USN-4289-1 squid, squid3 vulnerabilities

Jeriko One discovered that Squid incorrectly handled memory when connected to an FTP server. A remote attacker could possibly use this issue to obtain sensitive information from Squid memory. CVE-2019-12528 Regis Leroy discovered that Squid incorrectly handled certain HTTP requests. A remote...

Core FTP Lite 1.3 - Denial of Service (PoC)

Exploit Title : Core FTP Lite 1.3 - Denial of Service PoC Exploit Author: Berat Isler Date: 2020-02-20 Vendor Homepage: http://www.coreftp.com/ Software Link Download:http://tr.oldversion.com/windows/core-ftp-le-1-3cbuild1437 Version: Core FTP 1.3cBuild1437 Tested on : Windows 7 32-bit First step...

Core FTP Lite 1.3 Denial Of Service

Exploit Title : Core FTP Lite 1.3 - Denial of Service PoC Exploit Author: Berat Isler Date: 2020-02-20 Vendor Homepage: http://www.coreftp.com/ Software Link Download:http://tr.oldversion.com/windows/core-ftp-le-1-3cbuild1437 Version: Core FTP 1.3cBuild1437 Tested on : Windows 7 32-bit First step...

Core FTP Lite 1.3 - Denial of Service (PoC)

Core FTP Lite 1.3 - Denial of Service PoC Exploit Title : Core FTP Lite 1.3 - Denial of Service PoC Exploit Author: Berat Isler Date: 2020-02-20 Vendor Homepage: http://www.coreftp.com/ Software Link Download:http://tr.oldversion.com/windows/core-ftp-le-1-3cbuild1437 Version: Core FTP 1.3cBuild14...

Core FTP Lite 1.3 - Denial of Service Exploit

Exploit Title : Core FTP Lite 1.3 - Denial of Service PoC Exploit Author: Berat Isler Vendor Homepage: http://www.coreftp.com/ Software Link Download:http://tr.oldversion.com/windows/core-ftp-le-1-3cbuild1437 Version: Core FTP 1.3cBuild1437 Tested on : Windows 7 32-bit First step , Run exploit...

Moderate: Red Hat Security Advisory: curl security update

An update for curl is now available for Red Hat Enterprise Linux 7.5 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for eac...

RHEL 7 : curl (RHSA-2020:0544)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0544 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...

Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Edit Account feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that requests are coming from a...

Rumpus FTP Server Web File Manager Cross-Site Request Forgery Vulnerability (CNVD-2020-10630)

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the Network Settings feature of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from the WEB application not adequately verifying that a request is coming fro...

FTPShell Server 6.85 Buffer Overflow

!/usr/bin/python Exploit Title: FTPShell Server 6.85 - Add Account Buffer Overflow Date: December 2nd, 2019 Exploit Author: boku Vendor Homepage: http://www.ftpshell.com/index.htm SOftware Link: http://www.ftpshell.com/downloadserver.htm Program Name: FTPShell Server Secure Plus edition Version:...

Maxum Rumpus Cross-Site Scripting Vulnerability

Maxum Rumpus is an FTP and Web file transfer server. A cross-site scripting vulnerability exists in Maxum Rumpus that can be exploited by an attacker to execute client-side code...

Fedora: Security Advisory for libxml2 (FEDORA-2020-41fe1680f6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 31 Update: libxml2-2.9.10-3.fc31

This library allows to manipulate XML files. It includes support to read, modify and write XML and HTML files. There is DTDs support this includes parsing and validation even with complex DtDs, either at parse time or later once the document has been modified. The output can be a simple SAX strea...

CVE-2013-6362

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

Hardcoded credentials

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

CVE-2013-6362

Xerox ColorCube and WorkCenter devices (2013) are affected by a vulnerability due to hardcoded FTP and shell user accounts. The issue arises from embedded credentials that cannot be changed, enabling potential unauthorized access or abuse of these services on affected models. The connected record...

CVE-2013-6362

Xerox ColorCube and WorkCenter devices in 2013 had hardcoded FTP and shell user accounts...

[slackware-security] libarchive

New libarchive packages are available for Slackware 14.1, 14.2, and -current to fix security issues. Here are the details from the Slackware 14.2 ChangeLog: patches/packages/libarchive-3.4.2-i586-1slack14.2.txz: Upgraded. This update includes security fixes in the RAR5 reader. Security fix Where ...

Rumpus FTP Web File Manager File Types Component Cross-Site Request Forgery Vulnerability

Rumpus FTP Web File Manager is a file transfer server. A cross-site request forgery vulnerability exists in the File Types component of Web File Manager in Rumpus FTP version 8.2.9.1. The vulnerability stems from a web application that does not adequately validate that a request is coming from a...

Rumpus FTP Server Web File Manager Web Settings Component Cross-Site Scripting Vulnerability

Rumpus FTP Server is an Internet file transfer solution for the Mac platform. A cross-site scripting vulnerability exists in the Web Settings component of Web File Manager in Rumpus FTP Server version 8.2.9.1. The vulnerability stems from a lack of proper validation of client data by the WEB...