CVE-2025-4160 – PCMan FTP Server LS Command Handler Buffer Overflow Vulnerability

May 1, 2025

CVE ID : CVE-2025-4160

Published : May 1, 2025, 10:15 a.m. | 1 hour, 38 minutes ago

Description : A vulnerability was found in PCMan FTP Server up to 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component LS Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

Severity: 7.3 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Source: Read More

Previous ArticleCVE-2025-27007 – Brainstorm Force SureTriggers Privilege Escalation Vulnerability

Next Article CVE-2025-4159 – PCMan FTP Server GLOB Command Handler Buffer Overflow Vulnerability

Highlights

CVE-2025-47917 – Mbed TLS Use-After-Free Vulnerability

July 20, 2025

CVE ID : CVE-2025-47917

Published : July 20, 2025, 7:15 p.m. | 4 hours, 14 minutes ago

Description : Mbed TLS before 3.6.4 allows a use-after-free in certain situations of applications that are developed in accordance with the documentation. The function mbedtls_x509_string_to_names() takes a head argument that is documented as an output argument. The documentation does not suggest that the function will free that pointer; however, the function does call mbedtls_asn1_free_named_data_list() on that argument, which performs a deep free(). As a result, application code that uses this function (relying only on documented behavior) is likely to still hold pointers to the memory blocks that were freed, resulting in a high risk of use-after-free or double-free. In particular, the two sample programs x509/cert_write and x509/cert_req are affected (use-after-free if the san string contains more than one DN).

Severity: 8.9 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

RoR-Bench: Revealing Recitation Over Reasoning in Large Language Models Through Subtle Context Shifts

CodeSOD: A Dropped Down DataSet

Automating Design Systems: Tips And Resources For Getting Started

OpenAI releases two open weight reasoning models

Accelerate tool adoption with a developer experimentation framework

Why I’ll keep the Samsung Z Fold 7 over the Pixel 10 Pro Fold – especially if these rumors are true

You may soon get Starlink internet for a much lower ‘Community’ price – here’s how

uBlock Origin Lite has finally arrived for Safari – with one important caveat

Perplexity says Cloudflare’s accusations of ‘stealth’ AI scraping are based on embarrassing errors

Send Notifications in Laravel with Firebase Cloud Messaging and Notifire

Send Notifications in Laravel with Firebase Cloud Messaging and Notifire

Simplified Batch Job Creation with Laravel’s Enhanced Artisan Command

Send Notifications in Laravel with Firebase Cloud Messaging and Notifire

This comfy mesh office chair I’ve been testing costs less than $400 — but there’s a worthy alternative that’s far more affordable

This comfy mesh office chair I’ve been testing costs less than $400 — but there’s a worthy alternative that’s far more affordable

How to get started with Markdown in the Notepad app for Windows 11

Microsoft Account Lockout: LibreOffice Developer’s Week-Long Nightmare Raises Concerns

CVE-2025-4160 – PCMan FTP Server LS Command Handler Buffer Overflow Vulnerability

CVE-2025-54594 – React Native Bottom Tabs GitHub Actions Code Execution

CVE-2025-54652 – VMware Virtualization Path Traversal Vulnerability

DslogdRAT Malware Deployed via Ivanti ICS Zero-Day CVE-2025-0282 in Japan Attacks

CVE-2025-6267 – Zhilink ADP Application Developer Platform SQL Injection Vulnerability

CVE-2025-49187 – Apache HTTP Server Username Brute Forcing

Why the most exciting Android phone this year isn’t made by Samsung or Google

CVE-2025-47917 – Mbed TLS Use-After-Free Vulnerability

RoR-Bench: Revealing Recitation Over Reasoning in Large Language Models Through Subtle Context Shifts

CVE-2025-27531 – Apache InLong Deserialization of Untrusted Data Remote File Read Vulnerability

CVE-2025-6138 – TOTOLINK T10 HTTP POST Request Handler Buffer Overflow

CVE-2025-4160 – PCMan FTP Server LS Command Handler Buffer Overflow Vulnerability

Related Posts