Tango FTP Software v1.0 - Activex Heap Spray Exploit

Document Title: =============== Tango FTP Software v1.0 - Activex Heap Spray Exploit References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1528 View Video: https://www.youtube.com/watch?v=evhZlYyliU Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID:...

Tango FTP 1.0 (Build 136) - Activex HeapSpray

Tango FTP Activex Heap Spray Exploit Version:1.0Build 136 The vulnerability lies in the COM component used eSellerateControl350.dll 3.6.5.0 method of the ''GetWebStoreURL' member. Vendor Homepage:http://www.tangoftp.com/index.html Software Link:http://www.tangoftp.com/downloads/index.html Author:...

Tango FTP Software v1.0 - Activex Heap Spray Exploit

Document Title: =============== Tango FTP Software v1.0 - Activex Heap Spray Exploit References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1528 View Video: https://www.youtube.com/watch?v=evhZlYyliU Release Date: ============= 2015-06-19 Vulnerability Laboratory ID VL-ID:...

CVE-2015-4643

Integer overflow in the ftpgenlist function in ext/ftp/ftp.c in PHP before 5.4.42, 5.5.x before 5.5.26, and 5.6.x before 5.6.10 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow. NOTE: this vulnerability exists because ...

PHP < 5.4.41, 5.5.x < 5.5.25, 5.6.x < 5.6.9 Multiple Vulnerabilities - Windows

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

PHP < 5.4.41, 5.5.x < 5.5.25, 5.6.x < 5.6.9 Multiple Vulnerabilities - Linux

PHP is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:php:php"; if description...

[SECURITY] Fedora 22 Update: filezilla-3.11.0.2-1.fc22

FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS FTPS and SSH File Transfer Protocol SFT P - Cross-platform - Available in many languages - Supports resume and transfer of large files 4GB - Easy to use Site Manager and transfer queue - Dr...

XDB buffer overflow vulnerability turned out to be subversive of the entire database? - Vulnerability warning-the black bar safety net

This article will show you a hacked database approach, hoping to arouse the vigilance. Want to know hacking the database of the method of the first to delve into hacking the database of the object. After an investigation found the hacker the intruder the intrusion database the ultimate goal of...

php5 -- multiple vulnerabilities

The PHP project reports: DOM and GD: Fixed bug 69719 Incorrect handling of paths with NULs. FTP: Improved fix for bug 69545 Integer overflow in ftpgenlist resulting in heap overflow. CVE-2015-4643 Postgres: Fixed bug 69667 segfault in phppgsqlmetadata. CVE-2015-4644...

[SECURITY] Fedora 22 Update: fusionforge-5.3.2-4.fc22

FusionForge provides many tools to aid collaboration in a development project, such as bug-tracking, task management, mailing-lists, SCM repository, forums, support request helper, web/FTP hosting, release management, etc. All these services are integrated into one web site and managed through a...

CVE-2015-4108

Multiple cross-site request forgery CSRF vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary code via a crafted request to adminluascript.html or 2 add a domain administrator via a crafted...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary code via a crafted request to adminluascript.html or 2 add a domain administrator via a crafted...

CVE-2015-4108

Multiple cross-site request forgery CSRF vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authentication of administrators for requests that 1 execute arbitrary code via a crafted request to adminluascript.html or 2 add a domain administrator via a crafted...

CVE-2015-4108

CVE-2015-4108 affects Wing FTP Server up to version 4.4.6. The vulnerability is a set of cross-site request forgery (CSRF) flaws in the admin interface that can hijack administrator authentication for requests to admin_lua_script.html (arbitrary code execution potential) or admin_addadmin.html (a...

Wing FTP Server Remote Code Execution Vulnerability

Wing FTP Server is a professional cross-platform FTP server side with decent speed, reliability and a user-friendly configuration interface. A remote code execution vulnerability exists in Wing FTP Server. The vulnerability allows an attacker to execute arbitrary code within the context of the...

Wing FTP Server Cross-Site Request Forgery Vulnerability

Wing FTP Server is a professional cross-platform FTP server side with decent speed, reliability and a user-friendly configuration interface. A cross-site request forgery vulnerability exists in Wing FTP Server. It allows remote attackers to construct malicious URIs, trick users into parsing them,...

Medusa - Speedy, Parallel and Modular Login Brute-Forcer

Medusa is intended to be a speedy, massively parallel, modular, login brute-forcer. The goal is to support as many services which allow remote authentication as possible. The author considers following items as some of the key features of this application: Thread-based parallel testing. Brute-for...

CVE-2015-4022

Integer overflow in the ftpgenlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow...

Integer overflow

Integer overflow in the ftpgenlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote FTP servers to execute arbitrary code via a long reply to a LIST command, leading to a heap-based buffer overflow...

CVE-2015-4022

CVE-2015-4022 specifies an Integer overflow in PHP’s ftp_genlist() (ext/ftp/ftp.c) that enables a remote FTP server to trigger a heap-based buffer overflow via a long LIST reply. Affected PHP versions are before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9. The vulnerability allows potenti...