CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server = 7.4.3. A NULL byte injected into the username parameter during login causes Lua code to be written into the session file. When /dir.html is accessed with the resulting session cookie, the...