CVE-2026-44403-WingFTP-v8.1.2-POC-Exploit

Wing FTP Server v8.1.2 contains a Remote Code Execution RCE vulnerability in the session serialization mechanism. An authenticated administrator can inject arbitrary Lua code through the domain admin mydirectory basefolder field, which gets executed server-side via loadfile. This is a separate...

CVE-2020-8635

What's this Wing FTP Server 6.2.3 - Privilege Escalation Exploit Introduction Wing FTP Server v6.2.3 for Linux, macOS, and Solaris sets insecure permissions on installation directories and configuration files. This allows local users to arbitrarily create FTP users with full privileges, and...

CVE-2025-471812-POC

/ | / | / / | / / / |/ // / / / / / / &password= 2. Server authenticates "anonymous" truncated at NULL but writes full payload into session file → returns UID cookie 3. GET /dir...

CVE-2025-47812

CVE-2025-47812 How does this detection method work? This Nuclei template detects Wing FTP Server instances vulnerable to CVE-2025-47812 by identifying versions older than 7.4.4 exposed in the web client’s HTML response. How do I run this script? 1. Download Nuclei from here 2. Copy the template t...

CVE-2025-47812-PoC

CVE-2025-47812 — Wing FTP Server Remote Code Execution RCE Overview Field| Value ---|--- CVE| CVE-2025-47812 Affected| Wing FTP Server 7.4.4 Type| Unauthenticated Remote Code Execution CVSS Score| 10.0 Critical Fixed in| Wing FTP Server 7.4.4 How it works The vulnerability exists in the...

CVE-2025-47812-poC

CVE-2025-47812-poC Simple exploit for Wing FTP Server RCE CVE-2025-47812 to run commands and get a reverse shell. For educational use only. Vulnerability Details This security vulnerability was publicly disclosed and detailed by RCESecurity...

CVE-2025-47812

=========================================================== CVE-2025-47812 - Wing FTP Server Remote Code Execution RCE =========================================================== Author: blindma1den Date: July 2025 Exploit Type: Remote Code Execution Unauthenticated Target: Wing FTP Server 7.4.4...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauth RCE rewrite Python exploit for the unauthenticated Lua-injection RCE in Wing FTP Server ≤ 7.4.3. Designed for shell delivery — one command from check to a working netcat callback. Written some time ago for wingData lab on HTB and open-sourced now. Use only...

CVE-2025-47812

CVE-2025-47812 This is a Proof of Concept PoC of the Wing FTP Server Exploit CVE-2025-47812 Description Wing FTP Server versions prior to 7.4.4 suffered a Remote Code Execution RCE vulnerability as a result of the insecure treatment of the username parameter. When we are allowed to login in the...

CVE-2025-47812-Research

CVE-2025-47812 — Wing FTP Server RCE Research Context Cybersecurity observation internship carried out within the Akasec club 1337 Khouribga — July/August 2025. Vulnerability studied CVE : CVE-2025-47812 CVSS Score : 10.0 Critical Affected software : Wing FTP Server 7.4.4 Type : Remote Code...

CVE-2025-47812

CVE-2025-47812 — Wing FTP Server Unauthenticated RCE ██╗ ██╗██╗███╗ ██╗ ██████╗ ███████╗████████╗██████╗ ██║ ██║██║████╗ ██║██╔════╝ ██╔════╝╚══██╔══╝██╔══██╗ ██║ █╗ ██║██║██╔██╗ ██║██║ ███╗ █████╗ ██║ ██████╔╝ ██║███╗██║██║██║╚██╗██║██║ ██║ ██╔══╝ ██║ ██╔═══╝ ╚███╔███╔╝██║██║ ╚████║╚██████╔╝ ██║...

CVE-2025-47812-poc

CVE-2025-47812 Wing FTP Server Remote Code Execution RCE Exploit CVE-2025-47812 📌 Credit : Vulnerability discovered by Julien @MrTuxracer. This PoC implementation is based on their original research. This repository hosts a Python exploit for the Wing FTP Server Remote Code Execution RCE...

Exploit_CVE-2025-47812

WingFTPServer7.4.3-UnauthenticatedRCE...

Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie

Wing FTP Server versions prior to 7.4.4 are vulnerable to an authenticated information disclosure vulnerability CVE-2025-47813. The vulnerability occurs due to improper validation of the 'UID' session cookie in the /loginok.html endpoint. Supplying an overlong UID value causes the server to respo...

CVE-2025-47812

🚀 Wing FTP Exploit - CVE-2025-47812 Enhanced exploit for Wing FTP Server CVE-2025-47812 - Unauthenticated Remote Code Execution RCE 🔧 Installation Clone this repository and enter the directory: git clone https://github.com/0xjuarez/CVE-2025-47812.git cd CVE-2025-47812 pip install -r...

CVE-2025-47812-Wing-FTP-Server-7.4.3-Unauthenticated-RCE-PoC

CVE-2025-47812 — Wing FTP Server Unauthenticated remote code execution vulnerability in Wing FTP Server whoami root References CVE-2025-47812 W...

CVE-2025-47812

CVE-2025-47812 – Wing FTP Server RCE Exploit Exploit Title: Wing FTP Server 7.4.4 Remote Code Execution via Lua Injection CVE: CVE-2025-47812 Tested on: Wing FTP Server v7.3.x Windows/Linux Impact: Remote Code Execution RCE as SYSTEM/root Severity: Critical Description A vulnerability in Wing FTP...

WingFTP-CVE-2025-47812-illdeed

CVE-2025-47812 - Wing FTP Server RCE Exploit This repository provides a proof-of-concept exploit for CVE-2025-47812 , a remote command execution RCE vulnerability in Wing FTP Server. An attacker can inject and execute arbitrary Lua-based system commands by abusing the username parameter during...

Wing FTP Server <= 7.4.3 - Remote Code Execution

Wing FTP Server versions prior to 7.4.4 are vulnerable to an unauthenticated remote code execution RCE flaw CVE-2025-47812. The vulnerability arises from improper NULL byte handling in the 'username' parameter during login, which allows Lua code injection into session files. These injected sessio...

Blackash-CVE-2025-47812

🛡️ CVE-2025-47812 – Critical RCE in Wing FTP Server 🛡️ 🔎 Overview: CVE-2025-47812 is a critical remote code execution RCE vulnerability affecting Wing FTP Server versions prior to 7.4.4. It was discovered by a security researcher and has been confirmed to be actively exploited in the wild. 🧱 Root...