Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 16:26:18 +0000 cnvd-2017-14065 https://cve.radiocsirt.org/vuln/cnvd-2017-14065 cnvd-2017-14065 https://cve.radiocsirt.org/vuln/cnvd-2017-14065 EUVD-2026-177191 https://cve.radiocsirt.org/vuln/euvd-2026-177191 EUVD-2026-177191 https://cve.radiocsirt.org/vuln/euvd-2026-177191 fkie_cve-2017-2850 https://cve.radiocsirt.org/vuln/fkie_cve-2017-2850 <p>In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability.</p> <p>In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2017-2850 GHSA-665v-8rgp-xwx8 https://cve.radiocsirt.org/vuln/ghsa-665v-8rgp-xwx8 <p>In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability.</p> <p>In the web management interface in Foscam C1 Indoor HD cameras with application firmware 2.52.2.37, a specially crafted HTTP request can allow for a user to inject arbitrary characters in the pureftpd.passwd file during a username change, which in turn allows for bypassing chroot restrictions in the FTP server. An attacker can simply send an HTTP request to the device to trigger this vulnerability.</p> https://cve.radiocsirt.org/vuln/ghsa-665v-8rgp-xwx8 gsd-2017-2850 https://cve.radiocsirt.org/vuln/gsd-2017-2850 gsd-2017-2850 https://cve.radiocsirt.org/vuln/gsd-2017-2850