CVE-2022-27963

CVE-2022-27963 affects NetSarang Xftp (v7.0.0088p and earlier). The vulnerability is a binary hijack allowing arbitrary code execution via a crafted .exe file. Public references in Red Hat and NVD corroborate the flaw in Xftp's handling of executable binaries, enabling local execution with high p...

CVE-2019-17320

NetSarang XFTP Client 6.0149 and earlier has a buffer overflow vulnerability caused by improper boundary checks when copying a filename from an attacker-controlled FTP server, allowing arbitrary code execution. Affected product: XFTP Client; root cause: boundary check failure in filename handling...