88 matches found
SystemVulnerabilityChecklist_Project4_Decodelabs
🔐 Lista de Verificación de Vulnerabilidades del Sistema Un ejercicio de evaluación de seguridad y endurecimiento de red realizado contra una máquina Linux objetivo vulnerable. El proyecto se centra en identificar vulnerabilidades críticas, evaluar su impacto e implementar mitigación basada en...
CVE-2015-3306-Home-Lab
ProFTPD 1.3.5（modcopy）—— RCE 模拟实验室 此实验室旨在模拟漏洞 CVE-2015-3306 —— ProFTPD modcopy 远程文件复制到 RCE 用于学习通过 ProFTPD 的 modcopy 模块实现 Web Shell 注入 RCE 。 功能特性 存在漏洞的 ProFTPD 1.3.5 完全启用 modcopy（SITE CPFR / SITE CPTO） 支持匿名 FTP Apache2 + PHP5，用于模拟 web 根目录 /var/www/html 攻击者可利用 SITE CPFR/CPTO 将文件复制到 webroot 以触发 RCE...
CVE-2018-17873
CVE-2018-17873 运行固件版本 7.0.8rc3 及更早版本的 WiFiRanger 室内路由器（Core、GoAC）及其室外配对路由器（Sky Pro、EliteAC、EliteAC FM）允许匿名 FTP 读写访问，并且 SSH 私钥以明文形式保留——这使得查看/复制密钥并以 root 权限登录变得轻而易举。 利用此漏洞需要相邻网络访问。 漏洞利用： 极其简单的 shell 脚本，可获取私钥并以 root 身份登录。 使用方法： ./wifiRangerPwn.sh...
PT-2026-89500
rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.70.0 until 1.75.1, the serve/start RC interface accepts per-server proxyOpt.AuthProxy settings, and the FTP and S3 constructors in cmd/serve/ftp/ftp.go and cmd/serve/s3/server.go...
[SECURITY] Fedora 44 Update: proftpd-1.3.9a-2.fc44
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...
EUVD-2001-0778
Malware in sbrugna...
EUVD-2004-1884
Malware in sbrugna...
EUVD-2007-1725
Malware in sbrugna...
EUVD-1999-0525
Malware in sbrugna...
EUVD-1999-0496
Malware in sbrugna...
EUVD-2001-1394
Malware in sbrugna...
EUVD-1999-1392
Malware in sbrugna...
CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild
A recently disclosed maximum-severity security flaw impacting the Wing FTP Server has come under active exploitation in the wild, according to Huntress. The vulnerability, tracked as CVE-2025-47812 CVSS score: 10.0, is a case of improper handling of null '\0' bytes in the server's web interface,...
VulnCheck KEV: CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
CVE-2024-36443
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP...