CVE-2021-35031

The CVE-2021-35031 issue affects Zyxel GS1900 series firmware and XGS1210/XGS1250 series firmware, where the TFTP client component does not enforce privilege controls for functions that can run system commands. This enables an authenticated LAN user to execute arbitrary OS commands via the device...

ZyXEL GS1900 操作系统命令注入漏洞

Zyxel ZyXEL GS1900 is a managed switch from Zyxel Taiwan, China. An Access Control Error vulnerability exists in multiple Zyxel products, which stems from the product's TFTP client not adding privilege controls to the functions that can execute system commands. The vulnerability can be exploited ...

CVE-2021-42757

A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

Buffer overflow

A buffer overflow CWE-121 in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

CVE-2021-42757

FortiOS contains a buffer overflow (CWE-121) in the TFTP client library. CVE-2021-42757 affects FortiOS versions prior to 6.4.7 and 7.0.0–7.0.2, enabling a locally authenticated attacker to execute arbitrary code via crafted CLI arguments. The vulnerability is documented in Fortinet’s FG-IR-21-17...

Protect

A buffer overflow CWE-121 in the TFTP client library of FortiOS, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments...

CVE-2021-44429

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

CVE-2021-44428

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

CVE-2021-44428

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

Cross site request forgery (csrf)

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

Design/Logic Flaw

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

CVE-2021-44428

Technical details for CVE-2021-44428 are not provided in the supplied documents; only a basic description is available. Monitor for updates, as connected sources focus on other vulnerabilities (e.g., Log4j) rather than this CVE.

CVE-2021-44428

Pinkie 2.15 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1...

CVE-2021-44429

Serva 4.4.0 allows remote attackers to cause a denial of service daemon crash via a TFTP read RRQ request, aka opcode 1, a related issue to CVE-2013-0145...

CVE-2021-44429

CVE-2021-44429: Serva 4.4.0 suffers a denial-of-service via a TFTP read (RRQ) request (opcode 1), tied to the older CVE-2013-0145. Connected records confirm that CVE-2013-0145 describes a buffer overflow in the TFTPD service (Serva32 2.1.0) that could cause a daemon crash or, potentially, arbitra...

Serva 4.4.0 TFTP Remote Buffer Overflow Exploit

Exploit Title: Serva 4.4.0 TFTP Server Remote Buffer Overflow Metasploit Exploit Author: Yehia Elghaly Vendor Homepage: https://www.vercot.com/ Software Link : https://www.vercot.com/serva/download/ServaCommunityv4.4.0-21081411.zip Tested Version: 4.4.0 Tested on: Windows XP SP3 - Windows 7...

Serva 4.4.0 TFTP Remote Buffer Overflow

Exploit Title: Serva 4.4.0 TFTP Server Remote Buffer Overflow Metasploit Date: 2021-11-23 Exploit Author: Yehia Elghaly Vendor Homepage: https://www.vercot.com/ Software Link : https://www.vercot.com/serva/download/ServaCommunityv4.4.0-21081411.zip Tested Version: 4.4.0 Tested on: Windows XP SP3 ...

Pinkie 2.15 - TFTP Remote Buffer Overflow (PoC)

Exploit Title: Pinkie 2.15 - TFTP Remote Buffer Overflow PoC Discovered by: Yehia Elghaly Discovered Date: 2021-11-19 Vendor Homepage: http://www.ipuptime.net/ Software Link : http://ipuptime.net/PinkieSetup.zip Tested Version: 2.15 Vulnerability Type: Buffer Overflow DoS Remote Tested on OS:...

Pinkie 2.15 Remote Buffer Overflow

Exploit Title: Pinkie 2.15 - TFTP Remote Buffer Overflow PoC Discovered by: Yehia Elghaly Discovered Date: 2021-11-19 Vendor Homepage: http://www.ipuptime.net/ Software Link : http://ipuptime.net/PinkieSetup.zip Tested Version: 2.15 Vulnerability Type: Buffer Overflow DoS Remote Tested on OS:...

Pinkie 2.15 - TFTP Remote Buffer Overflow Exploit

Exploit Title: Pinkie 2.15 - TFTP Remote Buffer Overflow PoC Discovered by: Yehia Elghaly Vendor Homepage: http://www.ipuptime.net/ Software Link : http://ipuptime.net/PinkieSetup.zip Tested Version: 2.15 Vulnerability Type: Buffer Overflow DoS Remote Tested on OS: Windows XP SP3 - Windows 7...