Lucene search
+L

7 matches found

KittySploit
KittySploit
•added 2026/10/27 1:35 p.m.•4 views

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the Web

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor Application CWE-306, CWE-78 """Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor...

6.1AI score
SaveExploits0References1
KittySploit
KittySploit
•added 2026/10/27 1:35 p.m.•4 views

Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained — Detect

Fingerprint / reachability check for Titan MFT Server 26.0.0 - Unauthenticated First-Run Administrator Setup Chained to Job Post-Command Injection in the WebAdmin Blazor Application CWE-306, CWE-78 !/usr/bin/env python3 -- coding: utf-8 -- """Detection for Titan MFT Server 26.0.0 - Unauthenticate...

6.1AI score
SaveExploits0References1
Packet Storm
Packet Storm
•added 2026/10/13 12:00 a.m.•19 views

South River Titan MFT Server 26.0.0 First-Run Command Injection

South River Titan MFT Server version 26.0.0 contains a first-run administrator setup exposure that permits an unauthenticated reachable client to create the initial administrator. The proof of concept uses the resulting access to configure a job post-transfer command that executes as the service...

6AI score
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/05/23 10:33 a.m.•28 views

CVE-2024-44685

Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI...

5CVSS5.9AI score0.00264EPSS
SaveExploits0References1
NVD
NVD
•added 2024/09/13 4:15 p.m.•52 views

CVE-2024-44685

Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI...

5CVSS0.00264EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/13 12:00 a.m.•12 views

CVE-2024-44685: Exposure of Sensitive Information to an Unauthorized Actor

Titan SFTP and Titan MFT Server 2.0.25.2426 and earlier have a vulnerability a vulnerability where sensitive information, including passwords, is exposed in clear text within the JSON response when configuring SMTP settings via the Web UI...

5CVSS5.9AI score0.00264EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/13 12:00 a.m.•13 views

PT-2024-31212

Name of the Vulnerable Software and Affected Versions Titan SFTP and Titan MFT Server versions 2.0.25.2426 and earlier Description The issue concerns the exposure of sensitive information, including passwords, in clear text within the JSON response when configuring SMTP settings via the Web UI...

5CVSS5.8AI score0.00264EPSS
SaveExploits0References6
Rows per page
Query Builder