CVE-2020-8815

Improper connection handling in the base connection handler in IKTeam BearFTP before v0.3.1 allows a remote attacker to achieve denial of service via a Slowloris approach by sending a large volume of small packets.

• CWE-20

• https://github.com/kolya5544/BearFTPThird Party Advisory
• https://github.com/kolya5544/BearFTP/blob/f5a8047587c1a96456d4f291c12b038b9ab0d0c5/BearFTP/Program.cs#L503-L525Exploit, Third Party Advisory
• https://github.com/kolya5544/BearFTP/commit/17a6ead72d4a25cbfcef5e27613aa0a5f88a4b26Patch, Third Party Advisory
• https://github.com/kolya5544/BearFTP/commit/66dc9d95e58bca133f265457d32007cdf38b66adPatch, Third Party Advisory
• https://github.com/kolya5544/BearFTP/releases/tag/0.4.0Release Notes, Third Party Advisory
• https://github.com/kolya5544/BearFTPThird Party Advisory
• https://github.com/kolya5544/BearFTP/blob/f5a8047587c1a96456d4f291c12b038b9ab0d0c5/BearFTP/Program.cs#L503-L525Exploit, Third Party Advisory
• https://github.com/kolya5544/BearFTP/commit/17a6ead72d4a25cbfcef5e27613aa0a5f88a4b26Patch, Third Party Advisory
• https://github.com/kolya5544/BearFTP/commit/66dc9d95e58bca133f265457d32007cdf38b66adPatch, Third Party Advisory
• https://github.com/kolya5544/BearFTP/releases/tag/0.4.0Release Notes, Third Party Advisory

Published

Feb 12, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-8808The CorsairLLAccess64.sys and CorsairLLAccess32.sys drivers …7.8
• CVE-2020-8809Gurux GXDLMS Director prior to 8.5.1905.1301 downloads updat…8.1
• CVE-2020-8810An issue was discovered in Gurux GXDLMS Director through 8.5…8.1
• CVE-2020-8811ajax/profile-picture-upload.php in Bludit 3.10.0 allows auth…4.3
• CVE-2020-8812Bludit 3.10.0 allows Editor or Author roles to insert malici…5.4
• CVE-2020-8813graph_realtime.php in Cacti 1.2.8 allows remote attackers to…8.8
• CVE-2020-8816Pi-hole Web v4.3.2 (aka AdminLTE) allows Remote Code Executi…7.2
• CVE-2020-8817Dataiku DSS before 6.0.5 allows attackers write access to th…8.1
• CVE-2020-8818An issue was discovered in the CardGate Payments plugin thro…8.1
• CVE-2020-8819An issue was discovered in the CardGate Payments plugin thro…8.1
• CVE-2020-8820An XSS Vulnerability exists in Webmin 1.941 and earlier affe…5.4
• CVE-2020-8821An Improper Data Validation Vulnerability exists in Webmin 1…5.4