CVE-2023-3489 - firmwaredownload command could log servers passwords in clear text

The firmwaredownload command on Brocade Fabric OS v9.2.0 could log the FTP/SFTP/SCP server password in clear text in the SupportSave file when performing a downgrade from Fabric OS v9.2.0 to any earlier version of Fabric OS. CVE Details The firmwaredownload command downloads the Brocade Fabric OS...

CVE-2023-40708

The File Transfer Protocol FTP port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files...

CVE-2023-40708 Improper Access Control in OPTO 22 SNAP PAC S1

The File Transfer Protocol FTP port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files...

CVE-2023-40708

OPTO 22 SNAP PAC S1 firmware vR10.3b is affected by CVE-2023-40708 due to the FTP port being open by default, potentially allowing access to some device files. Affected component: FTP service on SNAP PAC S1 (firmware R10.3b). Documented impact: attacker could access device files via network. Miti...

CVE-2023-40708 Improper Access Control in OPTO 22 SNAP PAC S1

The File Transfer Protocol FTP port is open by default in the SNAP PAC S1 Firmware version R10.3b. This could allow an adversary to access some device files...

OPTO 22 SNAP PAC S1

1. EXECUTIVE SUMMARY ​CVSS v3 7.5 ​ATTENTION: Exploitable remotely/low attack complexity ​Vendor: OPTO 22 ​Equipment: SNAP PAC S1 ​Vulnerabilities: Improper Restriction of Excessive Authentication Attempts, Weak Password Requirements, Improper Access Control, Uncontrolled Resource Consumption 2...

OPTO 22 SNAP PAC S1 安全漏洞

The OPTO 22 SNAP PAC S1 is a controller from OPTO 22 USA. A security vulnerability exists in the OPTO 22 SNAP PAC S1 R10.3b firmware version that stems from the File Transfer Protocol FTP port being open by default, allowing an attacker to access certain device files...

WordPress FTP Access Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Software FTP Access Type Plugin Vulnerable versions = 1.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-3510 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID bb5fc394892e Credits Bob Matyas Required privile...

Titan FTP Server Detection Consolidation

Consolidation of Titan FTP Server detections. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Titan FTP Server Detection (HTTP)

HTTP based detection of Titan FTP Server. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.170552"...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

Open redirect

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

CVE-2021-36159

libfetch before 2021-07-26, as used in apk-tools, xbps, and other products, mishandles numeric strings for the FTP and HTTP protocols. The FTP passive mode implementation allows an out-of-bounds read because strtol is used to parse the relevant numbers into address bytes. It does not check if the...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

CVE-2022-44215

There is an open redirect vulnerability in Titan FTP server 19.0 and below. Users are redirected to any target URL...

CVE-2022-44215

CVE-2022-44215 affects Titan FTP Server 19.0 and earlier, describing an open redirect vulnerability that could redirect users to an arbitrary URL. The connected documents do not provide exploit details or mitigation beyond the general remediation to upgrade beyond 19.0. No exploitation informatio...

Titan FTP server 输入验证错误漏洞

Titan FTP Server is an FTP file transfer server. A security vulnerability exists in Titan FTP server version 19.0 and prior versions that stems from an open redirection issue that allows an attacker to redirect users to arbitrary URLs...

FTP Access <= 1.0 - Subscriber+ Stored XSS

Description The plugin does not have authorisation and CSRF checks when updating its settings and is missing sanitisation as well as escaping in them, allowing any authenticated users, such as subscriber to update them with XSS payloads, which will be triggered when an admin will view the setting...

FTP Access <= 1.0 - Subscriber+ Stored XSS

Description The plugin does not have authorisation and CSRF checks when updating its settings and is missing sanitisation as well as escaping in them, allowing any authenticated users, such as subscriber to update them with XSS payloads, which will be triggered when an admin will view the setting...