Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

🗓️ 22 Feb 2026 18:28:24Reported by popyueType

githubexploit

githubexploit🔗 github.com👁 181 Views

Unauthenticated RCE in Wing FTP Server via improper null byte handling during session serialization.

Reporter	Title	Published	Views	Family All 74
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	2 Jul 202521:51	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	18 Feb 202608:41	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	1 Jul 202518:20	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Astaro Security_Gateway_Software	30 Apr 201915:15	–	githubexploit
GithubExploit	HTB-WingData-Writeup	27 Apr 202615:17	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	1 Jul 202512:02	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	27 Jul 202517:47	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	7 Jul 202513:20	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	4 Jul 202516:22	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	15 Feb 202601:06	–	githubexploit

22 Feb 2026 18:35Current

8.8High risk

Vulners AI Score8.8

CVSS 3.16.6 - 10

EPSS0.95343

SSVC

Wing FTP Server Null byte vulnerability Session serialization Lua session file Remote code execution Authenticated endpoint