Lucene search
+L

110 matches found

Packet Storm
Packet Storm
added 2025/07/28 12:0 a.m.101 views

📄 Xlight FTP 1.1 Denial of Service

Xlight FTP version 1.1 suffers from a denial of service vulnerability. Exploit Title: Xlight FTP 1.1 - Denial Of Service DOS Google Dork: N/A Date: 22 July 2025 Exploit Author: Fernando Mengali LinkedIn: https://www.linkedin.com/in/fernando-mengali/ Vendor Homepage: https://www.xlightftpd.com...

7.5CVSS5.6AI score0.04195EPSS
Exploits3
Exploit DB
Exploit DB
added 2025/07/28 12:0 a.m.270 views

Xlight FTP 1.1 - Denial Of Service (DOS)

Exploit Title: Xlight FTP 1.1 - Denial Of Service DOS Google Dork: N/A Date: 22 July 2025 Exploit Author: Fernando Mengali LinkedIn: https://www.linkedin.com/in/fernando-mengali/ Vendor Homepage: https://www.xlightftpd.com Software Link: N/A Version: 1.1 Tested on: Windows XP CVE: CVE-2024-0737...

7.5CVSS5.7AI score0.04195EPSS
Exploits3
RedhatCVE
RedhatCVE
added 2025/05/23 10:41 a.m.9 views

CVE-2024-46483

Xlight FTP Server 3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content...

9.8CVSS7.2AI score0.01115EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 9:33 a.m.8 views

CVE-2024-0737

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS7AI score0.04195EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2025/05/22 10:44 p.m.11 views

CVE-2022-28998

Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via crafted code...

8.1CVSS7.4AI score0.02096EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/21 8:17 p.m.9 views

CVE-2008-0604

The LDAP authentication feature in XLight FTP Server before 2.83, when used with some unspecified LDAP servers, does not check for blank passwords, which allows remote attackers to bypass intended access restrictions...

6.8CVSS7.4AI score0.01294EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2024/10/30 12:0 a.m.8 views

The vulnerability of the Xlight file server exists due to a mistake caused by integer overflow, allowing attackers to execute arbitrary code by sending specially crafted SFTP packets.

The vulnerability of the Xlight file server exists due to a mistake caused by integer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code by sending specially crafted SFTP packets...

10CVSS6AI score0.01115EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2024/10/22 10:15 p.m.21 views

CVE-2024-46483

Xlight FTP Server 3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content...

9.8CVSS0.01115EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/10/22 12:0 a.m.4 views

Xlight FTP 输入验证错误漏洞

Xlight FTP is a high performance and easy to use FTP server software from Xlight FTP Inc. Make file transfers secure and easy to use. A security vulnerability exists in Xlight FTP versions prior to 3.9.4.3 that stems from an integer overflow in the SFTP server packet parsing logic, which could le...

9.8CVSS7AI score0.01115EPSS
Exploits0References2
CVE
CVE
added 2024/10/22 12:0 a.m.61 views

CVE-2024-46483

CVE-2024-46483 affects Xlight FTP Server versions prior to 3.9.4.3. The vulnerability is an integer overflow in the SFTP packet parsing logic, which can cause a heap overflow when processing attacker-controlled content. Related sources describe potential remote code execution consequences in affe...

9.8CVSS7.2AI score0.01115EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/10/22 12:0 a.m.257 views

CVE-2024-46483

Xlight FTP Server 3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content...

0.01115EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/10/22 12:0 a.m.18 views

CVE-2024-46483

Xlight FTP Server 3.9.4.3 has an integer overflow vulnerability in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content...

7.2AI score0.01115EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2024/10/18 12:0 a.m.4 views

PT-2024-7379 · Unknown · Xlight Ftp Server

Name of the Vulnerable Software and Affected Versions: Xlight FTP Server versions 3.9.4.3 Description: The issue exists due to an integer overflow error in the packet parsing logic of the SFTP server, which can lead to a heap overflow with attacker-controlled content. This can allow a remote...

9.8CVSS8.2AI score0.01115EPSS
Exploits0References18
OSV
OSV
added 2024/01/19 10:15 p.m.4 views

CVE-2024-0737

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS4.9AI score0.04195EPSS
Exploits3References3
NVD
NVD
added 2024/01/19 10:15 p.m.33 views

CVE-2024-0737

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the...

7.5CVSS6.2AI score0.04195EPSS
Exploits3References3
Cvelist
Cvelist
added 2024/01/19 9:31 p.m.40 views

CVE-2024-0737 Xlightftpd Xlight FTP Server Login denial of service

A vulnerability classified as problematic was found in Xlightftpd Xlight FTP Server 1.1. This vulnerability affects unknown code of the component Login. The manipulation of the argument user leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the...

5.3CVSS7.8AI score0.04195EPSS
Exploits3References3
CVE
CVE
added 2024/01/19 9:31 p.m.47 views

CVE-2024-0737

CVE-2024-0737 affects Xlightftpd Xlight FTP Server 1.1, specifically the Login component where manipulating the user argument can cause a remote denial of service. Public disclosures (including Exploit-DB/PacketStorm entries) indicate an attacker can trigger the issue remotely; exploitation activ...

7.5CVSS7.5AI score0.04195EPSS
Exploits3References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/19 12:0 a.m.13 views

PT-2024-15794 · Unknown · Xlight Ftp Server

Name of the Vulnerable Software and Affected Versions: Xlightftpd Xlight FTP Server version 1.1 Description: A problematic vulnerability was found in the Login component, where the manipulation of the user argument leads to denial of service. The attack can be initiated remotely. Recommendations:...

7.5CVSS7AI score0.04195EPSS
Exploits3References7
CNNVD
CNNVD
added 2024/01/19 12:0 a.m.23 views

Xlight FTP Security Vulnerability

Xlight FTP is a high performance and easy to use FTP server software from Xlight FTP. It makes file transfer secure and easy to use. A security vulnerability exists in Xlight FTP version 1.1, which stems from a denial of service caused by the parameter user of the component Login...

7.5CVSS6.7AI score0.04195EPSS
Exploits3References6
0day.today
0day.today
added 2023/08/04 12:0 a.m.179 views

Xlight FTP Server 3.9.3.6 - Stack Buffer Overflow Exploit

Exploit Title: Xlight FTP Server 3.9.3.6 - 'Stack Buffer Overflow' DOS Discovered by: Yehia Elghaly Vendor Homepage: https://www.xlightftpd.com/ Software Link : https://www.xlightftpd.com/download/setup.exe Tested Version: 3.9.3.6 Vulnerability Type: Buffer Overflow Local Tested on OS: Windows XP...

7.4AI score
Exploits0
Rows per page
Query Builder