Design/Logic Flaw

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...

CVE-2017-7237

The connected sources confirm CVE-2017-7237 affects Spiceworks Inventory 7.5’s TFTP server. An unauthenticated TFTP service on UDP port 69 allows remote attackers to access the Spiceworks data\configurations directory via a WRQ operation, with the CNVD entry noting potential file overwrite/upload...

CVE-2017-7237

The Spiceworks TFTP Server, as distributed with Spiceworks Inventory 7.5, allows remote attackers to access the Spiceworks data\configurations directory by leveraging the unauthenticated nature of the TFTP service for all clients who can reach UDP port 69, as demonstrated by a WRQ aka Write reque...

Cisco IOS Smart Install Protocol Misuse (cisco-sr-20170214-smi)

The remote Cisco IOS device has the Smart Install feature enabled. The Smart Install SMI protocol does not require authentication by design. The absence of an authorization or authentication mechanism in the SMI protocol between the integrated branch clients IBC and the director can allow a clien...

Cisco IOS XE Smart Install Protocol Misuse (cisco-sr-20170214-smi)

The remote Cisco IOS XE device has the Smart Install Feature enabled. The Smart Install SMI protocol does not require authentication by design. The absence of an authorization or authentication mechanism in the SMI protocol between the integrated branch clients IBC and the director can allow a...

Spiceworks 7.5 TFTP Improper Access Control File Overwrite / Upload

Credits: John Page AKA HYP3RLINX + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/SPICEWORKS-IMPROPER-ACCESS-CONTROL-FILE-OVERWRITE.txt + ISR: APPARITIONSEC Vendor: ================== www.spiceworks.com Product: ================= Spiceworks - 7.5 Provides...

Code injection

The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service crash via a large 1 read or 2 write TFTP protocol message...

CVE-2017-7183

Technical details about CVE-2017-7183 are not publicly provided in the supplied documents; no affected versions, root cause, or fixes are disclosed here. Monitor for official updates and security advisories.

CVE-2017-7183

The TFTP server in ExtraPuTTY 0.30 and earlier allows remote attackers to cause a denial of service crash via a large 1 read or 2 write TFTP protocol message...

CVE-2017-6805

Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. dot dot in a GET command...

Directory traversal

Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a .. dot dot in a GET command...

CVE-2017-6805

CVE-2017-6805 : Affected product is MobaXterm Personal Edition 9.4. The issue is a directory traversal vulnerability in the TFTP server that can be triggered by a GET request containing .., allowing remote attackers to read arbitrary files. Public references (NVD, Nessus plugin, Exploit-DB entrie...

ExtraPuTTY 0.29-RC2 - Denial of Service

Credits: John Page AKA hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/EXTRAPUTTY-TFTP-DENIAL-OF-SERVICE.txt + ISR: ApparitionSec Vendor: ================== www.extraputty.com Product: ====================== ExtraPuTTY - v029RC2 hash:...

Vulnerability analysis cisco analysis tools-vulnerability warning-the black bar safety net

cisco Auditing: A small security audit tools, scanning Cisco router General vulnerabilities, such as default passwords, SNMP community strings and some of the old IOS bugs. CAT-h xx. xx. xx. xx. cisco-global-exploiter:cisco vulnerability penetration testing, there are 14 different vulnerabilities...

TFTP Server 1.4 - WRQ Buffer Overflow Exploit (Egghunter)

No description provided by source. Exploit Title: TFTP Server 1.4 - WRQ Buffer Overflow Exploit Egghunter Exploit Author: Karn Ganeshen Vendor Homepage: http://sourceforge.net/projects/tftp-server/ Version: 1.4 Tested on: Windows Vista SP2 Coded this for Vista Ultimate, Service Pack 2 3-byte...

TFTP Server 1.4 - WRQ Buffer Overflow (Egghunter)

Exploit for windows platform in category remote exploits Exploit Title: TFTP Server 1.4 - WRQ Buffer Overflow Exploit Egghunter Exploit Author: Karn Ganeshen Vendor Homepage: http://sourceforge.net/projects/tftp-server/ Version: 1.4 Tested on: Windows Vista SP2 Coded this for Vista Ultimate,...

TFTP Server 1.4 - 'WRQ' Remote Buffer Overflow (Egghunter)

Exploit Title: TFTP Server 1.4 - WRQ Buffer Overflow Exploit Egghunter Exploit Author: Karn Ganeshen Vendor Homepage: http://sourceforge.net/projects/tftp-server/ Version: 1.4 Tested on: Windows Vista SP2 Coded this for Vista Ultimate, Service Pack 2 3-byte overwrite + short jump + Egghunter...

TFTP Server 1.4 - WRQ Remote Buffer Overflow (Egghunter)

TFTP Server 1.4 - WRQ Remote Buffer Overflow Egghunter Exploit Title: TFTP Server 1.4 - WRQ Buffer Overflow Exploit Egghunter Exploit Author: Karn Ganeshen Vendor Homepage: http://sourceforge.net/projects/tftp-server/ Version: 1.4 Tested on: Windows Vista SP2 Coded this for Vista Ultimate, Servic...

Cisco IOS Software TFTP Server Denial of Service Vulnerability (cisco-sa-20150722-tftp)

A vulnerability in the TFTP server feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

TallSoft SNMP TFTP Server 1.0.0 DoS Vulnerability - Active Check

TallSoft SNMP TFTP Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...