FTP 2.0 Anonymous Multiple FTP Command Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3102/info WS-FTP Server is vulnerable to malicious remote user input argumenting multiple FTP commands received from anonymously connecting clients. An attacker may supply a long sequence of characters as an argument to a...
Easy FTP Server 1.7.0.11 - MKD Command Remote Buffer Overflow Exploit (Post Auth)
No description provided by source. !/usr/bin/python import socket,sys Tested on XP Pro SP2 Eng and XP Pro SP3 Eng print Easy FTP Server v1.7.0.11 MKD Remote BoF Exploit Post Authentication Author / Discovered by : Karn Ganeshen Date : July 5, 2010 KarnGaneshen aT gmail d0t com...
Solaris 2.6 FTP Core Dump Shadow Password Recovery Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2601/info Solaris is the variant of the UNIX Operating System distributed by Sun Microsystems. Solaris is designed as a scalable operating system for the Intel x86 and Sun Sparc platforms, and operates on machines varying...
Xlight FTP Server 1.25/1.41 PASS Command Remote Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9285/info It has been reported that Xlight FTP Server is prone to a remote buffer overflow condition that may allow an attacker to gain unauthorized access to a system running the vulnerable software. The issue presents...
Serv-U FTP Server < 4.2 - Buffer Overflow
No description provided by source. $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require...
Freefloat FTP Server Buffer Overflow Vulnerability 0day
No description provided by source. Exploit Title: Freefloat FTP Server Buffer Overflow Vulnerability Date: 12/05/2010 Author: 0v3r Software Link: http://www.freefloat.com/software/freefloatftpserver.zip Tested on: Windows XP SP3 EN CVE: N/A !/usr/bin/python import socket import sys def usage: pri...
MollenSoft Lightweight FTP Server 3.6 - Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/10409/info A denial of service condition is reported to exist in the MollenSoft Lightweight FTP Server that may allow a remote user to deny service to legitimate FTP users. The vulnerability is due to a lack of sufficient...
Cooolsoft PowerFTP Server 2.x Remote Denial of Service Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/5899/info PowerFTP server is a shareware ftp server available for the Microsoft Windows platform. It is distributed and maintained by Cooolsoft. It has been reported that PowerFTP server does not properly handle long user...
XM Easy Personal FTP Server <= 5.2.1 - Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl Title: XM Easy Personal FTP Server = 5.2.1 'NLST -al' Remote Denial of Service Author: boecke Discovery: boecke Vulnerability Type: Remote Denial of Service Risk: Low Risk Requires valid Software Affected: XM Easy Personal FTP Server = 5.2.1...
Meteor FTP Server 1.2/1.5 USER Memory Corruption Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8376/info Meteor FTP Server is prone to a memory corruption vulnerability that can be triggered by a malicious client via an overly value for the FTP USER command. This could be exploited to cause a server crash. Further...
FreeFloat FTP Server Arbitrary File Upload
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
Quick 'n Easy FTP Server 3.2 - Denial of Service
No description provided by source. Exploit Title:DOS LOGIN Quick 'n Easy FTP Server 3.2 Date:28/2/2011 Author: clshack Software Link: http://www.pablosoftwaresolutions.com/html/quickneasyftpserver.htmlhttp://downstairs.dnsalias.net/homeftpserver.html Version:1.12 Tested on: windows xp sp3 en CVE ...