Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ckr-lfi.txt - http://www.exploit-db.com/exploits/12085 - http://bitbucket.org/roberto.aloi/joomla-flickr/changeset/64ebf6b25030 - http://secunia.com/advisories/39358 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57573
CVE ID: CVE-2010-1981 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:13.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Fabrik (com_fabrik) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.org/1004-exploits/joomlafabrik-lfi.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/57571 - http://www.exploit-db.com/exploits/12087
CVE ID: CVE-2010-1982 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:13.269Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the JA Voice (com_javoice) component 2.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39202 - http://www.exploit-db.com/exploits/12121 - http://packetstormsecurity.org/1004-exploits/joomlajavoice-lfi.txt - http://www.securityfocus.com/bid/39343
CVE ID: CVE-2010-1983 State: PUBLISHED Published: 2010-05-19T19:31:00 Last Updated: 2024-08-07T02:17:14.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php. NOTE: some of these details are obtained from third party information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/39211 - http://packetstormsecurity.org/1004-exploits/joomlaredtwitter-lfi.txt - http://evilc0de.blogspot.com/2010/04/joomla-component-redtwitter-l
security.org/1004-exploits/joomlaredtwitter-lfi.txt - http://evilc0de.blogspot.com/2010/04/joomla-component-redtwitter-lfi-vuln.html - http://secunia.com/advisories/39342 - http://www.exploit-db.com/exploits/12055 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57511 - http://osvdb.org/63533
CVE ID: CVE-2010-1984 State: PUBLISHED Published: 2010-05-19T20:00:00 Last Updated: 2024-08-07T02:17:13.155Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Taxonomy Breadcrumb module 5.x before 5.x-1.5 and 6.x before 6.x-1.1 for Drupal allows remote authenticated users, with administer taxonomy permissions, to inject arbitrary web script or HTML via the taxonomy term name in a Breadcrumb display. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39138 - http://drupal.org/node/757974 - http://drupal.org/node/758456 - http://osvdb.org/63424 - http://drupal.org/node/757980 - https://exchange
/node/757974 - http://drupal.org/node/758456 - http://osvdb.org/63424 - http://drupal.org/node/757980 - https://exchange.xforce.ibmcloud.com/vulnerabilities/57446
CVE ID: CVE-2010-1985 State: PUBLISHED Published: 2010-05-19T22:00:00Z Last Updated: 2024-09-16T18:54:16.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the administrative user interface in Six Apart Movable Type 5.0 and 5.01 allow remote attackers to inject arbitrary web script or HTML via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000017.html - http://www.movabletype.com/blog/2010/05/movable-type-502.html - http://www.vupen.com/english/advisories/2010/1136 - http://secunia.com/advisories/39741 - http://www.movabletype.org/documentatio
w.vupen.com/english/advisories/2010/1136 - http://secunia.com/advisories/39741 - http://www.movabletype.org/documentation/appendices/release-notes/movable-type-502.html - http://jvn.jp/en/jp/JVN92854093/index.html
CVE ID: CVE-2010-1986 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.284Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (memory consumption and application crash) via JavaScript code that creates multiple arrays containing elements with long string values, and then appends long strings to the content of a P element, related to the gfxWindowsFontGroup::MakeTextRun function in xul.dll, a different vulnerability than CVE-2009-1571. Additional Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64791 - http://www.exploit-db.com/exploi
onal Analyst Notes: - CVE Program Container: References: - http://www.osvdb.org/64791 - http://www.exploit-db.com/exploits/12678 - http://www.x90c.org/advisories/firefox_3.6.3_crash_advisory.txt - http://www.securityfocus.com/archive/1/511329/100/0/threaded - https://exchange.xforce.ibmcloud.com/vulnerabilities/58761 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12433
CVE ID: CVE-2010-1987 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (memory consumption, out-of-bounds read, and application crash) via JavaScript code that appends long strings to the content of a P element, and performs certain other string concatenation and substring operations, related to the DoubleWideCharMappedString class in USP10.dll and the gfxWindowsFontGroup::GetUnderlineOffset function in xul.dll, a different vulnerability than CVE-2009-1571. Additional Analyst Notes: - CVE Program Containe
