480 matches found
NetSarang Computer Xftp FTP Client 安全漏洞
NetSarang Computer Xftp FTP Client is an FTP client software from NetSarang Computer, USA. A security vulnerability exists in NetSarang Computer Xftp FTP Client 3.0 build 0238 and earlier versions, which originates from processing PWD responses without validating the input length, and could lead ...
Debian dla-4232 : freeradius - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4232 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4232-1 [email protected]...
FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14382)
FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the failure of the component PWD Command Handler to properly validate the length size of input data, no details of the vulnerability are provided at this time...
Linksys多款产品 命令注入漏洞
Linksys RE6300 and others are products of Linksys, Inc.Linksys RE6300 is a wireless network signal extender.Linksys RE6250 is a wireless extender.Linksys RE6500 is a wireless extender. A command injection vulnerability exists in several Linksys products, which stems from incorrect operation of th...
CVE-2025-5357
A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component PWD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed ...
CVE-2025-5357 FreeFloat FTP Server PWD Command buffer overflow
A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component PWD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed ...
CVE-2025-5357
CVE-2025-5357 affects FreeFloat FTP Server 1.0, where the PWD Command Handler is vulnerable to a buffer overflow. The root cause is improper validation of input data length in the PWD handler, allowing remote exploitation. Publicly disclosed exploit details exist and a remote attack appears feasi...
CVE-2025-5357 FreeFloat FTP Server PWD Command buffer overflow
A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component PWD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed ...
PT-2025-23320 · Unknown · Freefloat Ftp Server
Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical vulnerability was found in the PWD Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. The attack can be launched remotely, and the exploit has been disclos...
Netcore多款产品 注入漏洞
Netcore NBR1005GPEV2 and so on are products of China Leike Netcore.Netcore NBR1005GPEV2 is a full gigabit multi-WAN port POE-powered enterprise AP management multifunctional wired router.Netcore B6V2 is a full gigabit wireless router.Netcore COVER5 is an enterprise-class router. An injection...
SerComm Device Configuration Dump
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Web Management', 'user' = /httpusername=\S+/i, 'pass' = /httppassword=\S+/i , 'HTTP Web Management Login', 'user' = /loginusername=\S+/i,...
RHEL 7 : freeradius (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freeradius: the EAP-PWD module performs insufficient validation on packets received from an EAP peer...
RHEL 6 : freeradius (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - freeradius: privilege escalation due to insecure logrotate configuration CVE-2019-10143 - freeradius:...
CVE-2023-51147
Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the admmodpwd action...
CVE-2023-51147
Buffer Overflow vulnerability in TRENDnet Trendnet AC1200 TEW-821DAP with firmware version 3.00b06 allows an attacker to execute arbitrary code via the admmodpwd action...
Fujian Kelixin Command and Dispatch Platform SQL Injection Vulnerability
Fujian Kelixin Command and Dispatch Platform is a command and dispatch platform from Fujian Kelixin Company. A SQL injection vulnerability exists in Fujian Kelixin Command and Dispatch Platform version 20240318 and earlier versions, which originates from an unknown function in...
Advisory ROSA-SA-2024-2367
software: hostapd 2.9 WASP: ROSA-CHROME packageevrstring: hostapd-2.9-2.src.rpm CVE-ID: CVE-2022-23303 BDU-ID: 2022-07363 CVE-Crit: CRITICAL. CVE-DESC.: A vulnerability in the SAE implementation of the Wi-Fi WPA Supplicant secure access client is related to information disclosure via a mismatch...
CVE-2024-25215
Employee Managment System v1.0 was discovered to contain a SQL injection vulnerability via the pwd parameter at /aprocess.php...
CVE-2024-25215
CVE-2024-25215 affects Employee Management System v1.0, vulnerable via the pwd parameter in /aprocess.php to a SQL injection. Root cause: improper input handling enabling unauthenticated network access with high impact on confidentiality, integrity, and availability. Connected docs mention remedi...