Lucene search
+L

264 matches found

GithubExploit
GithubExploit
added 2025/07/04 4:22 p.m.358 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 - Wing FTP Server RCE Exploit This repository...

10CVSS10AI score0.95343EPSS
SaveExploits23
GithubExploit
GithubExploit
added 2025/07/02 9:51 p.m.399 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 – Wing FTP Server RCE via Lua Injection Auth...

10CVSS10AI score0.95343EPSS
SaveExploits23
Packet Storm News
Packet Storm News
added 2025/07/02 12:0 a.m.10 views

Wing FTP Remote Code Execution

Wing FTP versions prior to 7.4.4 proof of concept remote code execution exploit...

10CVSS9.5AI score0.95343EPSS
SaveExploits23
CNNVD
CNNVD
added 2025/07/02 12:0 a.m.10 views

Wing FTP Server 安全漏洞

Wing FTP Server is the Wing FTP Server open source suite of cross-platform FTP server software. A security vulnerability exists in Wing FTP Server version 7.4.3 and earlier versions. An attacker can exploit the vulnerability to remotely execute code...

10CVSS9.2AI score0.95343EPSS
SaveExploits23References6
Saint
Saint
added 2025/07/02 12:0 a.m.133 views

WingFTP username null byte command execution

Added: 07/02/2025 Background Wing FTP Server is free FTP server software for Windows, Linux, and Mac OS. Problem A command injection vulnerability allows a remote unauthenticated attacker to execute arbitrary commands by sending a username with a null byte in a login request. Resolution Upgrade t...

8.8AI score
SaveExploits0
Exploit DB
Exploit DB
added 2025/07/02 12:0 a.m.363 views

Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution (RCE)

Exploit Title: Wing FTP Server 7.4.3 - Unauthenticated Remote Code Execution RCE CVE: CVE-2025-47812 Date: 2025-06-30 Exploit Author: Sheikh Mohammad Hasan aka 4m3rr0r https://github.com/4m3rr0r Vendor Homepage: https://www.wftpserver.com/ Version: Wing FTP Server = 7.4.3 Tested on: Linux Root...

10CVSS8.6AI score0.95343EPSS
SaveExploits23
Saint
Saint
added 2025/07/02 12:0 a.m.117 views

WingFTP username null byte command execution

Added: 07/02/2025 Background Wing FTP Server is free FTP server software for Windows, Linux, and Mac OS. Problem A command injection vulnerability allows a remote unauthenticated attacker to execute arbitrary commands by sending a username with a null byte in a login request. Resolution Upgrade t...

8.8AI score
SaveExploits0
GithubExploit
GithubExploit
added 2025/07/01 6:20 p.m.476 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE...

10CVSS10AI score0.95343EPSS
SaveExploits23
GithubExploit
GithubExploit
added 2025/07/01 12:2 p.m.166 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 Wing FTP Server Remote Code Execution RCE Ex...

10CVSS8.9AI score0.95343EPSS
SaveExploits23
OSV
OSV
added 2025/05/26 2:15 p.m.5 views

CVE-2025-5196

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

7.5CVSS5AI score
SaveExploits0References5
NVD
NVD
added 2025/05/26 2:15 p.m.16 views

CVE-2025-5196

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

7.5CVSS0.00889EPSS
SaveExploits2References5
Vulnrichment
Vulnrichment
added 2025/05/26 1:31 p.m.10 views

CVE-2025-5196 Wing FTP Server Lua Admin Console unnecessary privileges

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

7.5CVSS6.6AI score0.00889EPSS
SaveExploits2References5
CVE
CVE
added 2025/05/26 1:31 p.m.75 views

CVE-2025-5196

CVE-2025-5196 affects Wing FTP Server up to 7.4.3, via the Lua Admin Console, granting execution with unnecessary privileges. Exploitation appears remote and authenticated (PoC exists). Upgrade to version 7.4.4 to address the issue; vendor notes recommend running the service as a Normal User for ...

7.5CVSS6.6AI score0.00889EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist
added 2025/05/26 1:31 p.m.27 views

CVE-2025-5196 Wing FTP Server Lua Admin Console unnecessary privileges

A vulnerability has been found in Wing FTP Server up to 7.4.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the component Lua Admin Console. The manipulation leads to execution with unnecessary privileges. The attack can be launched remotely. The...

7.5CVSS0.00889EPSS
SaveExploits2References5
CNNVD
CNNVD
added 2025/05/26 12:0 a.m.7 views

Wing FTP Server 安全漏洞

Wing FTP Server is the Wing FTP Server open source suite of cross-platform FTP server software. A security vulnerability exists in Wing FTP Server 7.4.3 and earlier versions, which originates from the execution of unnecessary privileges...

7.5CVSS6.6AI score0.00889EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
added 2025/05/26 12:0 a.m.14 views

PT-2025-22929 · Unknown · Wing Ftp Server

Name of the Vulnerable Software and Affected Versions: Wing FTP Server versions 7.4.0 through 7.4.3 Description: A critical vulnerability has been found in the Lua Admin Console component of Wing FTP Server, allowing execution with unnecessary privileges. The attack can be launched remotely and h...

7.5CVSS6.4AI score0.00889EPSS
SaveExploits2References17
GithubExploit
GithubExploit
added 2025/05/23 6:48 p.m.107 views

Exploit for Execution with Unnecessary Privileges in Wftpserver Wing_Ftp_Server

Wing FTP Server 7.4.4 - Remote Code Execution Authenticated...

7.5CVSS8.3AI score0.00889EPSS
SaveExploits2
RedhatCVE
RedhatCVE
added 2025/05/23 4:49 a.m.7 views

CVE-2023-37879

Insecure storage of sensitive information in Wing FTP Server User Web Client allows information elicitation.This issue affects Wing FTP Server: = 7.2.0...

7.5CVSS6.6AI score0.0045EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:5 a.m.13 views

CVE-2023-37881

Weak access control in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

8.8CVSS7.1AI score0.00456EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2025/05/23 4:5 a.m.12 views

CVE-2023-37878

Insecure default permissions in Wing FTP Server Admin Web Client allows for privilege escalation.This issue affects Wing FTP Server: = 7.2.0...

8.8CVSS7.1AI score0.00432EPSS
SaveExploits0
Rows per page
Query Builder