fset function in xul.dll, a different vulnerability than CVE-2009-1571. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/58762 - http://osvdb.org/64790 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12013 - http://www.exploit-db.com/exploits/12678 - http://www.x90c.org/advisories/firefox_3.6.3_crash_advisory.txt - http://www.securityfocus.com/archive/1/511329/100/0/threaded
CVE ID: CVE-2010-1988 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:14.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.6.3 on Windows XP SP3 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) or possibly execute arbitrary code via JavaScript code that performs certain string concatenation and substring operations, a different vulnerability than CVE-2009-1571. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58763 -
ory/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12050 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58763 - http://www.exploit-db.com/exploits/12678 - http://www.x90c.org/advisories/firefox_3.6.3_crash_advisory.txt - http://www.securityfocus.com/archive/1/511329/100/0/threaded - http://osvdb.org/64789
CVE ID: CVE-2010-1989 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.326Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.52 executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images, a related issue to CVE-2010-0181. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11664 - http://websecurity.com.ua/4206/ - http://www.securityfocus.com/archive/1/511
ition/oval%3Aorg.mitre.oval%3Adef%3A11664 - http://websecurity.com.ua/4206/ - http://www.securityfocus.com/archive/1/511327/100/0/threaded
CVE ID: CVE-2010-1990 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:14.430Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/4206/ - http://www.securityfocus.com/archive/1/511327/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/o
ttp://www.securityfocus.com/archive/1/511327/100/0/threaded - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12386
CVE ID: CVE-2010-1991 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.297Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/4206/ - http://www.securityfocus.com/archive/1/511327/100/0/threaded
CVE ID: CVE-2010-1992 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:14.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many IFRAME elements. Additional Analyst Notes: - CVE Program Container: References: - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11363 - http://websecurity.com.ua/4206/ - http://www.securityfocus.com/archive/1/511327/100/0/threaded
CVE ID: CVE-2010-1993 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.306Z Vendors: n/a Products: n/a Problem Types: n/a Description: Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service (resource consumption) via an HTML document with many IFRAME elements. Additional Analyst Notes: - CVE Program Container: References: - http://websecurity.com.ua/4206/ - http://www.securityfocus.com/archive/1/511327/100/0/threaded - http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.
/opensuse-security-announce/2010-08/msg00001.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11952
CVE ID: CVE-2010-1994 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.325Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in index.php in TomatoCMS before 2.0.5 allows remote attackers to execute arbitrary SQL commands via the q parameter in conjunction with a /news/search PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511273/100/0/threaded - http://secunia.com/advisories/39320 - http://holisticinfosec.org/content/view/141/45/ - http://www.securityfocus.com/bid/40108 - http://osvdb.org/64551 - http://secunia.com/secunia_research/2010-56 - https://excha
//www.securityfocus.com/bid/40108 - http://osvdb.org/64551 - http://secunia.com/secunia_research/2010-56 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58470
CVE ID: CVE-2010-1995 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.277Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with "Add new article" privileges, to inject arbitrary web script or HTML via the (1) title, (2) subTitle, and (3) author parameters in conjunction with a /admin/news/article/add PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511272/100/0/threaded - http://secunia.com/advisories/39320 - http://holisticinfosec.org/content/view/141/45/ - h
hive/1/511272/100/0/threaded - http://secunia.com/advisories/39320 - http://holisticinfosec.org/content/view/141/45/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/58471 - http://secunia.com/secunia_research/2010-59/ - http://osvdb.org/64550 - http://www.securityfocus.com/bid/40108
