1144 matches found
CVE-2024-48208
CVE-2024-48208 このリポジトリには、単純なOOB（Out-of-bound）読み取りがどのようにしてジャイル脱獄やアクセス制御の破綻を引き起こすかに関するPoC開発のすべての作業が含まれています。 脆弱性について 元のCVE説明は以下の通りです： 公式リポジトリのGitHub PRは、ls.c ファイル内の domlsd 関数がOOB読み取りの脆弱性に対してどのように脆弱であるかを詳しく説明しています。これは、基本ポインタの未チェックのインクリメントによるもので、ポインタが cmd バッファの外側のバッファを指すことになり、行番号 1053 と 1054 に示されています。...
CVE-2001-0680
CVE-2001-0680 Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 Packetstorm publication at https://packetstormsecurity.com/files/24931/alt3kx-advisories-2001.txt.html Securiteam publication at http://www.securiteam.com/windowsntfocus/5IP0G2040Q.html Author Alex Hernand...
Network-Filesystem-Forensics
Network and Filesystem Forensics Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd CVE-2001-0550...
CVE-2026-68950
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
EUVD-2026-79950
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
PT-2026-93120
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The software uses hard-coded credentials, which may allow an attacker to execute the ftpd service as root. This could result in unauthorized remote root file...
CVE-2026-68950: Use of Hard-coded Credentials
The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...
CVE-2024-58383
Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...
CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf
Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...
EUVD-2024-55764
Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...
CVE-2024-58383
Froxlor before 2.2.0 (including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via XML config templates in lib/configfiles/, despite the file containing the Froxlor SQL user's password. On systems with world-readable parent directories (default on Debian 12), any unprivileged lo...
CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf
Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...
CVE-2023-45198
ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd the portable version of NetBSD ftpd before 20231001 is also vulnerable...
CVE-2001-1557
Buffer overflow in ftpd in IBM AIX 4.3 and 5.1 allows attackers to gain privileges...
CVE-1999-0878
Buffer overflow in WU-FTPD and related FTP servers allows remote attackers to gain root privileges via MAPPINGCHDIR...
CVE-1999-0368
Buffer overflows in wuarchive ftpd wu-ftpd and ProFTPD lead to remote root access, a.k.a. palmetto...
CVE-1999-0054
Sun's ftpd daemon can be subjected to a denial of service...
CVE-1999-0661
A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as 1 TCP Wrappers 7.6, 2 util-linux 2.9g, 3 wuarchive ftpd wuftpd 2.2 and 2.1f, 4 IRC client ircII ircII 2.2.9, 5 OpenSSH 3.4p1, or 6 Sendmail 8.12.6...