CVE-2016-1440

The proxy process on Cisco Web Security Appliance WSA devices through 9.1.0-070 allows remote attackers to cause a denial of service CPU consumption by establishing an FTP session and then improperly terminating the control connection after a file transfer, aka Bug ID CSCuy43468...

Debian DLA-536-1 : wget security update

On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. This behaviour was changed and now it works similarly as a redirect from HTTP to another HTTP resource so the original name is used as the...

[SECURITY] [DLA 536-1] wget security update

Package : wget Version : 1.13.4-3+deb7u3 CVE ID : CVE-2016-4971 Debian Bug : 827003 On a server redirect from HTTP to a FTP resource, wget would trust the HTTP server and uses the name in the redirected URL as the destination filename. This behaviour was changed and now it works similarly as a...

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

ALPINE-CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

Cross site request forgery (csrf)

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

CVE-2016-4971

CVE-2016-4971 affects GNU Wget prior to 1.18. The issue occurs when following an HTTP redirect to an FTP resource: the filename provided by the server is trusted, which can cause wget to overwrite a local file with a name from the redirected resource. This could potentially allow arbitrary file o...

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

DLA-536-1 wget - security update

Bulletin has no description...

Core FTP LE 2.2 - Path Field Local Buffer Overflow (PoC)

Core FTP LE 2.2 - Path Field Local Buffer Overflow PoC ''' Exploit Title: Core FTP Server v2.2 - BufferOverflow POC Date: 2016-6-28 Exploit Author: Netfairy Vendor Homepage: http://www.coreftp.com/ Software Link: ftp://ftp.coreftp.com/coreftplite.exe Version: 2.2 Tested on: Windows7 Professional...

Cisco Web Security Appliance Denial of Service Vulnerability (CNVD-2016-04428)

Cisco Web Security Appliance WSA is a set of Web security appliances from Cisco USA. The appliance provides SaaS-based access control, real-time network reporting and tracking, and the development of security policies. A security vulnerability exists in the Cisco WSA's native pass-through FTP...

ImageMagick Server Side Request Forgery (CVE-2016-3718)

A Server Side Request Forgery vulnerability exists in ImageMagick. A remote attacker may exploit this issue by making a specially crafted HTTP or FTP request. Successful exploitation would allow attackers to create HTTP or FTP requests on behalf of the vulnerable server...

Core FTP LE 2.2 - Path Field Local Buffer Overflow (PoC)

''' Exploit Title: Core FTP Server v2.2 - BufferOverflow POC Date: 2016-6-28 Exploit Author: Netfairy Vendor Homepage: http://www.coreftp.com/ Software Link: ftp://ftp.coreftp.com/coreftplite.exe Version: 2.2 Tested on: Windows7 Professional SP1 En x86 CVE : N/A + Type : Buffer overflow + Detail ...

Cisco Web Security Appliance Native FTP Denial of Service Vulnerability

A vulnerability in the native pass-through FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions mig...

Cisco Web Security Appliance Native FTP Denial of Service Vulnerability

A vulnerability in the native pass-through FTP functionality of the Cisco Web Security Appliance WSA could allow an unauthenticated, remote attacker to cause a partial denial of service DoS condition due to high CPU utilization. The vulnerability is due to how the FTP client terminates the FTP...

Schneider Electric PowerLogic PM8ECC 模块未授权访问漏洞

PowerLogic PM8ECC是800 PowerMeter系列设备的通讯模块。根据施耐德电气描述, PowerLogic PM8ECC部署于商业设施部门并已在全世界广泛使用。 漏洞描述： 1.访问/status.htm页面。在没登录的情况下发现“User”处有一字符串； 2.以该字符串作为用户名和密码即可登录该设备的Web管理界面和FTP（如有），虽然用户列表中无该用户。...

Core FTP LE 2.2 - Path Field Local Buffer Overflow

Exploit for windows platform in category dos / poc ''' Exploit Title: Core FTP Server v2.2 - BufferOverflow POC Date: 2016-6-28 Exploit Author: Netfairy Vendor Homepage: http://www.coreftp.com/ Software Link: ftp://ftp.coreftp.com/coreftplite.exe Version: 2.2 Tested on: Windows7 Professional SP1 ...