PCMan vulnerabilities
Published CVEs affecting PCMan products: 2 record(s), with severity, exploitation and fixes.
CVE-2016-15060
High · 8.3
CWE-119 Oct 14, 2026
PCMan FTP Server PORT buffer overflow
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
CVE-2024-58299
Critical · 9.8
CWE-121 Dec 12, 2025
PCMan FTP Server 2.0 Remote Buffer Overflow via 'pwd' Command
PCMan FTP Server 2.0 contains a buffer overflow vulnerability in the 'pwd' command that allows remote attackers to execute arbitrary code. Attackers can send a specially crafted payload during the FTP login process to overwrite memory and potentially gain system access.