CVE-2024-48208

CVE-2024-48208 The repo contains all the work surrounding the development of the PoC for how a simple OOBOut-of-bound read can result in jail escapes as well as broken access control. About the Vulnerability The orginial CVE Description is as follows: The Github PR on the official repo details ou...

Network-Filesystem-Forensics

Network and Filesystem Forensics Reports on post-exploitation on honeypot exploiting vulnerable wu-ftpd CVE-2001-0550...

CVE-2001-0680

CVE-2001-0680 Directory traversal vulnerability in ftpd in QPC QVT/Net 4.0 and AVT/Term 5.0 Packetstorm publication at https://packetstormsecurity.com/files/24931/alt3kx-advisories-2001.txt.html Securiteam publication at http://www.securiteam.com/windowsntfocus/5IP0G2040Q.html Author Alex Hernand...

CLEANSTART-2022-JI74416 issue was discovered in Pure-FTPd 1

Security vulnerability affects the pure-ftpd package. An issue was discovered in Pure-FTPd 1...

CLEANSTART-2022-QJ51870 issue was discovered in Pure-FTPd 1

Security vulnerability affects the pure-ftpd package. An issue was discovered in Pure-FTPd 1...

CVE-2026-68950

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-68950 Use of Hard-coded Credentials in Digital Watchdog VMAX DVR and NVR Product Lineups

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

EUVD-2026-79950

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

CVE-2026-68950: Use of Hard-coded Credentials

The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable...

PT-2026-93120

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description The software uses hard-coded credentials, which may allow an attacker to execute the ftpd service as root. This could result in unauthorized remote root file...

CVE-2024-58383

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383

Froxlor before 2.2.0 (including 2.2.0-rc3) generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via XML config templates in lib/configfiles/, despite the file containing the Froxlor SQL user's password. On systems with world-readable parent directories (default on Debian 12), any unprivileged lo...

EUVD-2024-55764

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

CVE-2024-58383 Froxlor before 2.2.0 Insecure File Permissions mysql.conf

Froxlor before 2.2.0 affected up to and including 2.2.0-rc3 generates /etc/pure-ftpd/db/mysql.conf with mode 0644 via the XML configuration templates in lib/configfiles/, even though the file contains the Froxlor SQL user's password. On systems where the parent directories are world readable the...

Open-FTPD - Unauthenticated LIST Detection (CVE-2010-2620)

Detects CVE-2010-2620 by issuing LIST without auth on Gabriel FTP Server and matching 226 Transfer Complete. !/usr/bin/env python3 -- coding: utf-8 -- """Open-FTPD unauthenticated LIST CVE-2010-2620.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import...

Zyxel NSA310 - Pure-FTPd Command Injection Detection

Detects Zyxel NSA310 FTP RCE by authenticating with user ' then pass '; id; and matching uid= in the FTP response. !/usr/bin/env python3 -- coding: utf-8 -- """Zyxel NSA310 Pure-FTPd username command injection.""" import re import socket from kittysploit import from...

Pure-FTPd Service - Detect

Pure-FTPd FTP service was detected. !/usr/bin/env python3 -- coding: utf-8 -- """Pure-FTPd FTP service was detected.""" import socket from kittysploit import from lib.protocols.tcp.tcpscannerclient import Tcpscannerclient class ModuleScanner, Tcpscannerclient: info = 'name': 'Pure-FTPd Service -...

GNU Inetutils FTPd Detect

The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a client and server on a computer network. !/usr/bin/env python3 -- coding: utf-8 -- """The File Transfer Protocol FTP is a standard network protocol used to transfer computer files between a...

CVE-2023-45198

ftpd before "NetBSD-ftpd 20230930" can leak information about the host filesystem before authentication via an MLSD or MLST command. tnftpd the portable version of NetBSD ftpd before 20231001 is also vulnerable...