CVE-2026-15913

Fortra's GoAnywhere MFT versions prior to 7.10.2 are affected by a path traversal vulnerability in the /attachRemoteFiles endpoint. An authenticated Web User holding both Secure Folders and Secure Mail permissions can escape their sandboxed home directory, enabling arbitrary file read . The CNA-a...

CVE-2026-15913 Path Traversal in Fortra's GoAnywhere MFT Endpoint

In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteFiles endpoint of Fortra's GoAnywhere MFT allows Web Users with both Secure Folders and Secure Mail permissions to escape their sandboxed home directory, achieving arbitrary file read...

CVE-2024-0204

CVE-2024-0204: Fortra GoAnywhere MFT 认证绕过深入分析 本仓库包含针对 Fortra GoAnywhere MFT 产品中发现的认证绕过漏洞（CVE-2024-0204）的概念验证利用代码。该漏洞允许未经身份验证的攻击者为应用程序创建管理员用户。 描述 2023年12月4日，Fortra 发布了一份内部安全公告，指出了 GoAnywhere MFT 中的认证绕过漏洞（CVE-2024-0204）。该漏洞使未经身份验证的攻击者能够为应用程序创建管理员用户。此发现归功于研究人员 malcolm0x 和 Islam Elrfai。 漏洞利用概述...

CVE-2025-10035

CVE-2025-10035 — Fortra GoAnywhere MFT 许可证 Servlet 反序列化远程代码执行 由 Sentinel AI Defense 编写的研究报告。仅用于防御分析——此处未发布任何有效的漏洞利用或 PoC。 一条满分的反序列化链存在于 Fortra GoAnywhere MFT 中：伪造的许可证响应签名使未经身份验证的攻击者能够反序列化任意对象，并在文件传输服务器上实现命令执行。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2025-10035-goanywhere-deserialization.ht...

CVE-2025-10035

CVE-2025-10035 此检测方法的工作原理是什么？ 通过从登录页面提取版本号，并与受影响版本范围进行匹配，检测存在漏洞的 GoAnywhere MFT 实例。 如何运行此脚本？ 1. 从此处下载 Nuclei 2. 将模板复制到本地系统 3. 运行以下命令：nuclei -u https://yourHost.com -t template.yaml 示例输出 参考资料 https://www.fortra.com/security/advisories/product-security/fi-2025-012...

Linux Distros Unpatched Vulnerability : CVE-2026-80869

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in...

chainsaw

Windows 포렌식 아티팩트 신속 검색 및 헌팅 Chainsaw는 이벤트 로그 및 MFT 파일과 같은 Windows 포렌식 아티팩트 내에서 위협을 신속하게 식별할 수 있는 강력한 '1차 대응first-response' 기능을 제공합니다. Chainsaw는 이벤트 로그에서 키워드를 검색하는 일반적이고 빠른 방법을 제공하며, Sigma 탐지 규칙에 대한 기본 제공 지원과 사용자 정의 Chainsaw 탐지 규칙을 통해 위협을 식별합니다. 기능 🎯 Sigma 탐지 규칙 및 사용자 정의 Chainsaw 탐지 규칙을 사용하여 위협 헌팅...

SUSE CVE-2026-80869

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in ntfsreadinodemount validates each entry only with "u8 alentry + 6 alend" and "u8 alentry + le16tocpualentry-length alend", but then reads...

CVE-2026-80869 ntfs: bound the attribute-list entry in ntfs_read_inode_mount()

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in ntfsreadinodemount validates each entry only with "u8 alentry + 6 alend" and "u8 alentry + le16tocpualentry-length alend", but then reads...

CVE-2026-80869

CVE-2026-80869 affects the Linux kernel NTFS filesystem driver. In ntfs_read_inode_mount() , the $MFT attribute-list walk validated only that 6 bytes of each entry were in range, then read lowest_vcn (offset 8, 8 bytes) and mft_reference (offset 16) — fields beyond the proven boundary. Since al_e...

EUVD-2026-71499

In the Linux kernel, the following vulnerability has been resolved: ntfs: bound the attribute-list entry in ntfsreadinodemount The $MFT attribute-list walk in ntfsreadinodemount validates each entry only with "u8 alentry + 6 alend" and "u8 alentry + le16tocpualentry-length alend", but then reads...

Astra Linux – Vulnerability in ntfs-3g

In NTFS-3G versions before version 2021.8.22, when a specially crafted MFT section is provided in an NTFS image, a heap buffer overflow may occur, allowing code execution...

Astra Linux – Vulnerability in ntfs-3g

NTFS-3G versions prior to 2021.8.22 may experience a stack buffer overflow when correcting differences between the MFT Mounted File Table and MFTMirror. This can lead to code execution or an escalation of privileges when using the setuid-root account...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: fs/ntfs3: Fixed a memory leak that occurred when ntfsreadmft failed. When the label ATTRROOT in ntfsreadmft sets isroot = true and ni-niFlags |= NIFLAGDIR, the next attribute will go to the label ATTRALLOC, resulting in an...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: fs/ntfs3: Added a overflow check for attribute size. The offset addition could cause an overflow, potentially passing the used size check when processing attributes with very large sizes e.g., 0xffffff7f. This could lead to...

Astra Linux – Vulnerability in Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: fs/ntfs3: Fixed a null-ptr-deref issue in inode-iop in ntfslookup. Syzbot reported a null-ptr-deref bug: ntfs3: loop0: The sector size of NTFS is 1024, while the media sector size is 512. ntfs3: loop0: Marking the volume as...

SUSE CVE-2026-72188

In the Linux kernel, the following vulnerability has been resolved: ntfs: sanitize MFT references returned from ntfslookupinodebyname ntfslookupinodebyname returns MFT references read from directory index entries on disk. These values are untrusted, but the function can currently return an...

CVE-2026-72354

A flaw was found in the Linux kernel's NTFS file system driver. A local attacker could trigger a use-after-free vulnerability during Master File Table MFT writeback operations. This occurs due to a timing issue where memory is freed while still being accessed, which can lead to a system crash,...

CVE-2026-72202

A flaw was found in the Linux kernel's NTFS filesystem driver. When calculating free clusters or Master File Table MFT records, a temporary state object is allocated on the heap. If this allocation fails, processes waiting for these counts can become unresponsive, leading to a denial of service D...

CVE-2026-72188

A flaw was found in the Linux kernel's NTFS filesystem driver. A remote attacker could craft a malicious NTFS image that, when processed, causes the ntfslookupinodebyname function to return an unvalidated error-marked MFT Master File Table reference. This can lead to callers consuming a bogus err...