154 matches found
CVE-2023-0669
CVE-2023-0669 CVE-2023-0669 GoAnywhere MFT уязвимость внедрения команд...
CVE-2024-0204
CVE-2024-0204: Обход аутентификации в GoAnywhere MFT Скрипт для создания нового администратора в GoAnywhere MFT. Публикация в блоге Подробнее здесь: https://www.horizon3.ai/cve-2024-0204-fortra-goanywhere-mft-authentication-bypass-deep-dive Использование Пароль должен быть не менее 8 символов,...
CVE-2025-10035
CVE-2025-10035 Scanner Обзор Этот проект предоставляет инструмент для сканирования систем, потенциально подверженных уязвимости CVE-2025-10035 — десериализации в License Servlet продукта Fortra GoAnywhere MFT. Уязвимость может позволить злоумышленнику с поддельной подписью ответа лицензии...
CVE-2024-0204
CVE-2024-0204: Подробный разбор обхода аутентификации Fortra GoAnywhere MFT Этот репозиторий содержит эксплойт уровня proof-of-concept для уязвимости обхода аутентификации CVE-2024-0204, обнаруженной в продукте Fortra GoAnywhere MFT. Уязвимость позволяет неаутентифицированному злоумышленнику...
CVE-2025-10035
CVE-2025-10035 — Десериализация RCE в сервлете лицензий Fortra GoAnywhere MFT Аналитический отчет от Sentinel AI Defense. Только защитный анализ — рабочий эксплойт или PoC здесь не публикуются. Идеальная цепочка десериализации в Fortra GoAnywhere MFT: поддельная подпись ответа лицензии позволяет...
CVE-2025-10035
CVE-2025-10035 이 탐지 방법은 어떻게 작동하나요? 로그인 페이지에서 버전 번호를 추출하고 영향을 받는 버전 범위와 대조하여 취약한 GoAnywhere MFT 인스턴스를 탐지합니다. 이 스크립트는 어떻게 실행하나요? 1. 여기에서 Nuclei를 다운로드하세요. 2. 템플릿을 로컬 시스템에 복사하세요. 3. 다음 명령어를 실행하세요: nuclei -u https://yourHost.com -t template.yaml 예제 출력 참고 자료...
CVE-2023-0669
CVE-2023-0669 GoAnywhere MFT подвержена уязвимости внедрения команд до аутентификации в сервлете License Response из-за десериализации произвольного контролируемого злоумышленником объекта. 0x00 Поисковые запросы shodan title:"GoAnywhere" FOFA title="GoAnywhere" 0x01 Использование Версия Java jav...
CVE-2023-0669
CVE-2023-0669 GoAnywhere MFT 反序列化 - Je Yiuwai's Blog CVE-2023-0669 CVE-2023-0669是一个GoAnywhere MFT反序列化漏洞，由于反序列化一个任意攻击者控制的对象，在License Response Servlet中存在一个预先认证的命令注入漏洞。攻击者可以利用该漏洞在受影响的系统上执行任意代码，从而导致系统被完全控制。该漏洞影响版本为7.1.2之前，不包括7.1.2。 CVE-2023-0669 — это уязвимость десериализации в GoAnywhere MFT, котор...
fortra-goanywhere-mft-vulnerability-detection
Fortra GoAnywhere MFT 취약점 탐지 Fortra GoAnywhere MFT 취약점 탐지를 위한 Nuclei 템플릿. 제작:@rxerium 개요 Fortra GoAnywhere Managed File TransferMFT용 CVE 탐지 템플릿으로, 랜섬웨어 그룹이 악용한 여러 CISA KEV 취약점을 포함합니다. 통계 : 1건의 CVE2021 + 1건의 CVE2023 + 1건의 CVE2024 + 1건의 CVE2025 = 4개 템플릿 2건 CISA KEV 사용법 단일 대상 스캔 nuclei -t...
Fortra GoAnywhere Managed File Transfer (MFT) < 7.10.2 Path Traversal (CVE-2026-15913)
According to its self-reported version, the instance of Fortra GoAnywhere Managed File Transfer MFT running on the remote host is prior to 7.10.2. It is, therefore, affected by a path traversal vulnerability in the /attachRemoteFiles endpoint which allows Web Users with both Secure Folders and...
EUVD-2026-75175
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913
Fortra's GoAnywhere MFT versions prior to 7.10.2 are affected by a path traversal vulnerability in the /attachRemoteFiles endpoint. An authenticated Web User holding both Secure Folders and Secure Mail permissions can escape their sandboxed home directory, enabling arbitrary file read . The CNA-a...
CVE-2026-15913 Path Traversal in Fortra's GoAnywhere MFT Endpoint
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913 Path Traversal in Fortra's GoAnywhere MFT Endpoint
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
PT-2026-89157
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
CVE-2026-15913: Relative Path Traversal
In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...
Exploit for Command Injection in Fortra Goanywhere_Managed_File_Transfer
CVE-2025-10035 — Fortra GoAnywhere MFT License Servlet Deseria...
CVE-2025-14362
The login limit is not enforced on the SFTP service of Fortra's GoAnywhere MFT prior to 7.10.0 if the Web User attempting to be logged in to is configured to log in with an SSH Key, making the SSH key vulnerable to being guessed via Brute Force...