CVE-2024-0204

CVE-2024-0204: GoAnywhere MFT 中的认证绕过 用于在 GoAnywhere MFT 中创建新管理员用户的脚本。 博客文章 更多详情请访问： https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive 使用方法 密码长度必须至少为8个字符，以满足 GoAnywhere MFT 的复杂性要求。 root@kitploit: % python3 CVE-2024-0204.py -h usage: CVE-2024-0204 GoAnywher...

CVE-2025-10035

CVE-2025-10035 扫描器 概述 该项目提供了一个工具，用于扫描可能受 CVE-2025-10035 影响的系统，这是一个存在于 Fortra GoAnywhere MFT 的许可证 Servlet 中的反序列化漏洞。该漏洞可能允许攻击者通过合法伪造的许可证响应签名来反序列化任意攻击者控制的对象，进而可能导致命令注入。 注意 ：本项目严格用于 教育目的 ，旨在识别受影响的 GoAnywhere MFT 版本。它不包含可利用的代码，也不会促成恶意活动。 漏洞详情 CVE ID ：CVE-2025-10035 受影响软件 ：Fortra GoAnywhere MFT 描述 ：许可证...

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT 许可证 Servlet 反序列化远程代码执行 由 Sentinel AI Defense 编写的研究报告。仅用于防御分析——此处未发布任何有效的漏洞利用或 PoC。 一条满分的反序列化链存在于 Fortra GoAnywhere MFT 中：伪造的许可证响应签名使未经身份验证的攻击者能够反序列化任意对象，并在文件传输服务器上实现命令执行。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2025-10035-goanywhere-deserialization.ht...

CVE-2025-10035

CVE-2025-10035 ¿Cómo funciona este método de detección? Detecta instancias vulnerables de GoAnywhere MFT extrayendo números de versión de la página de inicio de sesión y comparándolos con los rangos de versiones afectadas. ¿Cómo ejecuto este script? 1. Descarga Nuclei desde aquí 2. Copia la...

CVE-2024-25153

CVE-2024-25153 Este es una prueba de concepto para CVE-2024-25153, una vulnerabilidad de Ejecución Remota de Código en Fortra FileCatalyst Workflow 5.x, antes de 5.1.6 Build 114. Los detalles técnicos completos se pueden encontrar en...

fortra-goanywhere-mft-vulnerability-detection

Detección de Vulnerabilidades en Fortra GoAnywhere MFT Plantillas de Nuclei para detectar vulnerabilidades de Fortra GoAnywhere MFT. Creado por@rxerium Resumen Plantillas de detección de CVEs para Fortra GoAnywhere Managed File Transfer MFT, que incluyen múltiples vulnerabilidades CISA KEV...

CVE-2024-25153

Exploit para CVE-2024-25153 Índice Haga clic para ver 1. Introducción 2. Instalación 3. Uso 4. Contribuir 5. Licencia Introducción ¡Bienvenido al Exploit para CVE-2024-25153! Este proyecto es una solución para explotar la vulnerabilidad CVE-2024-25153 y ejecutar código de forma remota en Fortra...

Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

Fortra GoAnywhere MFT - Authentication Bypass

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. id: CVE-2024-0204 info: name: Fortra GoAnywhere MFT - Authentication Bypass author: DhiyaneshDK severity: critical description: | Authentication bypas...

EUVD-2026-75175

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

CVE-2026-15913

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

CVE-2026-15913

Fortra's GoAnywhere MFT versions prior to 7.10.2 are affected by a path traversal vulnerability in the /attachRemoteFiles endpoint. An authenticated Web User holding both Secure Folders and Secure Mail permissions can escape their sandboxed home directory, enabling arbitrary file read . The CNA-a...

Fortra GoAnywhere MFT - Remote Code Execution

Fortra GoAnywhere MFT is susceptible to remote code execution via unsafe deserialization of an arbitrary attacker-controlled object. This stems from a pre-authentication command injection vulnerability in the License Response Servlet. id: CVE-2023-0669 info: name: Fortra GoAnywhere MFT - Remote...

EUVD-2026-38631

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting XSS vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields...

CVE-2026-12164

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164 Privilege Escalation in Fortra File Integrity Monitoring (FIM)

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164

CVE-2026-12164 affects Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, and concerns versions prior to 9.4.0. The issue can cause incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import creat...

CVE-2026-12163

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting XSS vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields...

CVE-2026-12163

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored XSS in the Asset View UI. An authenticated user capable of creating/modifying affected node or database configuration fields can store script content that is rendered as HTML when Asse...