CVE-2025-5548

FreeFloat FTP 분석 및 CVE-2025-5548 악용 Anderson Steven — 사이버보안 석사, 모듈 6취약점 개인 과제: 취약점 분석 및 악용 방법론 이 저장소를 만든 이유 저는 단순히 "작동하는 익스플로잇을 여기 있다"고 제출하고 싶지 않았습니다. 이 저장소는 메모리 손상 취약점에 직면했을 때 제가 실제로 작업하는 방식을 담고 있습니다: 무엇을 먼저 살피는지, 어떤 순서로 가설을 배제하는지, 각 단계에서 어떤 도구를 사용하는지, 그리고 그 이유가 무엇인지. CVE-2025-5548을 중심 축으로 사용한 이...

CVE-2026-49172

The CVE-2026-49172 entry describes a heap-based buffer overflow in Windows FTP Service that allows an unauthenticated, network-based attacker to execute code remotely. Documents confirm the vulnerability exists in Windows FTP Service and enables remote code execution with network access and no re...

CVE-2026-49172 Windows FTP Service Remote Code Execution Vulnerability

...

Windows FTP Service Remote Code Execution Vulnerability

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network...

PT-2026-58147

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description A heap-based buffer overflow in the Windows FTP Service allows an unauthorized attacker to execute arbitrary code over a network. A heap-based buffer overflow occurs when a program...

CVE-2026-49172: Heap-based Buffer Overflow

Heap-based buffer overflow in Windows FTP Service allows an unauthorized attacker to execute code over a network...

EUVD-2004-0069

Malware in sbrugna...

EUVD-2018-19875

Malicious code in bioql PyPI...

The vulnerability of the WS_FTP Server server lies in the lack of validation for XML objects’ sequences, which allows an attacker to gain access to read and modify the database.

The vulnerability of the Oracle Database management system is related to the lack of validation for the consistency of XML objects. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to read and modify the database...

VulnCheck KEV: CVE-2023-40044

Progress WSFTP Server contains a deserialization of untrusted data vulnerability in the Ad Hoc Transfer module that allows an authenticated attacker to execute remote commands on the underlying operating system...

PT-2023-24251 · Wftpd · Wftpd

Name of the Vulnerable Software and Affected Versions: WFTPD version 3.25 Description: The software stores usernames and password hashes in an openly viewable wftpd.ini configuration file within the WFTPD directory. This issue is noted in a product from 2006. Recommendations: For WFTPD version...

Microsoft Windows FTP Server Denial of Service Vulnerability

Microsoft Windows 7, etc. are a series of operating systems from Microsoft, U.S.A. Windows FTP Server is one of the FTP File Transfer Protocol servers. A denial of service vulnerability exists in Microsoft Windows FTP Server, which arises from the program's failure to properly handle File Transfe...

CVE-2018-8206

A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol FTP connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2018-8206: Undefined Security Weakness

A denial of service vulnerability exists when Windows improperly handles File Transfer Protocol FTP connections, aka "Windows FTP Server Denial of Service Vulnerability." This affects Windows 7, Windows Server 2012 R2, Windows RT 8.1, Windows Server 2008, Windows Server 2012, Windows 8.1, Windows...

CVE-2024-0546

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/easyftplistfixret.rb 2024-01-15 07:26:55+00:00| seen| https://t.me/ctinow/168181 2024-01-22 23:16:45+00:00| seen|...

CVE-2012-10023

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/freefloatftpuser.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:51:36+00:00| seen|...

CVE-2010-10014

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/odinlistreply.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:51:38+00:00| seen|...

CVE-2012-10030

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/freefloatftpwbem.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:51:36+00:00| seen|...

CVE-2010-20121

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/easyftpcwdfixret.rb 2025-10-23 21:12:56+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:51:36+00:00| seen|...

PSFTPd Windows FTP Server Bounce Scan Vulnerability

PSFTPd Windows FTP Server is a suite of FTP server software. The software supports protocols such as FTP, FTPS and SFTP. A bounce scanning vulnerability exists in PSFTPd Windows FTP Server version 10.0.4 Build 729, which stems from the program failing to prevent the default FTP bounce scanning. A...