fortra-goanywhere-mft-vulnerability-detection

Обнаружение уязвимостей Fortra GoAnywhere MFT Шаблоны Nuclei для обнаружения уязвимостей Fortra GoAnywhere MFT. Создано@rxerium Обзор Шаблоны обнаружения CVE для Fortra GoAnywhere Managed File Transfer MFT, включая несколько уязвимостей CISA KEV, эксплуатируемых группами программ-вымогателей...

CVE-2024-0204

CVE-2024-0204: Authentifizierungsumgehung in GoAnywhere MFT Skript zum Erstellen eines neuen Admin-Benutzers in GoAnywhere MFT. Blogbeitrag Weitere Details hier: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Verwendung Das Passwort muss mindestens 8...

CVE-2025-10035

CVE-2025-10035 — RCE da deserializzazione nel License Servlet di Fortra GoAnywhere MFT Rapporto di ricerca di Sentinel AI Defense. Solo analisi difensiva — nessun exploit funzionante o PoC viene pubblicato qui. Una catena di deserializzazione perfetta 10/10 in Fortra GoAnywhere MFT: una firma...

CVE-2025-10035

CVE-2025-10035 Come funziona questo metodo di rilevamento? Rileva istanze vulnerabili di GoAnywhere MFT estraendo i numeri di versione dalla pagina di login e confrontandoli con gli intervalli di versioni interessate. Come eseguo questo script? 1. Scarica Nuclei da qui 2. Copia il template sul tu...

CVE-2024-25153

Exploit for CVE-2024-25153 Inhaltsverzeichnis Klicken zum Anzeigen 1. Einführung 2. Installation 3. Verwendung 4. Mitwirken 5. Lizenz Einführung Willkommen beim Exploit for CVE-2024-25153! Dieses Projekt ist eine Lösung, um die Schwachstelle CVE-2024-25153 auszunutzen und Code remote in Fortra...

CVE-2024-25153

CVE-2024-25153 Questa è una proof of concept per CVE-2024-25153, una vulnerabilità di esecuzione remota di codice in Fortra FileCatalyst Workflow 5.x, prima della versione 5.1.6 Build 114. I dettagli tecnici completi sono disponibili su...

Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

CVE-2025-10035

Scanner CVE-2025-10035 Visão Geral Este projeto fornece uma ferramenta para procurar sistemas potencialmente afetados pela CVE-2025-10035 , uma vulnerabilidade de desserialização no Servlet de Licença do Fortra GoAnywhere MFT. A vulnerabilidade pode permitir que um atacante com uma assinatura de...

Fortra GoAnywhere MFT - Authentication Bypass

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. id: CVE-2024-0204 info: name: Fortra GoAnywhere MFT - Authentication Bypass author: DhiyaneshDK severity: critical description: | Authentication bypas...

Fortra GoAnywhere MFT - Remote Code Execution

Fortra GoAnywhere MFT is susceptible to remote code execution via unsafe deserialization of an arbitrary attacker-controlled object. This stems from a pre-authentication command injection vulnerability in the License Response Servlet. id: CVE-2023-0669 info: name: Fortra GoAnywhere MFT - Remote...

EUVD-2026-38631

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting XSS vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields...

CVE-2026-12164

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164 Privilege Escalation in Fortra File Integrity Monitoring (FIM)

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164

CVE-2026-12164 affects Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, and concerns versions prior to 9.4.0. The issue can cause incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import creat...

CVE-2026-12163

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting XSS vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields...

CVE-2026-12163 Stored XSS in Fortra File Integrity Monitoring (FIM)

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting XSS vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields...

CVE-2026-12163

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored XSS in the Asset View UI. An authenticated user capable of creating/modifying affected node or database configuration fields can store script content that is rendered as HTML when Asse...

PT-2026-51604

Name of the Vulnerable Software and Affected Versions Fortra File Integrity Monitoring FIM versions prior to 9.4.0.1 Description A stored cross-site scripting XSS issue exists in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or...

CVE-2026-9862

Fortra's Core Privileged Access Manager BoKS contains an OS command injection vulnerability in the boksautoregisterd service. A remote attacker with network access to the service may be able to cause commands to be executed with the privileges of the service during the autoregistration processing...