FTP OnConnect 1.4.11 File Inclusion / Shell Upload / XSS

Title: ====== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities Date: ===== 2013-08-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1041 VL-ID: ===== 1041 Common Vulnerability Scoring System: ==================================== 8.6 Introduction: =============...

FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities

Document Title: =============== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1041 Release Date: ============= 2013-08-03 Vulnerability Laboratory ID VL-ID: ====================================...

FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities

Document Title: =============== FTP OnConnect v1.4.11 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1041 Release Date: ============= 2013-08-03 Vulnerability Laboratory ID VL-ID: ====================================...

[SECURITY] Fedora 19 Update: squid-3.2.13-1.fc19

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

JEECMS Jeegou 漏洞导致官网服务器上可获取webshell

简要描述： 前年过年的时候JEECMS一哥们给联系过，笑呵呵的听喜欢的。 最近准备挖下Jeecms漏洞没想到隔了这么久漏洞还是没修补彻底。 轻车熟路的拿到了服务器权限，除了deploy了个war没做任何非法操作。 配置需谨慎啊。 详细说明： 列目录漏洞怎么还没修： 万恶的配置文件，QQ密码chrome一下就能看见： 进去了，没乱翻： 轻松获取shell： 不行的是官网貌似也在上面： img src="https://images.seebug.org/upload/201307/311...

Serv-U < 14.0.2.0 FTP Server SSL Renegotiation DoS

According to its banner, the installed version of Serv-U is earlier than 14.0.2.0 and is, therefore, potentially affected by a denial of service vulnerability. A remote attacker could cause denial of service conditions by continually sending SSL renegotiation requests to the application...

Cisco TelePresence Multipoint Control Unit Detection

Nessus determined that the remote host is a multipoint control unit video teleconferencing device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid69046; scriptversion"1.7"; scriptsetattributeattribute:"pluginmodificationdate", value:"2020/09/22"; scriptxrefname:"IAVT...

[SECURITY] Fedora 17 Update: curl-7.24.0-10.fc17

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

PCMan FTP Server 2.0.7 - Remote (Metasploit)

PCMan FTP Server 2.0.7 - Remote Metasploit Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and term...

PCMan FTP Server 2.0.7 - Remote (Metasploit)

Exploit-DB Note: Ret needs adjustment for Windows XP SP3 English This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require...

[Patator v0.5] Multi-purpose brute-forcer, with a modular design and a flexible usage

Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage. Currently it supports the following modules: ftplogin : Brute-force FTP sshlogin : Brute-force SSH telnetlogin : Brute-force Telnet smtplogin : Brute-force SMTP smtpvrfy : Enumerate valid users using the SMTP VRF...

FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability

Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System: ==================================== 3.7 Introduction: ============= FTP...

FTP Sprite 1.2.1 Script Insertion

Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System: ==================================== 3.7 Introduction: ============= FTP...

FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting

FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System:...

FTP Sprite 1.2.1 iOS - Persistent Cross-Site Scripting

Title: ====== FTP Sprite v1.2.1 iOS - Persistent Web Vulnerability Date: ===== 2013-07-12 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1007 VL-ID: ===== 1007 Common Vulnerability Scoring System: ==================================== 3.7 Introduction: ============= FTP...

[SECURITY] Fedora 18 Update: curl-7.27.0-11.fc18

curl is a command line tool for transferring data with URL syntax, supporti ng FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS, FILE, I MAP, SMTP, POP3 and RTSP. curl supports SSL certificates, HTTP POST, HTTP PUT, FTP uploading, HTTP form based upload, proxies, cookies,...

Oracle Linux 5 : Moderate: / kdelibs (ELSA-2007-0909)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2007-0909 advisory. 3.5.4-13.el5.0.1 - Remove Version branding - Maximum rpm trademark logos removed pics/crystalsvg/-mime-rpm 3.5.4-13.el5 - Resolves: 293571 CVE-2007-053...

Oracle Linux 3 : php (ELSA-2007-0889)

From Red Hat Security Advisory 2007:0889 : Updated PHP packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language common...

Oracle Linux 3 : vsftpd (ELSA-2008-0579)

From Red Hat Security Advisory 2008:0579 : An updated vsftpd package that fixes a security issue is now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. vsftpd Very Secure File Transfer Protocol FTP daemon is a secure FTP server for...

Oracle Linux 4 : php (ELSA-2007-0349)

From Red Hat Security Advisory 2007:0349 : Updated PHP packages that fix two security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly...