CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Wing FTP Server Remote Code Execution Vulnerability via Null Byte Injection Security Advisory (CVE-2025-47812)
[Affected Scope] User and admin web interfaces of Wing FTP Server before version 7.4.4
[Impact] Unauthenticated attackers (including anonymous FTP accounts) can inject arbitrary Lua code into session files, leading to remote code execution with root or SYSTEM privileges
[Mitigation] Immediately upgrade Wing FTP Server to version 7.4.4 or later, and restrict external access to the web administration interface
Rejetto HTTP File Server (HFS) 2.3x Remote Code Execution (RCE) Vulnerability Analysis and Mitigation Guide (CVE-2014-6287)
[Affected Scope] Rejetto HTTP File Server (HFS) 2.3x versions prior to 2.3c
[Impact] Unauthenticated remote attackers can execute arbitrary system commands and gain full control of the host by sending crafted HTTP requests
[Mitigation] Immediately upgrade to a patched version (2.3c or later) or decommission the legacy HFS service in favor of secure alternatives