CVE-2019-11383: Undefined Security Weakness

An issue was discovered in the Medha WiFi FTP Server application 1.8.3 for Android. An attacker can read the username/password of a valid user via /data/data/com.medhaapps.wififtpserver/sharedprefs/com.medhaapps.wififtpserverpreferences.xml...

FTPBruter - A FTP Server Brute Forcing Tool

Brute forcing tool for FTP server. FTPBruter can work in any OS if they have and support Python 3. Feature Brute force a FTP server with a username or a list of usernames That's all. Install and Run on Linux You have to install Python 3 first: Install Python 3 on Arch Linux and its distros: sudo...

Titan FTP Server Path Traversal Vulnerability

Titan FTP Server is an FTP file transfer server. A directory traversal vulnerability exists in the Titan FTP Server 2019 build 3505 release. An attacker can exploit this vulnerability to load arbitrary files...

PCMan FTP Server 2.0 CDUP Remote Buffer Overflow Exploit

!/usr/bin/python import socket, sys, os, time print "\n===============================\n" print " PCMan FTP Server 2.0 - 'CDUP' Remote Buffer Overflow \n " print " Date: 23/03/2019 \n " print " Affected Software: PCMan 2.0 \n " print " Tested on Mincrsoft Windows XP Professional Version 2002 SP2 ...

Titan FTP Server 2019 Build 3505 Directory Traversal

Discovered By: Kevin Randall on 3/23/2019 A Directory Traversal issue was discovered in the Web GUI in Titan FTP Server 2019 Build 3505. When an authenticated user attempts to preview an uploaded file through PreviewHandler.ashx by using a ....\ technique, arbitrary files can be loaded in the...

Titan FTP Server Version 2019 Build 3505 Directory Traversal / Local File Inclusion Vulnerabilities

Exploit for windows platform in category web applications Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion Exploit Author: Kevin Randall Vendor Homepage: https://titanftp.com/ Software Link: https://titanftp.com/download Version: Firmware: Titan FTP...

PCMan FTP Server 2.0 CDUP Remote Buffer Overflow

!/usr/bin/python import socket, sys, os, time print "\n===============================\n" print " PCMan FTP Server 2.0 - 'CDUP' Remote Buffer Overflow \n " print " Date: 23/03/2019 \n " print " Affected Software: PCMan 2.0 \n " print " Tested on Mincrsoft Windows XP Professional Version 2002 SP2 ...

Titan FTP Server Version 2019 Build 3505 - Directory Traversal / Local File Inclusion

Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion Google Dork: N/A Date: 3/26/2019 Exploit Author: Kevin Randall Vendor Homepage: https://titanftp.com/ Software Link: https://titanftp.com/download Version: Firmware: Titan FTP Server Version 2019 Buil...

Titan FTP Server Version 2019 Build 3505 - Directory Traversal Local File Inclusion

Titan FTP Server Version 2019 Build 3505 - Directory Traversal Local File Inclusion Exploit Title: Titan FTP Server Version 2019 Build 3505 Directory Traversal/Local File Inclusion Google Dork: N/A Date: 3/26/2019 Exploit Author: Kevin Randall Vendor Homepage: https://titanftp.com/ Software Link:...

CVE-2018-19934

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

Cross site scripting

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

Design/Logic Flaw

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file...

CVE-2018-15906

CVE-2018-15906 affects SolarWinds Serv-U FTP Server 15.1.6. A remote authenticated user can exploit the Import feature by modifying a CSV, enabling privilege escalation to SYSTEM and remote code execution on default Windows installations. Documented impact includes escalation from Domain Administ...

CVE-2018-15906

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file...

CVE-2018-19934

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

CVE-2018-19934

The vulnerability CVE-2018-19934 affects SolarWinds Serv-U FTP Server 15.1.6.25. It is a reflected cross-site scripting (XSS) flaw in the Web management interface, exploit happening via the URL path and HTTP POST parameters. The issue is documented across multiple sources (NVD, Red Hat advisory) ...

PT-2019-9199

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.6 Description The issue allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file. Recommendations For SolarWinds Serv-U FTP Server version...

PT-2019-9947

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U FTP Server version 15.1.6.25 Description The issue concerns reflected cross-site scripting XSS in the Web management interface. This occurs via the URL path and an HTTP POST parameter. Recommendations For SolarWinds Serv-U FT...

CVE-2018-19934: Improper Neutralization of Input During Web Page Generation

SolarWinds Serv-U FTP Server 15.1.6.25 has reflected cross-site scripting XSS in the Web management interface via URL path and HTTP POST parameter...

CVE-2018-15906: Undefined Security Weakness

SolarWinds Serv-U FTP Server 15.1.6 allows remote authenticated users to execute arbitrary code by leveraging the Import feature and modifying a CSV file...