FTP Vulnerabilities
105 vulnerabilities related to FTP
- PoC2026-01-30Monsta FTP /application/api/api.php 文件上传漏洞（CVE-2025-34299）
- 2026-01-30Monsta FTP /application/api/api.php 文件上传漏洞（CVE-2025-34299）
- PoC2026-01-16wp-updraftplus-fpd: WordPress UpdraftPlus - Full Path Disclosure
- 2025-12-16（CVE-2023-53886）Xlight FTP Server 3.9.3.6 "Execute Program"配置栈缓冲区溢出漏洞
- PoC2025-12-12CVE-2025-34299: Monsta FTP <= 2.11.2 - Unauthenticated Remote Code Execution
- 2025-09-01CVE-2011-2523: VSFTPD 2.3.4 - Backdoor Command Execution
- 2025-08-21（CVE-2010-20103）ProFTPD 1.3.3c后门导致远程代码执行漏洞
- 2025-08-07Wing FTP Server认证绕过导致远程代码执行(CVE-2025-47812)
- PoC2025-08-01CVE-2025-54309: CrushFTP - Authentication Bypass Race Condition
- PoC2025-08-01CVE-2019-19368: Rumpus FTP Web File Manager 8.2.9.1 - Cross-Site Scripting
- PoC2025-08-01CVE-2020-27735: Wing FTP 6.4.4 - Cross-Site Scripting
- PoC2025-08-01CVE-2022-0864: UpdraftPlus < 1.22.9 - Cross-Site Scripting
- PoC2025-08-01CVE-2023-43177: CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution
- PoC2025-08-01CVE-2024-4040: CrushFTP VFS - Sandbox Escape LFR
- PoC2025-08-01CVE-2025-31161: CrushFTP - Authentication Bypass
- PoC2025-08-01CVE-2025-47812: Wing FTP Server <= 7.4.3 - Remote Code Execution
- PoC2025-08-01CVE-2025-47813: Wing FTP Server <= 7.4.3 - Path Disclosure via Overlong UID Cookie
- PoC2025-08-01CVE-2011-2523: VSFTPD 2.3.4 - Backdoor Command Execution
- PoC2025-08-01CVE-2015-3306: ProFTPd - Remote Code Execution
- PoC2025-08-01ec2-unrestricted-ftp: Restrict EC2 FTP Access
- PoC2025-08-01ftp-anonymous-login: FTP Anonymous Login
- PoC2025-08-01privesc-lftp: lftp - Privilege Escalation
- PoC2025-08-01allow-unencrypted-ftp: Allow Unencrypted FTP
- PoC2025-08-01ftp-service-running: FTP Service Running
- PoC2025-08-01ftp-access-control-check: FTP Access Control Check
- PoC2025-08-01ftp-anonymous-check: Anonymous FTP Disabled Check
- PoC2025-08-01ftp-directory-permission-check: FTP Directory Access Permission Check
- PoC2025-08-01vsftpd-backdoor: VSFTPD 2.3.4 - Backdoor Command Execution
- PoC2025-08-01crushftp-anonymous-login: CrushFTP - Anonymous Login
- PoC2025-08-01crushftp-default-login: CrushFTP - Default Login
- PoC2025-08-01ftp-credentials-exposure: FTP Credentials Exposure
- PoC2025-08-01sftp-credentials-exposure: SFTP Configuration File - Credentials Exposure
- PoC2025-08-01vscode-sftp: VSCode SFTP File Exposure
- PoC2025-08-01ws-ftp-ini: WS FTP File Disclosure
- PoC2025-08-01ws-ftp-log: WS FTP File Disclosure
- PoC2025-08-01sftpgo-admin-setup: SFTPGo Admin - Setup
- PoC2025-08-01CVE-2010-20103: ProFTPd-1.3.3c - Backdoor Command Execution
- PoC2025-08-01CVE-2004-0437: Titan FTP Server 3.01 - DoS via LIST Command Disconnection
- PoC2025-08-01CVE-2004-0656: Pure-FTPd ≤ 1.0.18 - DoS via Connection Limit Exhaustion
- PoC2025-08-01CVE-2004-1602: ProFTPD 1.2.x - Username Enumeration via Timing Attack
- PoC2025-08-01CVE-2004-1641: Titan FTP ≤ 3.21 - Heap Overflow via Long Commands
- PoC2025-08-01CVE-2006-2173: FileZilla FTP Server 2.2.22 - Buffer Overflow
- PoC2025-08-01CVE-2008-0702: Titan FTP Server 6.03 and 6.0.5.549 - Heap Overflow via Long Commands
- PoC2025-08-01CVE-2008-5281: Titan FTP Server 6.05 DELE Command - Heap Overflow
- PoC2025-08-01CVE-2010-3867: ProFTPD < 1.3.3c - Directory Traversal via mod_site_misc
- PoC2025-08-01CVE-2011-0762: vsftpd < 2.3.3 - DoS
- PoC2025-08-01CVE-2011-3171: Pure-FTPd ≤ 1.0.22 - Directory Traversal
