16 matches found
CVE-2026-73254
Mongoose (embedded web server and network library) prior to 7.22 is vulnerable to stored cross-site scripting via unescaped filenames in directory listings. The root cause is in printdirentry() called by listdir() in src/http.c: the function URL-encodes the href attribute but inserts the raw file...
CVE-2026-73259: Improper Neutralization of Input During Web Page Generation
Mongoose is an embedded web server and network library. Prior to 7.22, a remote attacker can send a crafted percent-encoded request path to a deployment using MGENABLEDIRLIST and persuade a user to visit it. The mghttpservedir and listdir path in src/http.c places the decoded request URI into the...
EUVD-2019-10730
Malware in sbrugna...
Linux Distros Unpatched Vulnerability : CVE-2019-20176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c. CVE-2019-20176 Note that Nessus relies on the presence of the...
SUSE CVE-2019-20176
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...
CVE-2022-26483
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting XSS vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP...
CVE-2022-26483
An issue was discovered in Veritas InfoScale Operations Manager VIOM before 7.4.2 Patch 600 and 8.x before 8.0.0 Patch 100. A reflected cross-site scripting XSS vulnerability in admin/cgi-bin/listdir.pl allows authenticated remote administrators to inject arbitrary web script or HTML into an HTTP...
Fedora 30 : pure-ftpd (2020-85fa9f07f4)
Fix potential stack exhaustion in function listdir CVE-2019-20176 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...
Pure-FTPd Denial of Service Vulnerability
Pure-FTPd is an FTP File Transfer Protocol server. A security vulnerability exists in the 'listdir' function of the ls.c file in Pure-FTPd version 1.0.49. An attacker can exploit this vulnerability to cause a denial of service stack exhaustion...
DEBIAN-CVE-2019-20176
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...
CVE-2019-20176
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...
CVE-2019-20176
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...
CVE-2019-20176
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...
Stack overflow
In Pure-FTPd 1.0.49, a stack exhaustion issue was discovered in the listdir function in ls.c...
