135 matches found
CVE-2024-0204
CVE-2024-0204 : Contournement d'authentification dans GoAnywhere MFT Script permettant de créer un nouvel utilisateur administrateur dans GoAnywhere MFT. Article de blog Plus de détails ici : https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Utilisation L...
CVE-2023-0669
CVE-2023-0669 CVE-2023-0669 GoAnywhere MFT vulnérabilité d'injection de commandes...
CVE-2025-10035
CVE-2025-10035 Scanner Overview This project provides a tool to scan for systems potentially affected by CVE-2025-10035 , a deserialization vulnerability in the License Servlet of Fortra's GoAnywhere MFT. The vulnerability may allow an attacker with a validly forged license response signature to...
Fortra GoAnywhere Managed File Transfer (MFT) < 7.10.2 Path Traversal (CVE-2026-15913)
According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer MFT running on the remote host is prior to 7.10.2. It is, therefore, affected by a path traversal vulnerability in the /attachRemoteFiles endpoint which allows Web Users with both Secure Folders and...
CVE-2024-0204
CVE-2024-0204 : Analyse approfondie du contournement d'authentification de Fortra GoAnywhere MFT Ce dépôt contient une preuve de concept d'exploit pour la vulnérabilité de contournement d'authentification CVE-2024-0204 découverte dans le produit GoAnywhere MFT de Fortra. Cette vulnérabilité perme...
CVE-2025-10035
CVE-2025-10035 — Fortra GoAnywhere MFT : Désérialisation RCE du Servlet de Licence Analyse rédigée par Sentinel AI Defense. Analyse défensive uniquement — aucun exploit fonctionnel ni PoC n'est publié ici. Une chaîne de désérialisation parfaite de score 10 dans Fortra GoAnywhere MFT : une signatu...
CVE-2025-10035
CVE-2025-10035 Comment fonctionne cette méthode de détection ? Détecte les instances vulnérables de GoAnywhere MFT en extrayant les numéros de version de la page de connexion et en les faisant correspondre aux plages de versions affectées. Comment exécuter ce script ? 1. Téléchargez Nuclei depuis...
CVE-2023-0669
CVE-2023-0669 GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. 0x00 Dork shodan root@kitploit: title:"GoAnywhere" FOFA root@kitploit: title="GoAnywhere" 0x01 Use Java...
CVE-2023-0669
CVE-2023-0669 GoAnywhere MFT 反序列化 - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669是一个GoAnywhere MFT反序列化漏洞，由于反序列化一个任意攻击者控制的对象，在License Response Servlet中存在一个预先认证的命令注入漏洞。攻击者可以利用该漏洞在受影响的系统上执行任意代码，从而导致系统被完全控制。该漏洞影响版本为7.1.2之前，不包括7.1.2。 CVE-2023-0669 is a GoAnywhere MFT deserialization vulnerability that...
fortra-goanywhere-mft-vulnerability-detection
Fortra GoAnywhere MFT Vulnerability Detection Modèles Nuclei pour détecter les vulnérabilités Fortra GoAnywhere MFT. Créé par@rxerium Aperçu Modèles de détection de CVE pour Fortra GoAnywhere Managed File Transfer MFT, incluant plusieurs vulnérabilités CISA KEV exploitées par des groupes de...
EUVD-2026-75175
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913
Fortra's GoAnywhere MFT versions prior to 7.10.2 are affected by a path traversal vulnerability in the /attachRemoteFiles endpoint. An authenticated Web User holding both Secure Folders and Secure Mail permissions can escape their sandboxed home directory, enabling arbitrary file read . The CNA-a...
CVE-2026-15913 Path Traversal in Fortra's GoAnywhere MFT Endpoint
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2025-14362
The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force...
CVE-2026-1089
User‑Controlled HTTP Header in Fortra's GoAnywhere MFT prior to version 7.10.0 allows attackers to trigger a DNS lookup, as well as DNS Rebinding and Information Disclosure...
CVE-2026-0971
An improper session timeout issue in Fortra's GoAnywhere MFT prior to version 7.10.0 results in SAML configured Web Users being redirected to the regular login page instead of the SAML login page...
📄 GoAnywhere MFT 7.9.1 HTML Injection
GoAnywhere MFT versions prior to 7.10.0 are affected by an HTML injection vulnerability in the email templating functionality. If an attacker is able to influence the content of a template variable, malicious HTML can be embedded into outgoing emails generated by the application. As these message...
EUVD-2025-209540
The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force...