Lucene search
K

76 matches found

OSV
OSV
added 2017/03/20 4:59 p.m.1 views

CVE-2017-6805

Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. dot dot in a GET command...

5.3CVSS5.9AI score0.16876EPSS
Exploits5References5
UbuntuCve
UbuntuCve
added 2017/01/19 10:59 p.m.36 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6.7AI score0.26672EPSS
Exploits3References3
Prion
Prion
added 2017/01/19 10:59 p.m.19 views

Directory traversal

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

4.3CVSS7AI score0.26672EPSS
Exploits3References11Affected Software1
Debian CVE
Debian CVE
added 2017/01/19 10:0 p.m.24 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6.1AI score0.26672EPSS
Exploits3
n0where
n0where
added 2014/09/17 11:4 a.m.29 views

Bandwidth Monitor – NetHogs

Bandwidth Monitor NetHogs is a small ‘net top’ tool. Instead of breaking the traffic down per protocol or per subnet, like most tools do, it groups bandwidth by process. NetHogs does not rely on a special kernel module to be loaded. If there’s suddenly a lot of network traffic, you can fire up...

7.5AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.17 views

AN HTTPD CMDIS.DLL Remote Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/13066/info AN HTTPD is reported prone to a remote buffer overflow vulnerability. Specifically, the issue presents itself in 'cmdIS.DLL' which calls the 'GetEnvironmentStrings' function to copy environment variables into a...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.25 views

GoAhead WebServer 2.1.x URL Encoded Slash Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5197/info A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible to launch directory traversal attacks against GoAhead WebServer. It is possible for remote attackers to access arbitrary...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2012/01/30 12:0 a.m.30 views

4Images 1.7.6 Cross Site Request Forgery

!/usr/bin/perl Title : 4images 1.7.6 9 Csrf inject php code Author : Or4nG.M4n Version : 1.7.6 9 Homepage : http://www.4homepages.de/ Dork : "Powered by 4images" video : http://youtu.be/NYFzC9hH54 Thnks+----------------------------------+ | xSs m4n i-Hmx h311c0d3 |.sp. abo.B4sil | HcJ Cyb3r...

0.7AI score
Exploits0
Packet Storm
Packet Storm
added 2010/11/01 12:0 a.m.33 views

SmallFTPD 1.0.3 Directory Traversal

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,ftp 127.0.0.1 Connected to 127.0.0.1. 220- smallftpd 1.0.3 220- check http://smallftpd.free.fr for more information 220 report bugs to [email protected] User 127.0.0.1:none: test 331 User name okay, password required...

0.5AI score
Exploits0
Exploit DB
Exploit DB
added 2010/10/31 12:0 a.m.27 views

SmallFTPd 1.0.3 - Directory Traversal

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,ftp 127.0.0.1 Connected to 127.0.0.1. 220- smallftpd 1.0.3 220- check http://smallftpd.free.fr for more information 220 report bugs to [email protected] User 127.0.0.1:none: test 331 User name okay, password required...

7.4AI score
Exploits0
Debian
Debian
added 2010/01/09 12:1 p.m.29 views

[Backports-security-announce] Security Update for pdns-recursor

Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...

10CVSS7.1AI score0.00036EPSS
Exploits0
Packet Storm
Packet Storm
added 2009/06/14 12:0 a.m.24 views

Uebimiau Web-Mail 3.2.0-1.8 File Overwrite

Uebimiau Webmail After That Click Write To File Go /uebimiau/index.php?cmd=id See Pic :http://www.almlf.com/get-6-2009-almlfcomakszizl2.png Thanx To ... | || \ \ \ / / / \ / | ---| |----| | | \ / / / ^ \ | | | | | / \ / / /\ \ | | | | | | | |\ ----. | | / \ | || | || | | .| || // \ | . . / \ /...

0.6AI score
Exploits0
securityvulns
securityvulns
added 2009/01/05 12:0 a.m.17 views

Walusoft TFTPServer2000 directory traversal

Directory traversal in GET command...

3.3AI score
Exploits0References1Affected Software1
Prion
Prion
added 2008/03/05 11:44 p.m.9 views

Directory traversal

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot forward slash in the GET command...

7.8CVSS7.2AI score0.02417EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2008/03/05 11:0 p.m.9 views

CVE-2008-1169

Directory traversal vulnerability in the embedded HTTP server in SCI Photo Chat Server 3.4.9 and earlier allows remote attackers to read arbitrary files via a ".." dot dot backslash or "../" dot dot forward slash in the GET command...

6.7AI score0.02417EPSS
Exploits0References4
securityvulns
securityvulns
added 2007/04/16 12:0 a.m.34 views

bftpd FTP server DoS

Denial of service on processing GET / MGET commands...

6.8CVSS2.2AI score0.01367EPSS
Exploits0Affected Software1
Prion
Prion
added 2007/04/12 7:19 p.m.21 views

Double free

Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service daemon crash via a 1 get or 2 mget command...

6.8CVSS6.7AI score0.01367EPSS
Exploits0References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2007/04/12 7:19 p.m.2 views

CVE-2007-2010

Double free vulnerability in bftpd before 1.8 allows remote authenticated users to cause a denial of service daemon crash via a 1 get or 2 mget command...

6.8CVSS5.6AI score0.01367EPSS
Exploits0References9
NVD
NVD
added 2006/12/01 12:28 a.m.20 views

CVE-2006-6183

Multiple stack-based buffer overflows in 3Com 3CTftpSvc 2.0.1, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via a long mode field aka transporting mode in a 1 GET or 2 PUT command...

10CVSS7.8AI score0.51457EPSS
Exploits12References7
seebug.org
seebug.org
added 2006/12/01 12:0 a.m.124 views

Telnet-FTP Server目录遍历及远程拒绝服务漏洞

Telnet-Ftp Server是一款Windows平台上的多用户Telnet/Ftp服务器。 Telnet-Ftp Server的GET和PUT等命令的处理过程中存在输入验证错误,允许攻击者通过目录遍历攻击列出并下载FTP根目录外的任意文件。 此外,攻击者还可以通过发送两个连续的RETR命令导致服务崩溃。 Sorin Chitu Telnet-FTP Server 1.0 build 1.250 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://slimbyte.sufx.net/...

7.1AI score
Exploits0
Rows per page
Query Builder