PT-2018-3294

Name of the Vulnerable Software and Affected Versions ЭКРА 200 affected versions not specified Description The issue is related to security mechanism flaws in the FTP server of the ЭКРА 200 microprocessor terminal series. Exploitation of this issue may allow a remote attacker to access arbitrary...

Core FTP 2.0 - XRMD Denial of Service PoC Exploit

Exploit for windows platform in category dos / poc Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service PoC Exploit Author: Erik David Martin Vendor Homepage: http://www.coreftp.com/ Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Version 2.0, build 653, 32-bit...

Core FTP 2.0 XRMD Denial Of Service

Exploit Title: Core FTP 2.0 - 'XRMD' Denial of Service PoC Date: 2018-07-24 Exploit Author: Erik David Martin Vendor Homepage: http://www.coreftp.com/ Software Link: http://www.coreftp.com/server/download/CoreFTPServer.exe Version: Version 2.0, build 653, 32-bit Tested on: Windows XP Professional...

Code injection

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This...

CVE-2018-10627

Echelon SmartServer 1 all versions, SmartServer 2 all versions prior to release 4.11.007, i.LON 100 all versions, and i.LON 600 all versions. An attacker can use the SOAP API to retrieve and change sensitive configuration items such as the usernames and passwords for the Web and FTP servers. This...

Design/Logic Flaw

The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FTP server that by default allows anonymous access without a password, and provides full filesystem...

CVE-2017-3209: Incorrect Default Permissions

The DBPOWER U818A WIFI quadcopter drone provides FTP access over its own local access point, and allows full file permissions to the anonymous user. The DBPower U818A WIFI quadcopter drone runs an FTP server that by default allows anonymous access without a password, and provides full filesystem...

CVE-2016-9499

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

CVE-2016-9500

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

Information disclosure

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

CVE-2016-9499

CVE-2016-9499 concerns the Accellion FTP server prior to version FTA_9_12_220, where the server response reveals the username only if the username is invalid. This creates information disclosure that an attacker can use to enumerate valid user accounts. The linked records (NVD/NVD-derived entries...

CVE-2016-9500 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to informaiton exposure

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

CVE-2016-9499 The Accellion FTP server prior to version FTA_9_12_220 is vulnerable to cross-site scripting.

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

CVE-2016-9500

CVE-2016-9500 affects the Accellion FTP server (FTA) prior to version FTA_9_12_220. The issue stems from the embedded Accusoft Prizm Content flash component, where parameters such as customTabCategoryName and customButton1Image can be exploited for cross-site scripting. The vuln is described acro...

CVE-2016-9499: Observable Response Discrepancy

Accellion FTP server prior to version FTA912220 only returns the username in the server response if the username is invalid. An attacker may use this information to determine valid user accounts and enumerate them...

PT-2018-5089

Name of the Vulnerable Software and Affected Versions Accellion FTP server versions prior to FTA 9 12 220 Description The issue allows an attacker to determine valid user accounts by enumerating them, as the server only returns the username in the response if the username is invalid...

CVE-2016-9500: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Accellion FTP server prior to version FTA912220 uses the Accusoft Prizm Content flash component, which contains multiple parameters customTabCategoryName, customButton1Image that are vulnerable to cross-site scripting...

PT-2018-5090

Name of the Vulnerable Software and Affected Versions Accellion FTP server versions prior to FTA 9 12 220 Description The issue concerns the use of the Accusoft Prizm Content flash component in the Accellion FTP server, which contains multiple parameters, such as customTabCategoryName and...

Denial of Service Vulnerability in Quick Easy FTP Server

Quick Easy FTP Server is a small FTP server. A denial of service vulnerability exists in Quick Easy FTP Server, which can be exploited by an attacker to cause a denial of service...

Microsoft Windows FTP Server Denial of Service Vulnerability

Microsoft Windows 7, etc. are a series of operating systems from Microsoft, U.S.A. Windows FTP Server is one of the FTP File Transfer Protocol servers. A denial of service vulnerability exists in Microsoft Windows FTP Server, which arises from the program's failure to properly handle File Transfe...