CVE ID: CVE-2010-1996 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.722Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in index.php in TomatoCMS before 2.0.5 allow remote authenticated users, with certain creation privileges, to inject arbitrary web script or HTML via the (1) content parameter in conjunction with a /admin/poll/add PATH_INFO, the (2) meta parameter in conjunction with a /admin/category/add PATH_INFO, and the (3) keyword parameter in conjunction with a /admin/tag/add PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64553 - https://exc
tag/add PATH_INFO. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/64553 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58475 - http://secunia.com/advisories/39320 - http://holisticinfosec.org/content/view/141/45/ - https://exchange.xforce.ibmcloud.com/vulnerabilities/58491 - http://osvdb.org/64552 - http://www.securityfocus.com/bid/40108 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58492 - http://osvdb.org/64554
CVE ID: CVE-2010-1997 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:14.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in admin/edit.php in Saurus CMS 4.7.0 allows remote authenticated users, with "Article list" edit privileges, to inject arbitrary web script or HTML via the pealkiri parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/511223/100/0/threaded - http://osvdb.org/64570 - http://www.securityfocus.com/bid/40059 - http://packetstormsecurity.org/1005-exploits/sauruscms-xss.txt - http://www.htbridge.ch/advisory/xss_in_saurus_cms.html
http://packetstormsecurity.org/1005-exploits/sauruscms-xss.txt - http://www.htbridge.ch/advisory/xss_in_saurus_cms.html - http://secunia.com/advisories/39773
CVE ID: CVE-2010-1998 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the CCK TableField module 6.x before 6.x-1.2 for Drupal allows remote authenticated users, with certain node creation or editing privileges, to inject arbitrary web script or HTML via table headers. Additional Analyst Notes: - CVE Program Container: References: - http://drupal.org/node/790364 - https://exchange.xforce.ibmcloud.com/vulnerabilities/58353 - http://drupal.org/node/790998 - http://www.osvdb.org/64358 - http://www.securityfocus.com/bid/39954 - http://www.vupen.com/english/
al.org/node/790998 - http://www.osvdb.org/64358 - http://www.securityfocus.com/bid/39954 - http://www.vupen.com/english/advisories/2010/1080 - http://secunia.com/advisories/39644
CVE ID: CVE-2010-1999 State: PUBLISHED Published: 2010-05-20T17:00:00 Last Updated: 2024-08-07T02:17:13.323Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in scr/soustab.php in OpenMairie Opencatalogue 1.024, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the dsn[phptype] parameter, a related issue to CVE-2007-2069. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/39688 - http://packetstormsecurity.org/1005-exploits/opencatalogue-lfi.txt - http://www.osvdb.org/64183 - http://www.vupen.com/english/advisories/2
ecurity.org/1005-exploits/opencatalogue-lfi.txt - http://www.osvdb.org/64183 - http://www.vupen.com/english/advisories/2010/1051 - http://www.exploit-db.com/exploits/12475
CVE ID: CVE-2010-20007 State: PUBLISHED Published: 2025-08-21T20:13:54.911Z Last Updated: 2025-08-22T15:15:45.148Z Vendors: Rocket Software Products: Seagull FTP Client Problem Types: CWE-121 Description: Seagull FTP Client <= v3.3 Build 409 contains a stack-based buffer overflow vulnerability in its FTP directory listing parser. When the client connects to an FTP server and receives a crafted response to a LIST command containing an excessively long filename, the application fails to properly validate input length, resulting in a buffer overflow that overwrites the Structured Exception Handler (SEH). This may allow remote attackers to execute arbitrary code on the client system. This produc
red Exception Handler (SEH). This may allow remote attackers to execute arbitrary code on the client system. This product line was discontinued and users were advised to use BlueZone Secure FTP instead, at the time of disclosure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/seagull_list_reply.rb - https://www.exploit-db.com/exploits/16705 - https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ - https://web.archive.org/web/20120102094617/http://bluezone.rocketsoftware.com/products/secure-managed-file-transfer/bz-secure-
//web.archive.org/web/20120102094617/http://bluezone.rocketsoftware.com/products/secure-managed-file-transfer/bz-secure-ftp/at-a-glance - https://www3.rocketsoftware.com/bluezone/help/v34/sftp/sftp.htm - https://www.vulncheck.com/advisories/seagull-ftp-stack-buffer-overflow
