SolarWinds Serv-U FTP Server 跨站脚本漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the US company SolarWinds. A cross-site scripting vulnerability exists in SolarWinds Serv-U FTP Server prior to version 15.2.3. The vulnerability stems from the program incorrectly handling the user-supplied...

SolarWinds Serv-U FTP Server 跨站脚本漏洞

SolarWinds Serv-U FTP Server is a suite of FTP and MFT file transfer software from the U.S. company SolarWinds. A cross-site scripting vulnerability exists in SolarWinds Serv-U versions prior to 15.1.6, which originates from being subject to cross-site scripting XSS via a directory name containin...

GNU Wget < 1.18 - Arbitrary File Upload / Remote Code Execution Exploit (2)

Exploit Title: GNU Wget 1.18 - Arbitrary File Upload / Remote Code Execution 2 Original Exploit Author: Dawid Golunski Exploit Author: liewehacksie Version: GNU Wget 1.18 CVE: CVE-2016-4971 import http.server import socketserver import socket import sys class...

Backdoor.Win32.Agent.ggw Authentication Bypass

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/509e3d4839688c6173980dfba22ebd55.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.ggw Vulnerability: Authentication Bypass Description: The malware runs a built-...

GNU Wget < 1.18 - Arbitrary File Upload (2)

Exploit Title: GNU Wget 1.18 - Arbitrary File Upload / Remote Code Execution 2 Original Exploit Author: Dawid Golunski Exploit Author: liewehacksie Version: GNU Wget 1.18 CVE: CVE-2016-4971 import http.server import socketserver import socket import sys class...

CVE-2021-24002

When a user clicked on an FTP URL containing encoded newline characters %0A and %0D, the newlines would have been interpreted as such and allowed arbitrary commands to be sent to the FTP server. This vulnerability affects Firefox ESR 78.10, Thunderbird 78.10, and Firefox 88...

SUSE: Security Advisory (SUSE-SU-2020:3739-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-19595

Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username...

CVE-2020-19596

Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username...

CVE-2020-19596

Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username...

CVE-2020-19595

Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username...

Buffer overflow

Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username...

Buffer overflow

Buffer overflow vulnerability in Core FTP Server v2 Build 697, via a crafted username...

CVE-2020-19595

CVE-2020-19595 affects Core FTP Server v2 Build 697; a buffer overflow is triggered by a crafted username. The vulnerability is documented with CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H (base score 7.5) and CVSS v2: base score 5.0 (MEDIUM). Exploitation details are not provided beyond the cr...

CVE-2020-19596

CVE-2020-19596 : A buffer overflow vulnerability exists in Core FTP Server v1.2 Build 583, exploitable via a crafted username. Affected component is the server’s input handling for usernames, leading to memory corruption. NVD data lists a high-severity impact (C/P/I/A affected; network attack vec...

CVE-2020-19596

Buffer overflow vulnerability in Core FTP Server v1.2 Build 583, via a crafted username...

Trojan.Win32.Sharer.h Man-In-The-Middle

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9f80c3b1e7f5f6f7d0c8aea25fe83551B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Sharer.h Vulnerability: Anonymous Logon MITM Port Bounce Scan Description: Sharer.h by...

Trojan.Win32.Sharer.h Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/9f80c3b1e7f5f6f7d0c8aea25fe83551.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32.Sharer.h Vulnerability: Anonymous Logon RCE Description: Sharer.h by GOLDSWORD -...

Core FTP 缓冲区错误漏洞

Core FTP is a file transfer server. Core FTP Server v1.2 Build 583 suffers from a buffer error vulnerability that can be exploited by an attacker via a crafted username...

Backdoor.Win32.Burbul.b Authentication Bypass / Man-In-The-Middle

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/3ee4cb2e06eb1f7fe54c89db903f3e7aB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Burbul.b Vulnerability: Authentication Bypass MITM Port Bounce Scan Description: The...