Author: Angelo Barbosa

CVE-2023-51713 | ProFTPD up to 1.3.7 Quote main.c make_ftp_cmd out-of-bounds (Issue 1683)

A vulnerability was found in ProFTPD up to 1.3.7. It has been declared as critical. This vulnerability affects the function make_ftp_cmd of the file main.c of the component Quote Handler. The manipulation leads to out-of-bounds read. This vulnerability was named CVE-2023-51713. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2022-47532 | FileRun 20220519 ?module=users&section=cpanel&page=list dir sql injection (usd-2022-0064)

A vulnerability was found in FileRun 20220519. It has been classified as critical. This affects an unknown part of the file /?module=users&section=cpanel&page=list. The manipulation of the argument dir leads to sql injection. This vulnerability is uniquely identified as CVE-2022-47532. The attack needs to be approached within the local network. There is no exploit...

Read More

CVE-2023-51707 | Array Networks ArrayOS AG up to 9.4.0.504 Packets Privilege Escalation

A vulnerability was found in Array Networks ArrayOS AG up to 9.4.0.504 and classified as critical. Affected by this issue is some unknown functionality of the component Packets Handler. The manipulation leads to Privilege Escalation. This vulnerability is handled as CVE-2023-51707. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More