CVE-2024-0204

CVE-2024-0204: Bypass de Autenticación en GoAnywhere MFT Script para crear un nuevo usuario administrador en GoAnywhere MFT. Entrada del Blog Más detalles aquí: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Uso La contraseña debe tener al menos 8...

CVE-2025-10035

CVE-2025-10035 扫描器 概述 该项目提供了一个工具，用于扫描可能受 CVE-2025-10035 影响的系统，这是一个存在于 Fortra GoAnywhere MFT 的许可证 Servlet 中的反序列化漏洞。该漏洞可能允许攻击者通过合法伪造的许可证响应签名来反序列化任意攻击者控制的对象，进而可能导致命令注入。 注意 ：本项目严格用于 教育目的 ，旨在识别受影响的 GoAnywhere MFT 版本。它不包含可利用的代码，也不会促成恶意活动。 漏洞详情 CVE ID ：CVE-2025-10035 受影响软件 ：Fortra GoAnywhere MFT 描述 ：许可证...

Fortra FileCatalyst Workflow <= v5.1.6 - SQL Injection

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT 许可证 Servlet 反序列化远程代码执行 由 Sentinel AI Defense 编写的研究报告。仅用于防御分析——此处未发布任何有效的漏洞利用或 PoC。 一条满分的反序列化链存在于 Fortra GoAnywhere MFT 中：伪造的许可证响应签名使未经身份验证的攻击者能够反序列化任意对象，并在文件传输服务器上实现命令执行。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2025-10035-goanywhere-deserialization.ht...

CVE-2025-10035

CVE-2025-10035 How does this detection method work? Detects vulnerable GoAnywhere MFT instances by extracting version numbers from the login page and matching against affected version ranges. How do I run this script? 1. Download Nuclei from here 2. Copy the template to your local system 3. Run t...

CVE-2024-25153

CVE-2024-25153 这是 CVE-2024-25153 的概念验证程序，该漏洞是 Fortra FileCatalyst Workflow 5.x（5.1.6 Build 114 之前的版本）中的一个远程代码执行漏洞。 完整技术细节请参见 https://labs.nettitude.com/blog/cve-2024-25153-remote-code-execution-in-fortra-filecatalyst 使用方法 使用以下命令运行利用程序： CVE-2024-25153.py --host --port --url --cmd 仅 --host...

Fortra GoAnywhere MFT - Authentication Bypass

Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. id: CVE-2024-0204 info: name: Fortra GoAnywhere MFT - Authentication Bypass author: DhiyaneshDK severity: critical description: | Authentication bypas...

fortra-goanywhere-mft-vulnerability-detection

Detección de Vulnerabilidades en Fortra GoAnywhere MFT Plantillas de Nuclei para detectar vulnerabilidades de Fortra GoAnywhere MFT. Creado por@rxerium Resumen Plantillas de detección de CVEs para Fortra GoAnywhere Managed File Transfer MFT, que incluyen múltiples vulnerabilidades CISA KEV...

CVE-2024-25153

Exploit para CVE-2024-25153 Índice Haga clic para ver 1. Introducción 2. Instalación 3. Uso 4. Contribuir 5. Licencia Introducción ¡Bienvenido al Exploit para CVE-2024-25153! Este proyecto es una solución para explotar la vulnerabilidad CVE-2024-25153 y ejecutar código de forma remota en Fortra...

CVE-2026-9864

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-79896

Fortra BoKS Manager contains an out-of-bounds read vulnerability in the custom TLS ClientHello parser used by boksportmux. A remote unauthenticated attacker can submit a malformed ClientHello and terminate boksportmux. Although the daemon is normally restarted automatically, repeated requests can...

CVE-2026-12627

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-9864 Fortra BoKS Server Agent adjoin machine-account password generation vulnerability

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-9864 Fortra BoKS Server Agent adjoin machine-account password generation vulnerability

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-9864

The Fortra BoKS Server Agent contains a predictable password generation vulnerability within the adjoin utility . During Active Directory join or password renewal operations, machine-account passwords may be generated with significantly less entropy than intended. This flaw potentially allows an ...

EUVD-2026-90889

Fortra BoKS Server Agent contains a predictable password generation vulnerability in the adjoin utility. Machine-account passwords generated during Active Directory join or password renewal operations may have significantly less entropy than intended, making them more susceptible to prediction by...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

EUVD-2026-90882

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627 Fortra's Core Privileged Access Manager (BoKS) autoregistration stack buffer overflow vulnerability

Fortra's Core Privileged Access Manager BoKS contains a stack-based buffer overflow vulnerability in boksautoregisterd. A remote attacker with network access to the autoregistration service may be able to trigger memory corruption during client response processing...

CVE-2026-12627

Fortra's Core Privileged Access Manager (BoKS) contains a stack-based buffer overflow vulnerability in the boks_autoregisterd component. A remote attacker with network access to the autoregistration service may trigger memory corruption during client response processing. The vulnerability is asso...