CVE-2013-6920

CVE-2013-6920 affects Siemens SINAMICS S/G controllers with firmware prior to 4.6.11. The vulnerability is an authentication bypass for FTP (port 21) and Telnet (port 23) sessions, enabling remote attackers to perform administrative actions without authentication. The issue arises from services t...

CVE-2013-6920

Siemens SINAMICS S/G controllers with firmware before 4.6.11 do not require authentication for FTP and TELNET sessions, which allows remote attackers to bypass intended access restrictions via TCP traffic to port 1 21 or 2 23...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37, 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-thunderbird-24.1.1-i486-1slack14.1.txz: Upgraded. This release contains security fixes and...

[slackware-security] mozilla-nss

New mozilla-nss packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/mozilla-nss-3.15.3-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more...

Fedora Update for mingw-curl FEDORA-2013-21887

Check for the Version of mingw-curl OpenVAS Vulnerability Test Fedora Update for mingw-curl FEDORA-2013-21887 Authors: System Generated Check Copyright: Copyright C 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 19 Update: mingw-curl-7.33.0-1.fc19

cURL is a tool for getting files from HTTP, FTP, FILE, LDAP, LDAPS, DICT, TELNET and TFTP servers, using any of the supported protocols. cURL is designed to work without user interaction or any kind of interactivity. cURL offers many useful capabilities, like proxy support, user authentication, F...

CVE-2013-3922

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in a GET request...

Directory traversal

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in a GET request...

CVE-2013-3922

Directory traversal vulnerability in Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier allows remote attackers to read arbitrary files via a ..%2f encoded dot dot slash in a GET request...

CVE-2013-3922

The CVE-2013-3922 entry relates to Gummy Bear Studios FTP Drive + HTTP Server 1.0.4 and earlier, vulnerable to a directory traversal via an encoded ..%2f (dot dot slash) in a GET request, allowing remote attackers to read arbitrary files. Connected sources corroborate the same description across ...

New Banking malware 'i2Ninja' being sold via underground Russian Cybercrime Market

Researchers at Trusteer spotted a new banking malware program on the underground Russian cybercrime market, that communicates with attackers over the I2P anonymity network is for sale on underground Russian cybercrime forums. Dubbed 'i2Ninja', malware has most of the features found in other...

i2Ninja Financial Malware Communicates on I2P Darknet

The Mevade botnet made news when it was found to be using the Tor anonymity network to communicate with its command and control infrastructure. Running C&C on Tor, however, turned out to be a fatal mistake when Tor usage spiked alerting administrators to the unusual activity. A group of Russian...

FTP 弱密码 PoC

当网络上的主机提供匿名FTP服务时，用户则可以通过anonymous/空、FTP/FTP、USER/pass等匿名账号登陆到这些FTP服务器。 如果 FTP 服务使用了弱密码，攻击者可以加载字典文件猜解密码。 攻击者可以通过该漏洞获取主机文件系统信息。...

IT-Grundschutz M5.021: Sicherer Einsatz von telnet, ftp, tftp und rexec

IT-Grundschutz M5.021: Sicherer Einsatz von telnet, ftp, tftp und rexec. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95058 Stand: 13. Ergänzungslieferung 13. EL...

IT-Grundschutz M5.021: Sicherer Einsatz von telnet, ftp, tftp und rexec

IT-Grundschutz M5.021: Sicherer Einsatz von telnet, ftp, tftp und rexec. ACHTUNG: Dieser Test wird nicht mehr unterstützt. Er wurde ersetzt durch den entsprechenden Test der nun permanent and die aktuelle EL angepasst wird: OID 1.3.6.1.4.1.25623.1.0.95058 Stand: 13. Ergänzungslieferung 13. EL...

Juniper Networks Junos OS GNU libc GLOB_LIMIT DoS Vulnerability

Remote authenticated users can cause a partial denial of service via crafted glob expressions. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

OSX Network Share Mounter

This module lists saved network shares and tries to connect to them using stored credentials. This does not require root privileges. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OSX Network...

看我如何调查放置后门之Thinkphp

简要描述： 提交这个我纠结了很久，本来我是可以做一个坏帽子，贼喊捉贼，昨天晚上想了想，我的偶像猪猪侠提交的那些漏洞和我这比我这就是渣渣，他都可以无私的提交而不去换取不正当的金钱，我为什么就不可以呢？这个应该属于通用漏洞奖励鸟 详细说明： 渗透thinkphp完全是因为无聊之余搞了搞，可是没想到的还搞进去了，呵呵，首先在一个群里面发现别人发了一个thinkphp的连接 打开是一个压缩包 800多MB就下载了 可是下载速度我不敢恭维啊，几KB几十KB每秒，呵呵。 下了四个小时才下载完，下载了那么久，当然要看看里面的东西，源码，呵呵这安全运维可真厉害，在里面找到了一个config...

Titan FTP Administrative Password Disclosure

A password disclosure vulnerability has been reported in Titan FTP Server Administrator...

Core FTP < 2.2 build 1785 CWD Command Buffer Overflow

The version of Core FTP installed on the remote host is prior to 2.2 build 1785. It is, therefore, affected by a stack-based buffer overflow vulnerability because user-supplied input is not properly validated when handling directory names via the 'CWD' command. A remote attacker could potentially...