Lucene search
+L

308 matches found

GithubExploit
GithubExploit
β€’added 2026/04/09 1:18 p.m.β€’162 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

\ CVE-2025-47812 β€” Wing FTP Server RCE Research \ Contexte...

10CVSS7.5AI score0.92862EPSS
SaveExploits24
The Hacker News
The Hacker News
β€’added 2026/03/17 5:23 a.m.β€’16 views

CISA Flags Actively Exploited Wing FTP Vulnerability Leaking Server Paths

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added a medium-severity security flaw impacting Wing FTP to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerability, CVE-2025-47813 CVSS score: 4.3, is an information...

10CVSS7.9AI score0.92862EPSS
SaveExploits25
CISA
CISA
β€’added 2026/03/16 12:00 p.m.β€’17 views

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2025-47813link is external Wing FTP Server Information Disclosure Vulnerability This type of vulnerability is a frequent attack vector for malicious cyber actors...

4.3CVSS5.8AI score0.62967EPSS
SaveIn wildExploits24References6
VulnCheck KEV
VulnCheck KEV
β€’added 2026/03/16 12:00 a.m.β€’12 views

VulnCheck KEV: CVE-2025-47813

Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie...

4.3CVSS6.6AI score0.62967EPSS
SaveIn wildExploits24References2
CISA KEV Catalog
CISA KEV Catalog
β€’added 2026/03/16 12:00 a.m.β€’42 views

Wing FTP Server Information Disclosure Vulnerability

Wing FTP Server contains a generation of error message containing sensitive information vulnerability when using a long value in the UID cookie...

4.3CVSS7.3AI score0.62967EPSS
SaveIn wildExploits24
GithubExploit
GithubExploit
β€’added 2026/02/24 5:07 a.m.β€’202 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

πŸš€ Wing FTP Exploit - CVE-2025-47812 Exploit mejorado para Win...

10CVSS9.1AI score0.92862EPSS
SaveExploits24
GithubExploit
GithubExploit
β€’added 2026/02/22 6:28 p.m.β€’254 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 β€” Wing FTP Server Unauthenticated RCE β–ˆβ–ˆβ•—...

10CVSS8.8AI score0.92862EPSS
SaveExploits26
GithubExploit
GithubExploit
β€’added 2026/02/19 10:13 p.m.β€’190 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 β€” Wing FTP Server Unauthenticated remote code...

10CVSS9.2AI score0.92862EPSS
SaveExploits24
GithubExploit
GithubExploit
β€’added 2026/02/18 8:41 a.m.β€’182 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

CVE-2025-47812 β€” Wing FTP Server Remote Code Execution RCE...

10CVSS8.8AI score0.92862EPSS
SaveExploits24
GithubExploit
GithubExploit
β€’added 2026/02/15 1:06 a.m.β€’201 views

Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server

No d...

10CVSS5.4AI score0.92862EPSS
SaveExploits24
NVD
NVD
β€’added 2026/02/07 12:15 a.m.β€’17 views

CVE-2020-37079

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery CSRF vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user...

5.1CVSS0.00181EPSS
SaveExploits1References4
OSV
OSV
β€’added 2026/02/07 12:15 a.m.β€’15 views

CVE-2020-37079

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery CSRF vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user...

3.5CVSS5.7AI score0.00181EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
β€’added 2026/02/07 12:00 a.m.β€’1 views

CVE-2020-37079: Cross-Site Request Forgery (CSRF)

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery CSRF vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user...

5.1CVSS5.7AI score0.00181EPSS
SaveExploits1References1
CNNVD
CNNVD
β€’added 2026/02/07 12:00 a.m.β€’24 views

Wing FTP Server 跨站请求δΌͺι€ ζΌζ΄ž

Wing FTP Server is an open-source, cross-platform FTP server software developed by Wing FTP Server. Versions of Wing FTP Server prior to 6.2.7 contained a cross-site request forgeing vulnerability. This vulnerability stemmed from cross-site request forgery within the web management interface, whi...

5.1CVSS5.7AI score0.00181EPSS
SaveExploits1References4
Cvelist
Cvelist
β€’added 2026/02/06 11:16 p.m.β€’51 views

CVE-2020-37079 Wing FTP Server < 6.2.7 - Cross-site Request Forgery

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery CSRF vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user...

5.1CVSS0.00181EPSS
SaveExploits1References4
attackerkb
attackerkb
β€’added 2026/02/06 11:16 p.m.β€’10 views

CVE-2020-37079

Wing FTP Server versions prior to 6.2.7 contain a cross-site request forgery CSRF vulnerability in the web administration interface that allows attackers to delete admin users. Attackers can craft a malicious HTML page with a hidden form to submit a request that deletes the administrative user...

5.1CVSS5.2AI score0.00181EPSS
SaveExploits1References4Affected Software1
CVE
CVE
β€’added 2026/02/06 11:16 p.m.β€’37 views

CVE-2020-37079

Wing FTP Server prior to version 6.2.7 is affected by a cross-site request forgery (CSRF) vulnerability in the web administration interface that allows an attacker to delete admin users by crafting a malicious HTML page with a hidden form that submits a request without proper authorization. The i...

5.1CVSS5.2AI score0.00181EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
β€’added 2026/02/06 12:00 a.m.β€’32 views

PT-2026-6812

Name of the Vulnerable Software and Affected Versions Wing FTP Server versions prior to 6.2.7 Description Wing FTP Server versions prior to 6.2.7 have a cross-site request forgery CSRF issue in the web administration interface. This allows attackers to delete administrative users by crafting a...

5.1CVSS5.2AI score0.00181EPSS
SaveExploits1References6
OSV
OSV
β€’added 2026/02/05 12:15 a.m.β€’14 views

CVE-2019-25267

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be launche...

7.8CVSS6AI score0.00236EPSS
SaveExploits1References3
NVD
NVD
β€’added 2026/02/05 12:15 a.m.β€’18 views

CVE-2019-25267

Wing FTP Server 6.0.7 contains an unquoted service path vulnerability that allows local attackers to potentially execute arbitrary code with elevated system privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that will be launche...

8.5CVSS0.00236EPSS
SaveExploits1References3
Rows per page
Query Builder