112 matches found
CVE-2026-115341
Improper access restrictions in the Thin Client Web Transfer component of Progress Software WSFTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope...
CVE-2026-115341 Unauthorized File Disclosure via Path Traversal in Thin Client Web Transfer in Progress WS_FTP Server
Improper access restrictions in the Thin Client Web Transfer component of Progress Software WSFTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope...
CVE-2026-115341
Progress Software WS_FTP Server versions prior to 2025.0.5 on Windows are vulnerable to improper access restrictions in the Thin Client Web Transfer component. This flaw allows an authenticated FTP user to bypass intended restrictions and access files outside their authorized scope. Remediation i...
EUVD-2026-120112
Improper access restrictions in the Thin Client Web Transfer component of Progress Software WSFTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope...
CVE-2026-115341: Progress Software WS_FTP Server: Improper access restrictions in the Thin Client Web Transfer component of Progress Software WS_FTP Server versions…
Improper access restrictions in the Thin Client Web Transfer component of Progress Software WSFTP Server versions prior to 2025.0.5 on Windows could allow an authenticated FTP user to access files outside their intended scope...
PT-2026-140445
Name of the Vulnerable Software and Affected Versions Progress Software WS FTP Server versions prior to 2025.0.5 Description Improper access restrictions in the Thin Client Web Transfer component on Windows allow an authenticated FTP user to access files outside their intended scope...
Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch
Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite EBS, according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 CVSS score: 9.8 , a case of improper authentication in the Oracle Application Objec...
Oracle E-Business Suite 12.2.15 SQL Injection
Oracle E-Business Suite versions 12.2.3 through 12.2.15 contain an unauthenticated Thin Client Framework SQL injection issue that can lead to remote code execution. The supplied Nuclei template checks the affected AppsTCFServer handshake and proxy creation response...
PT-2026-119440
Name of the Vulnerable Software and Affected Versions Oracle Application Object Library versions 12.2.3 through 12.2.15 Description An unauthenticated SQL injection exists in the Thin Client Framework TCF servlet of the Oracle Application Object Library. An attacker with network access via HTTP c...
Malicious code in mms-thin-client (npm)
Source: amazon-inspector 57427ccebae288ec20571b2713f7e71b7cf97044e30896db254f9371e32764f3 The package mms-thin-client was found to contain malicious code. --- Credit: OpenSSF source...
Malicious Package
Overview mms-thin-client is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
EUVD-2026-75566
Dell ThinOS 10, versions prior to 260510.2616, contain a Missing Support for Integrity Check vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...
MAL-2025-49231 Malicious code in mms-thin-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57427ccebae288ec20571b2713f7e71b7cf97044e30896db254f9371e32764f3 The package mms-thin-client was found to contain malicious code...
Malicious code in mms-thin-client (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 57427ccebae288ec20571b2713f7e71b7cf97044e30896db254f9371e32764f3 The package mms-thin-client was found to contain malicious code...
EUVD-2025-37062
Malicious code in mms-thin-client npm...
EUVD-2010-3121
Malware in sbrugna...
EUVD-2018-9044
Malware in sbrugna...
EUVD-2017-11883
Malware in sbrugna...