Lucene search
+L

2226 matches found

CNNVD
CNNVD
added 2021/12/28 12:0 a.m.5 views

ZyXEL GS1900 操作系统命令注入漏洞

Zyxel ZyXEL GS1900 is a managed switch from Zyxel Taiwan, China. An Access Control Error vulnerability exists in multiple Zyxel products, which stems from the product's TFTP client not adding privilege controls to the functions that can execute system commands. The vulnerability can be exploited ...

8CVSS6.1AI score0.00463EPSS
SaveExploits0References3
OSV
OSV
added 2021/12/08 11:15 a.m.7 views

CVE-2021-42757

A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

6.7CVSS6.5AI score0.00479EPSS
SaveExploits0References1
Prion
Prion
added 2021/12/08 11:15 a.m.20 views

Buffer overflow

A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

4.6CVSS6.9AI score0.00479EPSS
SaveExploits0References1Affected Software13
CVE
CVE
added 2021/12/08 11:1 a.m.86 views

CVE-2021-42757

FortiOS contains a buffer overflow (CWE-121) in the TFTP client library. CVE-2021-42757 affects FortiOS versions prior to 6.4.7 and 7.0.0–7.0.2, enabling a locally authenticated attacker to execute arbitrary code via crafted CLI arguments. The vulnerability is documented in Fortinet’s FG-IR-21-17...

6.7CVSS6.9AI score0.00479EPSS
SaveExploits0References1Affected Software13
Fortinet
Fortinet
added 2021/12/07 12:0 a.m.55 views

Protect

A buffer overflow CWE-121 in the TFTP client library of FortiOS, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

4.6CVSS7.2AI score0.00479EPSS
SaveExploits0Affected Software14
NVD
NVD
added 2021/11/29 11:15 p.m.17 views

CVE-2021-44429

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

7.5CVSS0.01861EPSS
SaveExploits1References1
OSV
OSV
added 2021/11/29 11:15 p.m.4 views

CVE-2021-44428

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

7.5CVSS7.2AI score0.0293EPSS
SaveExploits1References1
NVD
NVD
added 2021/11/29 11:15 p.m.29 views

CVE-2021-44428

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

7.5CVSS0.0293EPSS
SaveExploits1References1
Prion
Prion
added 2021/11/29 11:15 p.m.23 views

Design/Logic Flaw

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

5CVSS7.4AI score0.08868EPSS
SaveExploits2References1Affected Software1
Prion
Prion
added 2021/11/29 11:15 p.m.15 views

Cross site request forgery (csrf)

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

5CVSS7.2AI score0.0293EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2021/11/29 10:8 p.m.106 views

CVE-2021-44428

Technical details for CVE-2021-44428 are not provided in the supplied documents; only a basic description is available. Monitor for updates, as connected sources focus on other vulnerabilities (e.g., Log4j) rather than this CVE.

7.5CVSS8.1AI score0.0293EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/11/29 10:8 p.m.41 views

CVE-2021-44428

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

7.5AI score0.0293EPSS
SaveExploits1References1
CVE
CVE
added 2021/11/29 10:8 p.m.40 views

CVE-2021-44429

CVE-2021-44429: Serva 4.4.0 suffers a denial-of-service via a TFTP read (RRQ) request (opcode 1), tied to the older CVE-2013-0145. Connected records confirm that CVE-2013-0145 describes a buffer overflow in the TFTPD service (Serva32 2.1.0) that could cause a daemon crash or, potentially, arbitra...

7.5CVSS7.3AI score0.01861EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/11/29 10:8 p.m.35 views

CVE-2021-44429

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

7.6AI score0.01861EPSS
SaveExploits1References1
Packet Storm
Packet Storm
added 2021/11/24 12:0 a.m.548 views

Serva 4.4.0 TFTP Remote Buffer Overflow

Exploit Title: Serva 4.4.0 TFTP Server Remote Buffer Overflow Metasploit Date: 2021-11-23 Exploit Author: Yehia Elghaly Vendor Homepage: https://www.vercot.com/ Software Link : https://www.vercot.com/serva/download/ServaCommunityv4.4.0-21081411.zip Tested Version: 4.4.0 Tested on: Windows XP SP3 ...

7.1AI score
SaveExploits0
zdt
zdt
added 2021/11/24 12:0 a.m.498 views

Serva 4.4.0 TFTP Remote Buffer Overflow Exploit

Exploit Title: Serva 4.4.0 TFTP Server Remote Buffer Overflow Metasploit Exploit Author: Yehia Elghaly Vendor Homepage: https://www.vercot.com/ Software Link : https://www.vercot.com/serva/download/ServaCommunityv4.4.0-21081411.zip Tested Version: 4.4.0 Tested on: Windows XP SP3 - Windows 7...

7.4AI score
SaveExploits0
zdt
zdt
added 2021/11/22 12:0 a.m.327 views

Pinkie 2.15 - TFTP Remote Buffer Overflow Exploit

Exploit Title: Pinkie 2.15 - TFTP Remote Buffer Overflow PoC Discovered by: Yehia Elghaly Vendor Homepage: http://www.ipuptime.net/ Software Link : http://ipuptime.net/PinkieSetup.zip Tested Version: 2.15 Vulnerability Type: Buffer Overflow DoS Remote Tested on OS: Windows XP SP3 - Windows 7...

7.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2021/11/22 12:0 a.m.363 views

Pinkie 2.15 Remote Buffer Overflow

Exploit Title: Pinkie 2.15 - TFTP Remote Buffer Overflow PoC Discovered by: Yehia Elghaly Discovered Date: 2021-11-19 Vendor Homepage: http://www.ipuptime.net/ Software Link : http://ipuptime.net/PinkieSetup.zip Tested Version: 2.15 Vulnerability Type: Buffer Overflow DoS Remote Tested on OS:...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2021/11/22 12:0 a.m.429 views

Pinkie 2.15 - TFTP Remote Buffer Overflow (PoC)

Exploit Title: Pinkie 2.15 - TFTP Remote Buffer Overflow PoC Discovered by: Yehia Elghaly Discovered Date: 2021-11-19 Vendor Homepage: http://www.ipuptime.net/ Software Link : http://ipuptime.net/PinkieSetup.zip Tested Version: 2.15 Vulnerability Type: Buffer Overflow DoS Remote Tested on OS:...

5.3AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2021/11/19 7:24 p.m.5 views

libssh: NULL pointer dereference in sftpserver.c if ssh_buffer_new returns NULL

A flaw was found in libssh. A NULL pointer dereference in tftpserver.c if sshbuffernew returns NULL...

5.9CVSS6.7AI score0.04105EPSS
SaveExploits1References5
Rows per page
Query Builder