Vendor
ProFTPD: Multiple Vulnerabilities Leading to RCE and Information Disclosure
3 TTPsA remote, authenticated attacker can exploit multiple vulnerabilities in ProFTPD to achieve arbitrary code execution and disclose confidential information, leading to system compromise and data theft.
ProFTPD mod_sftp Heap Buffer Overflow Leads to Arbitrary Code Execution
1 TTP 1 CVEA heap-based buffer overflow vulnerability exists in the mod_sftp module of ProFTPD versions prior to 1.3.9c and 1.3.10rc3, allowing authenticated low-privilege attackers to achieve arbitrary code execution by sending specially crafted SFTP packet fragments exceeding 16 KB, corrupting memory and redirecting function calls.
ProFTPD: Vulnerability Enables Denial of Service
1 TTPAn authenticated remote attacker can exploit a vulnerability within ProFTPD to initiate a denial-of-service attack, leading to the unavailability of the FTP service. This flaw could be triggered by legitimate users or adversaries with valid credentials, causing operational disruption.
ProFTPD mod_sftp Heap Overflow Allows Authenticated Denial of Service (CVE-2026-53994)
1 TTP 1 CVEAn authenticated SFTP user can trigger a heap-based buffer overflow in ProFTPD's mod_sftp module (CVE-2026-53994) by sending a malformed SFTP packet, leading to an integer underflow, an undersized buffer allocation, and subsequent heap corruption, which results in a reliable remote denial of service.
ProFTPD Vulnerability Allows SQL Injection
2 rules 1 TTPA remote, anonymous attacker can exploit a SQL injection vulnerability in ProFTPD, potentially leading to unauthorized data access or modification.
ProFTPD SQL Injection Vulnerability
2 rules 1 TTPAn anonymous remote attacker can exploit a SQL injection vulnerability in ProFTPD.