2431 matches found
dotdotpwn
描述 DotDotPwn - 目录遍历模糊测试工具 它是一个非常灵活智能的模糊测试器，用于发现软件中的目录遍历漏洞，例如HTTP/FTP/TFTP服务器，以及CMS、ERP、博客等Web平台。 此外，它有一个协议无关的模块，可以将所需的有效载荷发送到指定的主机和端口。另一方面，它也可以使用STDOUT模块以脚本方式使用。 它使用Perl编程语言编写，可以在OS X、NIX或Windows平台上运行。它是首个包含在BackTrack Linux BT4 R2中的墨西哥工具。 此版本支持的模糊测试模块： HTTP HTTP URL FTP TFTP Payload 协议无关 STDOUT 要...
dotdotpwn
DESCRIPTION DotDotPwn - The Directory Traversal Fuzzer It's a very flexible intelligent fuzzer to discover traversal directory vulnerabilities in software such as HTTP/FTP/TFTP servers, Web platforms such as CMSs, ERPs, Blogs, etc. Also, it has a protocol-independent module to send the desired...
CVE-2023-33669
CVE-2023-33669 エクスプロイト Tenda AC8ルーターのスタックオーバーフロー脆弱性に対するエクスプロイトで、特にファームウェアバージョン USAC8V4.0siV16.03.34.06 を対象としています。 公式製品ページ。 エミュレーション ファームウェアのルートディレクトリに 'prepare.sh' ファイルを配置して実行できます。また、RCEのためにはtftpサーバーをセットアップし、'nc'ファイルを /tftpboot に配置する必要があります。...
iCULeak.py
iCULeak.py CiscoのCUCM（Call Manager）が管理する環境において、電話機の設定ファイルから資格情報（クレデンシャル）を検出・抽出するツールです。 Cisco CUCM（Call Manager）を使用する場合、電話機の設定ファイルはTFTPサーバーに保存されます。これらのVoIP電話機設定ファイルには、電話機のSSH/管理者資格情報を含む機密データが頻繁に含まれています。 また、一部のブラウザでSSHユーザー名・パスワードフィールドに、CUCMの資格情報（多くの場合AD資格情報）が自動入力される...
DSL-2750U-Full-chain
ファームウェア解析 1. DSL-2750U のバグ : tftp サーバーの設定ミス CVE-2021-3707 コマンドインジェクションのバグ CVE-2021-3708...
CVE-2020-25478--ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack
ASUS-RT-AC87U-TFTP-is-vulnerable-to-Denial-of-Service-DoS-attack CVE-2020-25478 - ASUS RT-AC87UのTFTPはサービス拒否DoS攻撃に対して脆弱です 1. 影響を受ける製品とバージョン ASUS RT-AC87U 3.0.0.4.38251640 2. 問題の種類 これは主にCWE-20に関連しています。ASUS...
CentOS Linux 6 [TuxCare] Security Update: curl / libcurl / libcurl-devel (CENTOS6:CLSA-2026:1778223262)
The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2026:1778223262 advisory. - Heap buffer overflow in the TFTP protocol handler in cURL 7.19.4 to 7.65.3. CVE-2019-5482 Note that Nessus has not tested for this issue but ha...
CVE-2026-102721
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...
CVE-2026-102713
The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes nxdtftpserver.c:1037 and nothing anywhere checks an upper bound, in particular not against the protocol maximum of 4 + NXTFTPFILETRANSFERMAX. Two things follow from that one missing check...
EUVD-2026-89185
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...
CVE-2026-102721
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...
CVE-2026-102721
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...
CVE-2026-102721
The NetX Duo TFTP client is vulnerable to a heap-buffer-overflow in the nxd_tftp_client.c component. When a remote TFTP server returns an ERROR packet lacking a terminating NUL byte, the client fails to verify the buffer_ptr against the nx_packet_append_ptr during message copying. This causes the...
CVE-2026-102721
A TFTP server that answers with a short ERROR packet makes the client read up to 64 bytes past the received datagram. Each receive path checks only that the datagram is at least four bytes long nxdtftpclient.c:1229, 1521, 1984. When the opcode is NXTFTPCODEERROR the message string is copied with ...
CVE-2026-102713
The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes nxdtftpserver.c:1037 and nothing anywhere checks an upper bound, in particular not against the protocol maximum of 4 + NXTFTPFILETRANSFERMAX. Two things follow from that one missing check...
EUVD-2026-89176
The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes nxdtftpserver.c:1037 and nothing anywhere checks an upper bound, in particular not against the protocol maximum of 4 + NXTFTPFILETRANSFERMAX. Two things follow from that one missing check...
CVE-2026-102713
The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes nxdtftpserver.c:1037 and nothing anywhere checks an upper bound, in particular not against the protocol maximum of 4 + NXTFTPFILETRANSFERMAX. Two things follow from that one missing check...
CVE-2026-102713
The NetX Duo TFTP server is vulnerable to a heap-buffer overflow and a denial-of-service condition due to a missing upper-bound check on incoming DATA datagrams . Because the server fails to validate that nx_packet_length is within the protocol maximum of 4 + NX_TFTP_FILE_TRANSFER_MAX, it allows ...
CVE-2026-102713
The TFTP server accepts a DATA datagram of any size. The dispatcher rejects datagrams shorter than four bytes nxdtftpserver.c:1037 and nothing anywhere checks an upper bound, in particular not against the protocol maximum of 4 + NXTFTPFILETRANSFERMAX. Two things follow from that one missing check...
provisioner
Provisioner 概要 Provisioner は、シングルボードコンピュータ SBC、特に U-Boot ベースのプラットフォーム向けの、開発者にフォーカスしたプロビジョニング用サイドキックです。 自己完結型の環境を提供し、以下の操作を可能にします: ボードへのリモートアクセス ブリングアップワークフローの自動化 カーネルとルートファイルシステムのプロビジョニング フラッシュ操作の実行 ラボハードウェアの安全な共有 運用モデルは意図的にシンプルです: 1 ボード = 1 Provisioner インスタンス Provisioner...