88 matches found
SystemVulnerabilityChecklist_Project4_Decodelabs
🔐 시스템 취약점 점검 체크리스트 취약한 Linux 대상 머신을 상대로 수행한 보안 평가 및 네트워크 강화 실습입니다. 이 프로젝트는 주요 취약점 식별, 영향 평가, 그리고 IPTables를 사용한 방화벽 기반 완화 조치 구현에 중점을 둡니다. 📌 프로젝트 개요 프로젝트 제목: 침투 테스트 및 네트워크 보안 강화 역할: 사이버 보안 분석가 DecodeLabs 인턴십 대상 IP: 192.168.56.128 날짜: 2026년 8월 1일 이 프로젝트는 다음과 같은 완전한 침투 테스트 워크플로우를 보여줍니다: 호스트 탐색 서비스 열거...
CVE-2018-17873
CVE-2018-17873 ファームウェアバージョン7.0.8rc3以前を実行しているWiFiRanger屋内ルーター（Core、GoAC）とその屋外ペアルーター（Sky Pro、EliteAC、EliteAC FM）は、匿名FTPの読み取り/書き込みアクセスを許可し、SSH秘密鍵を平文のまま残しています。そのため、鍵を表示/コピーしてroot権限でログインすることは簡単です。 この脆弱性を悪用するには、隣接ネットワークへのアクセスが必要です。 エクスプロイト: 秘密鍵を取得してrootとしてログインする、非常にシンプルなシェルスクリプトです。 使用方法:...
CVE-2015-3306-Home-Lab
ProFTPD 1.3.5 modcopy — RCE シミュレーションラボ このラボは、CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE の脆弱性をシミュレートするために設計されています。 ProFTPD の modcopy モジュールを介した Web Shell Injection RCE の学習用です。 特徴 脆弱性のある ProFTPD 1.3.5 modcopy をフルで有効化 SITE CPFR / SITE CPTO Anonymous FTP に対応 Web ルート /var/www/html を再現する...
PT-2026-89500
Summary serve/start accepts protocol options in a per-server proxyOpt object. The FTP and S3 RC adapters parse that object and pass it to their server constructors, but the constructors decide whether proxy authentication is enabled by checking the process-global proxy.Opt.AuthProxy instead of th...
[SECURITY] Fedora 44 Update: proftpd-1.3.9a-2.fc44
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
CVE-1999-0527
The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...
EUVD-2007-1725
Malware in sbrugna...
EUVD-2001-0778
Malware in sbrugna...
EUVD-2004-1884
Malware in sbrugna...
EUVD-1999-0525
Malware in sbrugna...
EUVD-2001-1394
Malware in sbrugna...
EUVD-1999-1392
Malware in sbrugna...
EUVD-1999-0496
Malware in sbrugna...
CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild
A recently disclosed maximum-severity security flaw impacting the Wing FTP Server has come under active exploitation in the wild, according to Huntress. The vulnerability, tracked as CVE-2025-47812 CVSS score: 10.0, is a case of improper handling of null '\0' bytes in the server's web interface,...
VulnCheck KEV: CVE-2025-47812
Wing FTP Server contains an improper neutralization of null byte or NUL character vulnerability that can allow injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default...
CVE-2025-47812
In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...
CVE-2024-36443
Swissphone DiCal-RED 4009 devices allow a remote attacker to gain read access to almost the whole file system via anonymous FTP...