16980 matches found
Backdoor.Win32.FTP99 Man-In-The-Middle
Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/09dd14d3988e08a56798b1480c55a5b0B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP99 Vulnerability: Port Bounce Scan MITM Description: The malware listens on TCP...
USN-5021-2: curl vulnerability
USN-5021-1 fixed vulnerabilities in curl. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Harry Sintonen and Tomas Hoger discovered that curl incorrectly handled TELNET connections when the -t option was used on the command line. Uninitialized data...
Serv-U FTP Server < 15.3 Improper Input Validation
According to its banner, the installed version of Serv-U is a version prior to 15.3. It is, therefore, affected by an improper input validation vulnerability. The Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated th...
CVE-2022-22989
My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow issues...
Stack overflow
My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow issues...
CVE-2022-22989 Pre-authenticated stack overflow vulnerability on FTP Service
My Cloud OS 5 was vulnerable to a pre-authenticated stack overflow vulnerability on the FTP service that could be exploited by unauthenticated attackers on the network. Addressed the vulnerability by adding defenses against stack overflow issues...
CVE-2022-22989
CVE-2022-22989 affects Western Digital My Cloud OS 5 via a pre-authenticated stack overflow in the FTP service, exploitable by unauthenticated network attackers. The issue is addressed by adding defenses against stack overflows; remediation cited in sources is to update to firmware 5.19.117 (and ...
PT-2022-15758 · Western Digital · My Cloud Os 5
Name of the Vulnerable Software and Affected Versions: My Cloud OS 5 Description: The issue concerns a pre-authenticated stack overflow vulnerability on the FTP service. This vulnerability could be exploited by unauthenticated attackers on the network. The problem was addressed by adding defenses...
[SECURITY] Fedora 34 Update: perl-CPAN-2.29-1.fc34
The CPAN module automates or at least simplifies the make and install of perl modules and extensions. It includes some primitive searching capabilities and knows how to use LWP, HTTP::Tiny, Net::FTP and certain external download clients to fetch distributions from the net...
ROS-20220112-03
The vsftpd FTP server vulnerability is related to a provenance check error in the TLS implementation when working with different protocols. different protocols. Exploitation of the vulnerability could allow an attacker acting remotely and capable of performing a MitM attack at the TCP/IP level,...
Core FTP 路径遍历漏洞
Core FTP is a file transfer server. A security vulnerability previously existed in Core FTP Server 727 that allowed an authenticated attacker to perform directory traversal for file creation in an HTTP PUT request via . / for directory traversal for file creation...
Vulnerabilities in OpenSSH affect AIX.
IBM SECURITY ADVISORY First Issued: Thu Jan 6 09:17:41 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/opensshadvisory14.asc https://aix.software.ibm.com/aix/efixes/security/opensshadvisory14.asc...
Backdoor.Win32.Jtram.a Insecure Credential Storage
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/596882dfba543b23ad3225d24ee5e800.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Jtram.a Vulnerability: Insecure Credential Storage Description: The malware listens o...
Backdoor.Win32.Fantador Insecure Password Storage
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/a1d045151c809535a308311931588fd0B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Fantador Vulnerability: Insecure Password Storage Description: The malware has an FT...
Backdoor.Win32.SilentSpy.10 Authentication Race Condition
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/a7ce38e60cf08f2b234f34043b87e701B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.SilentSpy.10 Vulnerability: Authentication Race Condition Description: The malware...
Trendnet AC2600 TEW-827DRU Information Disclosure Vulnerability (CNVD-2022-03202)
Trendnet AC2600 TEW-827DRU is a wireless router. Trendnet AC2600 TEW-827DRU has a security vulnerability that can be exploited by attackers to disclose information via ftp web pages...
Backdoor.Win32.Wollf.m Authentication Bypass
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/b125a9a083447ad7d437e3e7f3ed5325B.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.m Vulnerability: Authentication Bypass Description: The malware listens on TCP...
Backdoor.Win32.Fantador Denial Of Service
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/a1d045151c809535a308311931588fd0.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Fantador Vulnerability: Divide by Zero DoS Description: The malware allows you to...
CVE-2021-4189
A flaw was found in Python, specifically in the FTP File Transfer Protocol client library in PASV passive mode. The issue is how the FTP client trusts the host from the PASV response by default. This flaw allows an attacker to set up a malicious FTP server that can trick FTP clients into connecti...