CVE-2015-3306-Home-Lab

ENGLISH BELOW ProFTPD 1.3.5 modcopy — RCE Simulation Lab Lab นี้ถูกออกแบบเพื่อจำลองช่องโหว่ CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE ใช้สำหรับเรียนรู้ Web Shell Injection RCE ผ่านโมดูล modcopy ของ ProFTPD Features ProFTPD 1.3.5 แบบ Vulnerable เปิดใช้ modcopy เต็มรูปแบบ SITE CPFR /...

Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added five security flaws to its Known Exploited Vulnerabilities KEV catalog, following their abuse by a China-linked threat actor known as Flax Typhoon. The vulnerabilities in question are listed below - CVE-2015-3306 CVS...

linux-malware-detect

Linux Malware Detect LMD Scanner di malware per Linux — rilevamento delle minacce multi-stadio MD5, SHA-256, HEX, YARA, analisi statistica, integrazione con ClamAV, monitoraggio in tempo reale tramite inotify, operazioni di quarantena/pulizia/ripristino e alerting multi-canale email, Slack,...

OpenVAS-Vulnerability-Analysis-Incident-Response-Report

OpenVAS-Vulnerability-Analysis-Incident-Response-Report Real-World Simulation: FTP Service Exploitation ProFTPD CVE-2015-3306 Real-World Simulation: FTP Service Exploitation ProFTPD CVE-2015-3306 📌 Overview This project demonstrates a full-cycle vulnerability assessment and incident response...

CVE-2026-42167-PoC

CVE reported by ZeroPath Research original writeup: https://zeropath.com/blog/proftpd-cve-2026-42167-auth-bypass-privesc-rce my version : https://jimmexploit.vercel.app/cve/proftpd-unauthenticated-sql-injection-leads-to-rce Description This repository contains a functional exploit for...

CVE-2026-42167

CVE-2026-42167: SQL Injection in ProFTPD modsql 📋 Executive Summary CVE-2026-42167 is a critical SQL injection vulnerability in ProFTPD's modsql module that allows authentication bypass , backdoor user injection , and remote code execution RCE. Attribute| Value ---|--- Type| SQL Injection CWE-89...

CVE-2026-42167-Exploit

CVE-2026-42167 Master Exploit Tool A professional security research tool for exploiting the CVE-2026-42167 vulnerability in ProFTPD's modsql module. This tool performs unauthenticated SQL injection to exfiltrate sensitive files from the server via time-based side-channel attacks. "Note: The...

CVE-2026-42167-PoC

CVE-2026-42167 POC Pre-Authentication Remote Code Execution in ProFTPD via modsql SQL Injection Author: Van Glenndon Enad Original Discovery: ZeroPath Published: May 1, 2026 Severity: Critical CVSS v3.1 Score: 8.1 CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS v2 Score: 7.6...

ProFTPD Improper Access Control Vulnerability

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

VulnCheck KEV: CVE-2015-3306

ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

EulerOS 2.0 SP10 : proftpd (EulerOS-SA-2026-3713)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the...

EulerOS 2.0 SP10 : proftpd (EulerOS-SA-2026-3760)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the...

exploit_proftpd

Explotacion de una vulnerabilidad de ProFTPD para conseguir ej...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Proftpd

CVE-2010-4221 — ProFTPD TELNET IAC Stack Overflow: From Patch...

EulerOS 2.0 SP12 : proftpd (EulerOS-SA-2026-3373)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the...

EulerOS 2.0 SP12 : proftpd (EulerOS-SA-2026-3298)

According to the versions of the proftpd package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : ProFTPD modsftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxppacketread function accepts the...

Exploit for Improper Access Control in Proftpd

cve-2015-3306-lab Reproducible...

MACHINE-BASIC-PENTESTING-1

Penetration Testing Assessment Report: Basic Pentesting 1 !R...

[SECURITY] Fedora 44 Update: proftpd-1.3.9d-2.fc44

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 43 Update: proftpd-1.3.9d-2.fc43

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...