CVE ID: CVE-2010-20010 State: PUBLISHED Published: 2025-08-20T16:34:48.927Z Last Updated: 2025-11-20T02:01:07.647Z Vendors: Foxit Software Products: Foxit PDF Reader Problem Types: CWE-121 Description: Foxit PDF Reader before 4.2.0.0928 does not properly bound-check the /Title entry in the PDF Info dictionary. A specially crafted PDF with an overlong Title string can overflow a fixed-size stack buffer, corrupt the Structured Exception Handler (SEH) chain, and lead to arbitrary code execution in the context of the user who opens the file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.exploit-db.com/exploits/15532 - https://www.exploit-db.com/exploits/16621 - htt
Vulnrichment: References: - https://www.exploit-db.com/exploits/15532 - https://www.exploit-db.com/exploits/16621 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/foxit_title_bof.rb - https://www.exploit-db.com/exploits/15514/ - https://www.foxit.com/pdf-reader/version-history.html - https://www.vulncheck.com/advisories/foxit-pdf-reader-title-stack-buffer-overflow
CVE ID: CVE-2010-20034 State: PUBLISHED Published: 2025-08-21T20:12:22.120Z Last Updated: 2025-08-22T15:26:33.844Z Vendors: New Software S.C. Products: Gekko Manager FTP Client Problem Types: CWE-121 Description: Gekko Manager FTP Client <= 0.77 contains a stack-based buffer overflow in its FTP directory listing parser. When processing a server response to a LIST command, the client fails to properly validate the length of filenames. A crafted response containing an overly long filename can overwrite the Structured Exception Handler (SEH), potentially allowing remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/meta
xecution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/gekkomgr_list_reply.rb - https://www.exploit-db.com/exploits/16728 - https://www.gekkomanager.com/ - https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ - https://www.vulncheck.com/advisories/gekko-manager-ftp-client-stack-buffer-overflow
CVE ID: CVE-2010-20042 State: PUBLISHED Published: 2025-08-20T15:42:51.014Z Last Updated: 2025-08-20T18:44:17.690Z Vendors: Xion Products: Audio Player Problem Types: CWE-121 Description: Xion Audio Player versions prior to 1.0.126 are vulnerable to a Unicode-based stack buffer overflow triggered by opening a specially crafted .m3u playlist file. The file contains an overly long string that overwrites the Structured Exception Handler (SEH) chain, allowing an attacker to hijack execution flow and run arbitrary code. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/xion_m3u_
es: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/xion_m3u_sehbof.rb - https://www.exploit-db.com/exploits/14517 - https://www.exploit-db.com/exploits/14633 - https://www.exploit-db.com/exploits/15598 - https://www.exploit-db.com/exploits/16653 - https://www.r2.com.au/page/products/download/xion-audio-player/ - https://www.vulncheck.com/advisories/xion-audio-player-unicode-stack-buffer-overflow
CVE ID: CVE-2010-20045 State: PUBLISHED Published: 2025-08-20T15:32:19.973Z Last Updated: 2025-08-20T19:17:42.151Z Vendors: CursorArts Products: FileWrangler Problem Types: CWE-121 Description: FileWrangler <= 5.30 suffers from a stack-based buffer overflow vulnerability when parsing directory listings from an FTP server. A malicious server can send an overlong folder name in response to a LIST command, triggering memory corruption during client-side rendering. Exploitation requires passive user interaction—simply connecting to the server—without further input. Successful exploitation may lead to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
xploitation may lead to arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20111016194057/https://www.corelan.be/index.php/2010/10/12/death-of-an-ftp-client/ - https://cursorarts.com/ca_fw.html - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/filewrangler_list_reply.rb - https://www.exploit-db.com/exploits/16721 - https://www.vulncheck.com/advisories/filewrangler-stack-buffer-overflow
CVE ID: CVE-2010-20049 State: PUBLISHED Published: 2025-08-20T15:36:11.493Z Last Updated: 2025-08-22T16:19:49.018Z Vendors: LeapWare Products: LeapFTP Problem Types: CWE-121 Description: LeapFTP < 3.1.x contains a stack-based buffer overflow vulnerability in its FTP client parser. When the client receives a directory listing containing a filename longer than 528 bytes, the application fails to properly bound-check the input and overwrites the Structured Exception Handler (SEH) chain. This allows an attacker operating a malicious FTP server to execute arbitrary code on the victim’s machine when the file is listed or downloaded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -