Debian Security Advisory DSA 3263-1 (proftpd-dfsg - security update)

Vadim Melihow discovered that in proftpd-dfsg, an FTP server, the modcopy module allowed unauthenticated users to copy files around on the server, and possibly to execute arbitrary code. OpenVAS Vulnerability Test $Id: deb3263.nasl 6609 2017-07-07 12:05:59Z cfischer $ Auto-generated from advisory...

Staff-FTP 3.04 DLL Hijack

A local dll injection vulnerability has been discovered in the official Staff-FTP v3.04 software. The issue allows local attackers to inject code to vulnerable libraries to compromise the process or to gain higher access privileges. The windows software is vulnerable to dll hijacking attacks. The...

BulletProof FTP Client 2010 - Local Buffer Overflow (DEP Bypass)

BulletProof FTP Client 2010 - Local Buffer Overflow DEP Bypass ----------------------------------------------------------------------------- Exploit Title: BulletProof FTP Client 2010 - Buffer Overflow SEH Date: Feb 15 2015 Exploit Author: Gabor Seljan Software Link: http://www.bpftp.com/ Version...

WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability

Document Title: =============== WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1498 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 149...

WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability

Document Title: =============== WISE-FTP Software v8.0.2 - DLL Hijacking Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1498 Release Date: ============= 2015-05-18 Vulnerability Laboratory ID VL-ID: ==================================== 149...

Fortigate FortiManager 1000D Multiple Privilege Escalation Vulnerabilities

FortiManager Security Management appliances allow you to centrally manage any number of Fortinet Network Security devices,from several to thousands, including FortiGate®, FortiWiFi™, and FortiCarrier™. Fortimanager is vulnerable to multiple privilege escalation attacks, including root jailbreak...

BisonWare FTP Server 3.5 Buffer Overflow Exploit

BisonWare FTP Server version 3.5 buffer overflow proof of concept exploit for Windows XP SP3. !/usr/bin/python Exploit Title: BisonWare FTP Server Version 3.5 Egg Hunting Exploits Date: 22 April,2015 Exploit Author: Bikash Dash www.vulnerableghost.com Version: BisonWare FTP Server Version 3.5...

[SECURITY] Fedora 21 Update: libssh-0.6.5-1.fc21

The ssh library was designed to be used by programmers needing a working SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, tra nsfer files, use a secure and transparent tunnel for your remote...

BisonWare FTP Server 3.5 Buffer Overflow

!/usr/bin/python Exploit Title: BisonWare FTP Server Version 3.5 Egg Hunting Exploits Date: 22 April,2015 Exploit Author: Bikash Dash www.vulnerableghost.com Version: BisonWare FTP Server Version 3.5 Tested on: Windows XP service pack3 CVE : N/A import socket, sys, os, time print...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 14.1 and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-firefox-31.7.0esr-i486-1slack14.1.txz: Upgraded. This release contains security fixes and improvements. For more...

某服务器管理系统弱口令造成数家公司网站服务器 数据库泄露

简要描述： 有的人注定偶然出现在你的生命里，却要用一生的时间来将它遗忘。 详细说明： 211.149.230.50:8080/index.php root hk22r224 站点信息： 漏洞证明： FTP账号： img src="https://images.seebug.org/upload/201505/13093701763e347cb5c9faf502eba70a4b4499e7.jpg" alt="image.jpg" w...

Oracle blind injection combined with XXE vulnerability remote data acquisition-vulnerability warning-the black bar safety net

Presumably everyone onSQL injectionhas been familiar for XML entity injection, or XXE, is also. This paper mainly discussed the method in the presence of the ORACLE the blind the case of remote access to the data. In fact, and UTLHTTP Remote Access Method of the same, but the principle is...

Advisory: Filezilla FTP server is vulnerable to FTP PORT bounce

Dear list A security advisory for Filezilla FTP server versions 0.8.0-0.9.50 is available at http://www.securitygalore.com/site3/filezillaftpserveradvisory A new version of Filezilla FTP server 0.9.51 is available for immediate download at https://filezilla-project.org/download.php?type=server I...

Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery (Add User)

Wing FTP Server Admin 4.4.5 - Cross-Site Request Forgery Add User Exploit Title: CSRF add arbitrary users Google Dork: Date: 2015-04-28 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org/ Vendor Homepage: http://www.wftpserver.com/serverhistory.htm Software Link:...

CSRF & XSS Wing FTP Server Admin <= v4.4.5

Wing FTP Server Admin 4.4.5 - CSRF & Cross Site Scripting Vulnerabilities Release Date: ============= 2015-04-28 Source: ==================================== http://hyp3rlinx.altervista.org/advisories/AS-WFTP0328.txt Common Vulnerability Scoring System: ==================================== Overal...

Filezilla FTP server bounce attack

DATA connection IP address is not restricted...

i.FTP 2.21 - Time Field (SEH)

!/usr/bin/python Exploit Title : i.FTP 2.21 Time Field SEH Exploit Exploit Author : Revin Hadi S Vulnerability PoC : Avinash Kumar Thapa "-Acid" PoC Link : https://www.exploit-db.com/exploits/36847/ Date : 05/08/2015 Vendor : http://www.memecode.com/iftp.php Software Link :...

Attachmate Reflection FTP Client PWD Command Buffer Overflow (CVE-2014-5211)

A stack-based buffer overflow vulnerability exists in Attachmate Reflection FTP Client. The vulnerability is caused by insufficient boundary checking while processing PWD command responses. An attacker could exploit this vulnerability by enticing a user to access an FTP server that sends speciall...

[SECURITY] Fedora 21 Update: proftpd-1.3.5-5.fc21

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Double the bang for your buck with Acunetix Vulnerability Scanner

Acunetix have announced that they are extending their current free offering of the network security scan, part of their cloud-based web and network vulnerability scanner. Those signing up for a trial of the online version of Acunetix vulnerability scanner will now be able to scan their perimeter...