Lucene search
+L

7048 matches found

OSV
OSV
โ€ขadded 2026/03/11 8:14 p.m.โ€ข13 views

CVE-2026-32108 Copyparty ftp/sftp: Sharing a single file did not fully restrict source-folder access

Copyparty is a portable file server. Prior to 1.20.12, there was a missing permission-check in the shares feature the shr global-option. This vulnerability only applies when the shares feature is used for the specific purpose of creating a share of just a single file inside a folder or either the...

2.3CVSS5.8AI score
SaveExploits0References3
CVE
CVE
โ€ขadded 2026/03/11 3:23 a.m.โ€ข39 views

CVE-2026-29515

MiCode FileExplorer contains an authentication bypass vulnerability in its embedded SwiFTP FTP server. The PASS command handler unconditionally grants access, allowing network attackers to log in with any username/password and to list, read, write, and delete files exposed by the FTP server. Affe...

9.8CVSS6AI score0.00963EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2026/03/11 12:00 a.m.โ€ข4 views

CVE-2026-29515: Incorrect Implementation of Authentication Algorithm

MiCode FileExplorer contains an authentication bypass vulnerability in the embedded SwiFTP FTP server component that allows network attackers to log in without valid credentials. Attackers can send arbitrary username and password combinations to the PASS command handler, which unconditionally...

9.8CVSS6AI score0.00963EPSS
SaveExploits0References4
NVD
NVD
โ€ขadded 2026/03/10 6:17 p.m.โ€ข14 views

CVE-2025-41710

An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges...

6.5CVSS0.00394EPSS
SaveExploits0References4
Cvelist
Cvelist
โ€ขadded 2026/03/10 8:26 a.m.โ€ข40 views

CVE-2025-41710 Use of Hard-coded Credentials in power analyzer

An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges...

6.5CVSS0.00394EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2026/03/10 12:00 a.m.โ€ข2 views

CVE-2025-41710: Use of Hard-coded Credentials

An unauthenticated remote attacker may use hardcodes credentials to get access to the previously activated FTP Server with limited read and write privileges...

6.5CVSS5.9AI score0.00394EPSS
SaveExploits0References1
GithubExploit
GithubExploit
โ€ขadded 2026/02/24 5:07 a.m.โ€ข205 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

๐Ÿš€ Wing FTP Exploit - CVE-2025-47812 Exploit mejorado para Win...

10CVSS8.7AI score0.93235EPSS
SaveExploits24
CNNVD
CNNVD
โ€ขadded 2026/02/24 12:00 a.m.โ€ข23 views

SolarWinds Serv-U ไปฃ็ ้—ฎ้ข˜ๆผๆดž

SolarWinds Serv-U is an FTP File Transfer Protocol server software developed by the American company SolarWinds. SolarWinds Serv-U has a code vulnerability that stems from type confusion, which may lead to the execution of arbitrary local code...

9.1CVSS7.8AI score0.00453EPSS
SaveExploits0References2
GithubExploit
GithubExploit
โ€ขadded 2026/02/22 6:28 p.m.โ€ข257 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 โ€” Wing FTP Server Unauthenticated RCE โ–ˆโ–ˆโ•—...

10CVSS8.8AI score0.93235EPSS
SaveExploits26
Packet Storm
Packet Storm
โ€ขadded 2026/02/20 12:00 a.m.โ€ข159 views

๐Ÿ“„ Solar FTP Server 2.1.1 PASV Denial of Service

Solar FTP Server version 2.1.1 PASV command denial of service proof of concept exploit written in PHP. ============================================================================================================================================= | Title : Solar FTP Server 2.1.1 PASV Command - Deni...

5.5AI score
SaveExploits0
GithubExploit
GithubExploit
โ€ขadded 2026/02/19 10:13 p.m.โ€ข191 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 โ€” Wing FTP Server Unauthenticated remote code...

10CVSS8.9AI score0.93235EPSS
SaveExploits24
GithubExploit
GithubExploit
โ€ขadded 2026/02/18 8:41 a.m.โ€ข186 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 โ€” Wing FTP Server Remote Code Execution RCE...

10CVSS8.6AI score0.93235EPSS
SaveExploits24
GithubExploit
GithubExploit
โ€ขadded 2026/02/15 1:06 a.m.โ€ข205 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

No d...

10CVSS8.3AI score0.93235EPSS
SaveExploits24
NVD
NVD
โ€ขadded 2026/02/11 3:16 p.m.โ€ข18 views

CVE-2019-25306

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to insert malicious code that would execute with...

8.5CVSS0.00159EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
โ€ขadded 2026/02/11 2:56 p.m.โ€ข6 views

CVE-2019-25306 BlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to insert malicious code that would execute with...

8.5CVSS6.1AI score0.00159EPSS
SaveExploits0References3
attackerkb
attackerkb
โ€ขadded 2026/02/11 2:56 p.m.โ€ข9 views

CVE-2019-25306

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to insert malicious code that would execute with...

8.5CVSS5.6AI score0.00159EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
โ€ขadded 2026/02/11 2:56 p.m.โ€ข42 views

CVE-2019-25306 BlackMoon FTP Server 3.1.2.1731 - 'BMFTP-RELEASE' Unquoted Serive Path

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to insert malicious code that would execute with...

8.5CVSS0.00159EPSS
SaveExploits0References3
CNNVD
CNNVD
โ€ขadded 2026/02/11 12:00 a.m.โ€ข17 views

BlackMoon FTP Server ไปฃ็ ้—ฎ้ข˜ๆผๆดž

BlackMoon FTP Server is an FTP server provided by BlackMoon FTP Server Inc. Version 3.1.2.1731 of BlackMoon FTP Server has a code vulnerability caused by an unquoted service path. This vulnerability may allow local users to execute code with elevated system privileges...

8.5CVSS6AI score0.00159EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
โ€ขadded 2026/02/11 12:00 a.m.โ€ข2 views

CVE-2019-25306: Unquoted Search Path or Element

BlackMoon FTP Server 3.1.2.1731 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to insert malicious code that would execute with...

8.5CVSS6.1AI score0.00159EPSS
SaveExploits0References1
NVD
NVD
โ€ขadded 2026/02/07 12:15 a.m.โ€ข20 views

CVE-2020-37079

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery CSRF vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user...

5.1CVSS0.00197EPSS
SaveExploits1References4
Rows per page
Query Builder