- PoC2025-08-01CVE-2014-1841: Titan FTP Server < 10.40 Move Function - Directory Traversal
- PoC2025-08-01CVE-2014-1842: Titan FTP Server Search Function < 10.40 - User Enumeration
- PoC2025-08-01CVE-2014-1843: Titan FTP Server < 10.40 - User Properties Traversal
- PoC2025-08-01CVE-2015-1419: vsftpd <= 3.0.2 - Access Restriction Bypass
- PoC2025-08-01CVE-2019-18217: ProFTPD < 1.3.6b - Remote Unauthenticated DoS
- PoC2025-08-01CVE-2019-20176: Pure-FTPd < 1.0.50 - DoS via Resource Exhaustion
- PoC2025-08-01CVE-2020-35359: Pure-FTPd 1.0.48 - Denial of Service
- PoC2025-08-01CVE-2020-9274: Pure-FTPd ≤ 1.0.49 - DoS via Uninitialized Pointer
- PoC2025-08-01CVE-2020-9365: Pure-FTPd 1.0.24 - Security Vulnerability
- PoC2025-08-01CVE-2021-30047: vsftpd < 3.0.3 - DoS
- PoC2025-08-01CVE-2021-40524: Pure-FTPd 1.0.23 < 1.0.50 - Arbitrary File Upload
- PoC2025-08-01CVE-2023-22629: TitanFTP move-file Function ≤ 1.94.1205 - Path Traversal
- PoC2025-08-01CVE-2023-51713: ProFTPD < 1.3.8a - DoS via Out-of-Bounds Read
- PoC2025-08-01CVE-2024-48208: Pure-FTPd < 1.0.52 - Buffer Overflow
- PoC2025-08-01CVE-2024-48651: ProFTPD ≤ 1.3.8b - Privilege Escalation via mod_sql
- PoC2025-08-01ftp-anonymous-login: FTP Anonymous Login
- PoC2025-08-01ftp-weak-credentials: FTP Service - Credential Weakness
- PoC2025-08-01CVE-2023-40044: WS_FTP Server - Insecure Deserialization
- 2025-07-19（CVE-2025-54309）CrushFTP AS2验证漏洞导致远程管理员权限提升
- 2025-07-16Wing FTP Server /loginok.html 代码执行漏洞 （CVE-2025-47812）
- 2025-07-16Wing FTP Server /loginok.html 代码执行漏洞 （CVE-2025-47812）
- 2025-05-23CrushFTP /WebInterface/function/ 未授权访问漏洞 （CVE-2025-2825）
- 2025-05-23CrushFTP /WebInterface/function/ 未授权访问漏洞 （CVE-2025-2825）
- 2025-05-22（CVE-2025-5075）FreeFloat FTP Server 1.0 DEBUG命令处理组件缓冲区溢出漏洞
- 2025-05-18Freefloat Freefloat_ftp_server内存损坏漏洞(CVE-2025-4846)
- 2025-05-17（CVE-2025-4791）FreeFloat FTP Server 1.0缓冲区溢出漏洞
- 2025-05-01（CVE-2025-4162）PCMan FTP服务器ASCII命令处理器缓冲区溢出漏洞
- 2025-04-25CrushFTP /WebInterface/function/ 权限绕过漏洞（CVE-2025-31161）
- 2025-04-25CrushFTP /WebInterface/function/ 权限绕过漏洞（CVE-2025-31161）
- 2025-03-31CrushFTP 存在身份验证绕过漏洞(CVE-2025-2825)
- 2025-03-29CrushFTP 身份鉴权绕过漏洞
- 2025-02-09SFTPGo 操作系统命令注入漏洞
- 2025-01-18WordPress plugin UpdraftPlus - Backup/Restore 跨站脚本漏洞
- 2024-11-07Xlight FTP Server整数溢出漏洞(CVE-2024-46483)
- 2024-10-24Pureftpd Pure-ftpd越界读取漏洞(CVE-2024-48208)
- 2024-09-26FTP 未授权访问漏洞
- 2024-06-18SolarWinds Serv-U FTP 存在任意文件读取漏洞
- 2024-05-04SolarWinds Serv-U FTP Server 日志信息泄露漏洞
- 2024-04-30CrushFTP CVE-2024-4040 服务端模板注入漏洞
- 2024-04-26CrushFTP /WebInterface/function 文件读取漏洞
- 2024-04-26CrushFTP /WebInterface/function 文件读取漏洞
- 2024-04-25CrushFTP 存在服务端模板注入漏洞
- 2024-03-21Progress Software WS_FTP未授权远程命令执行漏洞
- 2024-02-07CrushFTP prior CVE-2023-43177 远程代码执行漏洞
- 2024-02-07EnterpriseDT CompleteFTP Server HttpFile任意文件删除漏洞
- 2024-02-07Titan FTP server目录遍历漏洞
- 2023-12-12(CVE-2023-41963) HMI GC-A2 FTP服务 拒绝服务漏洞
- 2023-11-30CrushFTP as2-to 认证权限绕过漏洞（CVE-2023-43177）
- 2023-11-30CrushFTP as2-to 认证权限绕过漏洞（CVE-2023-43177）
- 2023-11-19CrushFTP 远程代码执行漏洞
- 2022-02-08Attachmate Reflection FTP Client ActiveX控件远程代码执行漏洞
- 2021-01-19ProFTPD mod_copy 后门(CVE-2015-3306)
- 2021-01-19ANTlabs IG3100-FTP弱口令
- 2021-01-19FTP/HTTP File Server 2.1.2-远程命令执行
- 2015-02-06Attachmate Reflection FTP Client ActiveX Control 远程代码执行漏洞
- 2014-04-29Titan FTP Server目录遍历漏洞（CNVD-2014-00804）
- 2014-04-29（CVE-2014-1841）Titan FTP Server 10.40 Build 1829之前版本Web界面目录遍历漏洞
- 2005-09-15FileZilla FTP客户端硬编码密钥漏洞