144 matches found
CVE-2024-0204
CVE-2024-0204: Bypass de Autenticación en GoAnywhere MFT Script para crear un nuevo usuario administrador en GoAnywhere MFT. Entrada del Blog Más detalles aquí: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Uso La contraseña debe tener al menos 8...
CVE-2025-10035
Escáner CVE-2025-10035 Resumen Este proyecto proporciona una herramienta para escanear sistemas potencialmente afectados por CVE-2025-10035 , una vulnerabilidad de deserialización en el Servlet de Licencia de Fortra's GoAnywhere MFT. La vulnerabilidad podría permitir a un atacante con una firma d...
CVE-2024-0204
CVE-2024-0204: Inmersión Profunda en la Bypass de Autenticación de Fortra GoAnywhere MFT Este repositorio contiene un exploit de prueba de concepto para la vulnerabilidad de bypass de autenticación CVE-2024-0204 descubierta en el producto GoAnywhere MFT de Fortra. La vulnerabilidad permite que un...
CVE-2025-10035
CVE-2025-10035 — RCE por Deserialización en el License Servlet de Fortra GoAnywhere MFT Informe de investigación por Sentinel AI Defense. Solo análisis defensivo — no se publica aquí ningún exploit funcional ni PoC. Una cadena de deserialización perfecta de 10 en Fortra GoAnywhere MFT: una firma ...
CVE-2025-10035
CVE-2025-10035 ¿Cómo funciona este método de detección? Detecta instancias vulnerables de GoAnywhere MFT extrayendo números de versión de la página de inicio de sesión y comparándolos con los rangos de versiones afectadas. ¿Cómo ejecuto este script? 1. Descarga Nuclei desde aquí 2. Copia la...
CVE-2023-0669
CVE-2023-0669 CVE-2023-0669 vulnerabilidad de inyección de comandos en GoAnywhere MFT...
CVE-2023-0669
CVE-2023-0669 GoAnywhere MFT 存在一个预认证命令注入漏洞，位于 License Response Servlet 中，原因是对任意攻击者控制的对象进行反序列化。 0x00 搜索语法 shodan root@kitploit: title:"GoAnywhere" FOFA root@kitploit: title="GoAnywhere" 0x01 使用 Java 版本 root@kitploit: java -version openjdk version "1.8.0362" 帮助 root@kitploit: java -jar...
CVE-2023-0669
CVE-2023-0669 GoAnywhere MFT Deserialización - Blog de Je Yiuwai CVE-2023-0669 CVE-2023-0669 es una vulnerabilidad de deserialización en GoAnywhere MFT que, debido a la deserialización de un objeto controlado por un atacante arbitrario, existe una vulnerabilidad de inyección de comandos...
fortra-goanywhere-mft-vulnerability-detection
Detección de Vulnerabilidades en Fortra GoAnywhere MFT Plantillas de Nuclei para detectar vulnerabilidades de Fortra GoAnywhere MFT. Creado por@rxerium Resumen Plantillas de detección de CVEs para Fortra GoAnywhere Managed File Transfer MFT, que incluyen múltiples vulnerabilidades CISA KEV...
Fortra GoAnywhere Managed File Transfer (MFT) < 7.10.2 Path Traversal (CVE-2026-15913)
According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer MFT running on the remote host is prior to 7.10.2. It is, therefore, affected by a path traversal vulnerability in the /attachRemoteFiles endpoint which allows Web Users with both Secure Folders and...
EUVD-2026-75175
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913
Fortra's GoAnywhere MFT versions prior to 7.10.2 are affected by a path traversal vulnerability in the /attachRemoteFiles endpoint. An authenticated Web User holding both Secure Folders and Secure Mail permissions can escape their sandboxed home directory, enabling arbitrary file read . The CNA-a...
CVE-2026-15913 Path Traversal in Fortra's GoAnywhere MFT Endpoint
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913 Path Traversal in Fortra's GoAnywhere MFT Endpoint
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
PT-2026-89157
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913: Relative Path Traversal
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
Exploit for Command Injection in Fortra Goanywhere_Managed_File_Transfer
CVE-2025-10035 — Fortra GoAnywhere MFT License Servlet Deseria...
CVE-2025-14362
The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force...