Critical Wing FTP Server Vulnerability (CVE-2025-47812) Actively Being Exploited in the Wild

🗓️ 11 Jul 2025 10:58:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 19 Views

Critical vulnerability CVE-2025-47812 in Wing FTP Server allows remote code execution via null bytes.

Reporter	Title	Published	Views	Family All 62
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	2 Jul 202521:51	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	18 Feb 202608:41	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	1 Jul 202518:20	–	githubexploit
GithubExploit	Exploit for Cross-site Scripting in Astaro Security_Gateway_Software	30 Apr 201915:15	–	githubexploit
GithubExploit	HTB-WingData-Writeup	27 Apr 202615:17	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	1 Jul 202512:02	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	27 Jul 202517:47	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	7 Jul 202513:20	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	4 Jul 202516:22	–	githubexploit
GithubExploit	Exploit for Improper Neutralization of Null Byte or NUL Character in Wftpserver Wing_Ftp_Server	22 Feb 202618:28	–	githubexploit

15 Jul 2025 03:50Current

10High risk

Vulners AI Score10

CVSS 3.110

EPSS0.95343

SSVC

cve-2025-47812 wing ftp server remote code execution lua injection security flaw anonymous ftp