CVE-2018-17873

CVE-2018-17873 WiFiRanger 실내 라우터Core, GoAC 및 그와 짝을 이루는 실외 라우터Sky Pro, EliteAC, EliteAC FM에서 펌웨어 버전 7.0.8rc3 및 이전 버전을 실행하는 경우 익명 FTP 읽기/쓰기 액세스를 허용하고 SSH 개인 키를 평문으로 남겨두어 키를 보고 복사한 후 루트 권한으로 로그인하는 것을 간단하게 만듭니다. 이 취약점을 악용하려면 인접 네트워크 액세스가 필요합니다. 익스플로잇: 개인 키를 가져와 루트로 로그인하는 매우 간단한 셸 스크립트입니다. 사용법:...

SystemVulnerabilityChecklist_Project4_Decodelabs

🔐 시스템 취약점 점검 체크리스트 취약한 Linux 대상 머신을 상대로 수행한 보안 평가 및 네트워크 강화 실습입니다. 이 프로젝트는 주요 취약점 식별, 영향 평가, 그리고 IPTables를 사용한 방화벽 기반 완화 조치 구현에 중점을 둡니다. 📌 프로젝트 개요 프로젝트 제목: 침투 테스트 및 네트워크 보안 강화 역할: 사이버 보안 분석가 DecodeLabs 인턴십 대상 IP: 192.168.56.128 날짜: 2026년 8월 1일 이 프로젝트는 다음과 같은 완전한 침투 테스트 워크플로우를 보여줍니다: 호스트 탐색 서비스 열거...

CVE-2015-3306-Home-Lab

ProFTPD 1.3.5 modcopy — RCE 시뮬레이션 랩 이 랩은 CVE-2015-3306 — ProFTPD modcopy Remote File Copy to RCE 취약점을 시뮬레이션하도록 설계되었습니다. ProFTPD의 modcopy 모듈을 통한 웹 셸 삽입 RCEWeb Shell Injection RCE 학습에 사용됩니다. 기능 취약한Vulnerable ProFTPD 1.3.5 modcopy 완전 활성화 SITE CPFR / SITE CPTO 익명 FTPAnonymous FTP 지원 웹 루트 /var/www/htm...

cr-18-m4-service-exploitation

CR-18 / Module 4 — Service-Level Vulnerability Analysis & Expl...

PT-2026-89500

Name of the Vulnerable Software and Affected Versions rclone versions 1.70.0 through 1.75.0 Description The serve/start RC interface allows per-server configuration via a proxyOpt object. However, the FTP and S3 server constructors incorrectly validate the process-global proxy.Opt.AuthProxy value...

[SECURITY] Fedora 43 Update: proftpd-1.3.9c-3.fc43

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

[SECURITY] Fedora 44 Update: proftpd-1.3.9a-2.fc44

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

CVE-1999-0527

The permissions for system-critical data in an anonymous FTP account are inappropriate. For example, the root directory is writeable by world, a real password file is obtainable, or executable commands such as "ls" can be overwritten...

EUVD-1999-0496

Malware in sbrugna...

EUVD-2004-1884

Malware in sbrugna...

EUVD-2001-1394

Malware in sbrugna...

EUVD-2007-1725

Malware in sbrugna...

EUVD-1999-0525

Malware in sbrugna...

EUVD-1999-1392

Malware in sbrugna...

EUVD-2001-0778

Malware in sbrugna...

CVE-2025-47812

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...

Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild

A recently disclosed maximum-severity security flaw impacting the Wing FTP Server has come under active exploitation in the wild, according to Huntress. The vulnerability, tracked as CVE-2025-47812 CVSS score: 10.0, is a case of improper handling of null '\0' bytes in the server's web interface,...

Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild

A recently disclosed maximum-severity security flaw impacting the Wing FTP Server has come under active exploitation in the wild, according to Huntress. The vulnerability, tracked as CVE-2025-47812 CVSS score: 10.0, is a case of improper handling of null '\0' bytes in the server's web interface,...

CVE-2025-47812: Improper Neutralization of Null Byte or NUL Character

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...

CVE-2025-47812

In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle '\0' bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service root or SYSTEM by default. This is thu...