آخرین آسیب‌پذیری‌ها

Virtual Folder Path Confinement Bypass in Progress WS_FTP Server

Command Injection via FTP Notification Variables in Progress WS_FTP Server

Host Administrator Path Containment Bypass in Progress WS_FTP Server

Privilege Escalation via Missing Authorization in WS_FTP Manager

Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server

Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server

SSH Multi-Factor Authentication Bypass in Progress WS_FTP Server

Improper Authentication in Progress WS_FTP Server

Resource exhaustion from RPC sessions kept for requests to unknown interface

Alarm data length not validated against received frame length

Out-of-bounds read of DCP block header in DCP Set and Identify request parsing

NULL pointer dereference on implicit read of user specific record index

Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness

Information Disclosure in Ad Hoc Transfer in Progress WS_FTP Server

Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()

Missing length validation of EtherType, VLAN and FrameID fields in pf_eth_recv()

NULL pointer dereference on implicit read of AR specific record index

Out-of-bounds write when parsing AR Vendor Block requests

Infinite loop when reading PDPortDataCheck record of subslot 0

Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name length

Logon bypass (trust of attacker-controlled completed-methods list)

Endpoint credential minting (insecure default allow-list)

WordPress Hotel Booking plugin <= 3.8 - Insecure Direct Object References (IDOR) vulnerability

WordPress WP Crowdfunding plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

WordPress Buddyboss Platform plugin <= 3.5.0 - Privilege Escalation vulnerability