CVE-2025-47812

CVE-2025-47812 Improper input validation led to Remote Code Execution to full system compromise 📘 Introduction: Julien Ahrens from RCE Security discovered a critical security vulnerability impacting WingFTP. Tracked as CVE-2025-47812, the vulnerability has a CVSS score of 10. Successful...

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Wing FTP Server RCE Exploit This repository provides a proof-of-concept exploit for CVE-2025-47812 , a remote command execution RCE vulnerability in Wing FTP Server. An attacker can inject and execute arbitrary Lua-based system commands by abusing the username parameter during...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Author: 0xgh057r3c0n 🧠 Description This exploit leverages a Lua injection vulnerability in Wing FTP Server 's login handler loginok.html to execute arbitrary operating system commands or gain a reverse shell. It abuses unsanitized Lua code...

Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie

Wing FTP Server versions prior to 7.4.4 are vulnerable to an authenticated information disclosure vulnerability CVE-2025-47813. The vulnerability occurs due to improper validation of the 'UID' session cookie in the /loginok.html endpoint. Supplying an overlong UID value causes the server to respo...

Wing FTP 6.4.4 - Cross-Site Scripting

Wing FTP 6.4.4 is vulnerable to cross-site scripting via its web interface because an arbitrary IFRAME element can be included in the help pages via a crafted link, leading to the execution of sandboxed arbitrary HTML and JavaScript in the user's browser. id: CVE-2020-27735 info: name: Wing FTP...

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎 Overview: CVE-2025-47812 is a critical remote code execution RCE vulnerability affecting Wing FTP Server versions prior to 7.4.4. It was discovered by a security researcher and has been confirmed to be actively exploited in the wild. 🧱 Root...

CVE-2025-47812

=========================================================== CVE-2025-47812 - Wing FTP Server Remote Code Execution RCE =========================================================== Author: blindma1den Date: July 2025 Exploit Type: Remote Code Execution Unauthenticated Target: Wing FTP Server 7.4.4...

Wing-FTP-Server-7.4.4-RCE-Authenticated

Wing FTP Server 7.4.4 - Remote Code Execution Authenticated CVE-2025-5196 Wing FTP Server provides an administrative Lua scripting console accessible via its web interface. Authenticated administrators are able to execute arbitrary Lua code with insufficient sandboxing. Affected Version: Wing FTP...

CVE-2025-47812-poC

CVE-2025-47812-poC Wing FTP Server RCE CVE-2025-47812에 대한 간단한 익스플로잇으로, 명령 실행 및 리버스 셸 획득이 가능합니다. 교육용으로만 사용하세요. 취약점 상세 정보 이 보안 취약점은 RCESecurityhttps://www.rcesecurity.com/2025/06/what-the-null-wing-ftp-server-rce-cve-2025-47812/에 의해 공개적으로 공개되고 상세히 설명되었습니다. 익스플로잇은 교육 및 테스트 목적으로 제가 직접 개발했습니다. 저는 이 취약...

CVE-2025-47812-poc

CVE-2025-47812 Wing FTP Server 원격 코드 실행 RCE 익스플로잇 CVE-2025-47812 📌 크레딧 : 취약점 발견: Julien @MrTuxracer. 이 PoC 구현은 그들의 원본 연구를 기반으로 합니다. 이 저장소는 Wing FTP Server 원격 코드 실행 RCE 취약점 CVE-2025-47812 에 대한 Python 익스플로잇을 호스팅합니다. 이 심각한 결함으로 인해 공격자는 익명 접근이 활성화된 경우에도 영향을 받는 Wing FTP Server 인스턴스에서 root/SYSTEM 권한으로 ...

CVE-2025-47812

CVE-2025-47812 This is a Proof of Concept PoC of the Wing FTP Server Exploit CVE-2025-47812 Description Wing FTP Server versions prior to 7.4.4 suffered a Remote Code Execution RCE vulnerability as a result of the insecure treatment of the username parameter. When we are allowed to login in the...

CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2에는 세션 직렬화 메커니즘에 원격 코드 실행RCE 취약점이 존재합니다. 인증된 관리자는 도메인 관리자 mydirectorybasefolder 필드를 통해 임의의 Lua 코드를 주입할 수 있으며, 이는 서버 측에서 loadfile을 통해 실행됩니다. 이는 CVE-2025-47812와는 별개의 취약점입니다. v7.4.4에서 CVE-2025-47812에 적용된 수정 사항은 사용자 이름 필드의 null 바이트 주입 벡터만 해결했습니다. 근본적인 안전하지 않은 세션 직렬화는 수정되지 않았으며,...

CVE-2025-47812-Research

CVE-2025-47812 — Wing FTP Server RCE Research Context Cybersecurity observation internship carried out within the Akasec club 1337 Khouribga — July/August 2025. Vulnerability studied CVE : CVE-2025-47812 CVSS Score : 10.0 Critical Affected software : Wing FTP Server 7.4.4 Type : Remote Code...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauthenticated RCE root@kitploit: ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║...

Exploit_CVE-2025-47812

WingFTPServer7.4.3-UnauthenticatedRCE...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE Exploit Exploit Title: Wing FTP Server 7.4.4 Remote Code Execution via Lua Injection CVE: CVE-2025-47812 Tested on: Wing FTP Server v7.3.x Windows/Linux Impact: Remote Code Execution RCE as SYSTEM/root Severity: Critical Description A vulnerability in Wing FTP...

CVE-2025-47812

🚀 Wing FTP Exploit - CVE-2025-47812 Enhanced exploit for Wing FTP Server CVE-2025-47812 - Unauthenticated Remote Code Execution RCE 🔧 Installation Clone this repository and enter the directory: root@kitploit: git clone https://github.com/0xjuarez/CVE-2025-47812.git cd CVE-2025-47812 pip install -...

CVE-2020-9470

What's this Wing FTP Server 6.2.5 - Privilege Escalation Introduction A weakness in the handling of HTTP sessions within Wing FTP Server allows any local user to escalate privileges to root on Linux, MacOS, and Solaris. Exploitation is contingent on an already-established administrative session. ...

CVE-2025-47812

CVE-2025-47812 How does this detection method work? This Nuclei template detects Wing FTP Server instances vulnerable to CVE-2025-47812 by identifying versions older than 7.4.4 exposed in the web client’s HTML response. How do I run this script? 1. Download Nuclei from here 2. Copy the template t...

CVE-2020-8635

What's this Wing FTP Server 6.2.3 - Privilege Escalation Exploit Introduction Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and...