104 matches found
UBUNTU-CVE-2026-63450
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT or PASV negotiation as a fatal application-layer error instead of a recoverabl...
CVE-2026-63450 Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. Prior to 8.0.6, the FTP parser in src/app-layer-ftp.c treats a RETR or STOR command sent before PORT or PASV negotiation as a fatal application-layer error instead of a recoverabl...
ProFTPd 1.3.9 mod_sql SQL Injection / Remote Code Execution
ProFTPD versions prior to 1.3.9a contain an SQL injection vulnerability in the modsql module due to improper handling of attacker-controlled values considered already escaped. This exploit uses an authenticated FTP STOR filename to inject a stacked PostgreSQL query and execute an arbitrary...
CVE-2026-42167 - ProFTPD mod_sql post-authentication SQLi - RCE
!/usr/bin/env python3 """ CVE-2026-42167 — ProFTPD modsql post-authentication SQL injection - RCE postauthstorrce.py --host --port 21 \ --user --password \ --shell-host --shell-port 4444 SUMMARY ------- ProFTPD's modsql logs FTP activity through user-supplied SQL. Its escaping helper isescapedtex...
ProFTPD mod_sql STOR basename RCE (CVE-2026-42167)
CVE-2026-42167 post-auth variant: an authenticated FTP user uploads a file whose basename starts/ends with a single quote isescapedtext bypass and embeds stacked SQL. With SQLLog STOR logging %basename into PostgreSQL, COPY TO PROGRAM runs an OS command on the DB host. Filenames cannot contain '/...
PT-2026-95656
Name of the Vulnerable Software and Affected Versions Suricata versions prior to 8.0.6 Description The FTP parser in src/app-layer-ftp.c incorrectly handles RETR or STOR commands when they are sent before PORT or PASV negotiation. Instead of treating this as a recoverable protocol event, the syst...
EUVD-2019-19969
Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...
CVE-2019-25614 Free Float FTP 1.0 STOR Command Remote Buffer Overflow
Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...
CVE-2019-25614
Free Float FTP 1.0 has a remote buffer overflow in the STOR command handler that allows code execution via a crafted oversized STOR payload. An attacker can authenticate with anonymous credentials and send 247 bytes of padding followed by a return address and shellcode to trigger execution on the...
CVE-2019-25614
Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...
CVE-2019-25614 Free Float FTP 1.0 STOR Command Remote Buffer Overflow
Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...
Free Float FTP buffer error vulnerability
Free Float FTP is an FTP server software developed by Free Float Corporation. Version 1.0 of Free Float FTP contains a buffer overflow vulnerability. This vulnerability stems from the STOR command processor’s buffer overflow issue, which may allow remote attackers to execute arbitrary code by...
CVE-2019-25614: Out-of-bounds Write
Free Float FTP 1.0 contains a buffer overflow vulnerability in the STOR command handler that allows remote attackers to execute arbitrary code by sending a crafted STOR request with an oversized payload. Attackers can authenticate with anonymous credentials and send a malicious STOR command...
EUVD-2006-6547
Malware in sbrugna...
UBUNTU-CVE-2025-59734
It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion storedframe. Stored frames can later be referenced by FTCH chunks. For files using subversion storedframe. Leaving ctx-hasdimensions set to false. A subsequent chunk with type...
CVE-2025-59734
CVE-2025-59734 affects FFmpeg SANM decoding. A use-after-free read can occur when processing SANM frames via STOR/FOBJ/FTCH chunks for subversion stored_frame with an invalid state, and later reallocation that frees the old buffer while GetByteContext gb is still referenced. This can enable a rea...
EUVD-2024-16521
Malicious code in bioql PyPI...
CVE-2024-0732
A vulnerability was found in PCMan FTP Server 2.0.7 and classified as problematic. This issue affects some unknown processing of the component STOR Command Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and...
Yokogawa BKBCopyD.exe Client
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Yokogawa BKBCopyD.exe Client', 'Description' = %q This module allows an unauthenticated user to interact with the Yokogawa CENTUM CS3000...
PCMan FTP Server Denial of Service Vulnerability (CNVD-2025-10876)
PCMan FTP Server is PCMan open source set of FTP server software. PCMan FTP Server has a denial of service vulnerability that originates from the component STOR Command Handler, which can be exploited by an attacker to cause a denial of service...