170 matches found
CVE-2025-8148
CVE-2025-8148 concerns Fortra’s GoAnywhere MFT; all connected sources describe an improper access control in the SFTP service for versions prior to 7.9.0. Web users who have an Authentication Alias and a valid SSH key but are restricted to password authentication can still log in using their SSH ...
CVE-2025-8148 CVE-2025-8148 Improper Access Control in SFTP service of GoAnywhere MFT
An Improper Access Control in the SFTP service in Fortra's GoAnywhere MFT prior to version 7.9.0 allows Web Users with an Authentication Alias and a valid SSH key but limited to Password authentication for SFTP to still login using their SSH key...
CVE-2025-53896 Kiteworks MFT is vulnerable to Insufficient Session Expiration
Kiteworks MFT orchestrates end-to-end file transfer workflows. Prior to version 9.1.0, a bug in Kiteworks MFT could cause under certain circumstances that a user's active session would not properly time out due to inactivity. This issue has been patched in version 9.1.0...
Kiteworks Mft 安全漏洞
Kiteworks Mft is a software for securely managing internal and external data transfers from Kiteworks USA. A security vulnerability exists in Kiteworks Mft versions prior to 9.1.0 that stems from improperly defined roles and permissions, which could lead to elevated privileges...
PT-2025-48357
Name of the Vulnerable Software and Affected Versions Kiteworks MFT versions prior to 9.1.0 Description Kiteworks MFT orchestrates end-to-end file transfer workflows. A flaw exists where a user’s active session may not properly time out due to inactivity under certain circumstances. This issue wa...
Fortra GoAnywhere MFT License Servlet Deserialization Vulnerability
Fortra GoAnywhere MFT is a Managed File Transfer MFT solution helping organizations build both internal and external data transfer exchanges. GoAnyWhere MFT versions before 7.8.4 and before 7.6.3 suffer from a deserialization vulnerabilty. By crafting a specific payload, a remote and...
EUVD-2020-30232
Malware in sbrugna...
EUVD-2020-30234
Malware in sbrugna...
EUVD-2020-30231
Malware in sbrugna...
EUVD-2011-3386
Malware in sbrugna...
EUVD-2014-2580
Malware in sbrugna...
EUVD-2011-3387
Malware in sbrugna...
EUVD-2015-5658
Malware in sbrugna...
EUVD-2019-4353
Malware in sbrugna...
EUVD-2020-30233
Malware in sbrugna...
EUVD-2017-14634
Malware in sbrugna...
EUVD-2019-12178
Malware in sbrugna...
EUVD-2014-7068
Malware in sbrugna...
Investigating active exploitation of CVE-2025-10035 GoAnywhere Managed File Transfer vulnerability
On September 18, 2025, Fortra published a security advisory regarding a critical deserialization vulnerability in GoAnywhere MFT's License Servlet, which is tracked as CVE-2025-10035 and has a CVSS score of 10.0. The vulnerability could allow a threat actor with a validly forged license response...