Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

Fortra GoAnywhere MFT - Authentication Bypass

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. id: CVE-2024-0204 info: name: Fortra GoAnywhere MFT - Authentication Bypass author: DhiyaneshDK severity: critical description: | Authentication bypas...

Fortra GoAnywhere MFT - Remote Code Execution

Fortra GoAnywhere MFT is susceptible to remote code execution via unsafe deserialization of an arbitrary attacker-controlled object. This stems from a pre-authentication command injection vulnerability in the License Response Servlet. id: CVE-2023-0669 info: name: Fortra GoAnywhere MFT - Remote...

CVE-2024-0204

CVE-2024-0204: GoAnywhere MFT における認証バイパス GoAnywhere MFT で新しい管理ユーザーを作成するスクリプト。 ブログ記事 詳細はこちら: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive/ 使用方法 パスワードは GoAnywhere MFT の複雑性要件を満たすため、最低8文字必要です。 root@kitploit: % python3 CVE-2024-0204.py -h usage:...

CVE-2025-10035

CVE-2025-10035 스캐너 개요 이 프로젝트는 Fortra의 GoAnywhere MFT 라이선스 서블릿의 역직렬화 취약점인 CVE-2025-10035 의 영향을 받을 수 있는 시스템을 스캔하는 도구를 제공합니다. 이 취약점은 공격자가 유효하게 위조된 라이선스 응답 서명을 사용하여 공격자가 제어하는 임의 객체를 역직렬화할 수 있게 하여, 잠재적으로 명령 주입으로 이어질 수 있습니다. 참고 : 이 프로젝트는 엄격히 교육 목적 으로만 제공되며, 영향을 받는 GoAnywhere MFT 버전을 식별하기 위해 설계되었습니다. 악용...

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT License Servlet デシリアライゼーション RCE Sentinel AI Defense による調査解説記事。防御目的の分析のみ — 実働するエクスプロイト や PoC はここでは公開していません。 Fortra GoAnywhere MFT におけるパーフェクト10のデシリアライゼーションチェーン: 偽造されたライセンス応答署名により、認証されていない攻撃者が任意のオブジェクトをデシリアライズし、ファイル転送サーバー上でコマンド実行に至ることができます。 📄 完全な解説記事:...

CVE-2025-10035

CVE-2025-10035 이 탐지 방법은 어떻게 작동하나요? 로그인 페이지에서 버전 번호를 추출하고 영향을 받는 버전 범위와 대조하여 취약한 GoAnywhere MFT 인스턴스를 탐지합니다. 이 스크립트는 어떻게 실행하나요? 1. 여기에서 Nuclei를 다운로드하세요. 2. 템플릿을 로컬 시스템에 복사하세요. 3. 다음 명령어를 실행하세요: nuclei -u https://yourHost.com -t template.yaml 예제 출력 참고 자료...

CVE-2024-25153

CVE-2024-25153 이는 Fortra FileCatalyst Workflow 5.x5.1.6 Build 114 이전에서 원격 코드 실행 취약점인 CVE-2024-25153에 대한 개념 증명입니다. 전체 기술적 세부 사항은 https://labs.nettitude.com/blog/cve-2024-25153-remote-code-execution-in-fortra-filecatalyst에서 확인할 수 있습니다. 사용법 다음 명령어를 사용하여 익스플로잇을 실행합니다: root@kitploit: CVE-2024-25153.py...

fortra-goanywhere-mft-vulnerability-detection

Fortra GoAnywhere MFT 취약점 탐지 Fortra GoAnywhere MFT 취약점 탐지를 위한 Nuclei 템플릿. 제작:@rxerium 개요 Fortra GoAnywhere Managed File TransferMFT용 CVE 탐지 템플릿으로, 랜섬웨어 그룹이 악용한 여러 CISA KEV 취약점을 포함합니다. 통계 : 1건의 CVE2021 + 1건의 CVE2023 + 1건의 CVE2024 + 1건의 CVE2025 = 4개 템플릿 2건 CISA KEV 사용법 root@kitploit: 단일 대상 스캔 nucle...

CVE-2024-25153

Exploit for CVE-2024-25153 목차 클릭하여 보기 1. 소개 2. 설치 3. 사용법 4. 기여하기 5. 라이선스 소개 Exploit for CVE-2024-25153에 오신 것을 환영합니다! 이 프로젝트는 CVE-2024-25153 취약점을 악용하고 Fortra FileCatalyst Workflow에서 원격으로 코드를 실행하기 위한 솔루션입니다. 설치 클릭하여 보기 Exploit for CVE-2024-25153을 사용자 컴퓨터에 설치하는 방법은 다음과 같습니다: root@kitploit: git clone...

EUVD-2026-75175

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

CVE-2026-15913

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

CVE-2026-15913

Fortra's GoAnywhere MFT versions prior to 7.10.2 are affected by a path traversal vulnerability in the /attachRemoteFiles endpoint. An authenticated Web User holding both Secure Folders and Secure Mail permissions can escape their sandboxed home directory, enabling arbitrary file read . The CNA-a...

EUVD-2026-38631

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting XSS vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields...

CVE-2026-12164

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164 Privilege Escalation in Fortra File Integrity Monitoring (FIM)

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0 may assign incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import also creates or changes roles or role-permission...

CVE-2026-12164

CVE-2026-12164 affects Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, and concerns versions prior to 9.4.0. The issue can cause incorrect or elevated effective permissions to users created by the tetool import command while FIM is running, particularly when the import creat...

CVE-2026-12163

Fortra File Integrity Monitoring FIM, formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored cross-site scripting XSS vulnerability in the Asset View UI component. An authenticated user with sufficient privileges to create or modify affected node or database configuration fields...

CVE-2026-12163

Fortra File Integrity Monitoring (FIM), formerly Tripwire Enterprise, versions prior to 9.4.0.1 contain a stored XSS in the Asset View UI. An authenticated user capable of creating/modifying affected node or database configuration fields can store script content that is rendered as HTML when Asse...