https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 15:11:35 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-08471 bdu:2025-08471 https://cve.radiocsirt.org/vuln/bdu:2025-08471 https://cve.radiocsirt.org/vuln/euvd-2026-272732 EUVD-2026-272732 https://cve.radiocsirt.org/vuln/euvd-2026-272732 https://cve.radiocsirt.org/vuln/fkie_cve-2025-47812 <p>In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle &#39;\0&#39; bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.</p> <p>In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle &#39;\0&#39; bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-47812 https://cve.radiocsirt.org/vuln/ghsa-j4xf-75rr-vvrv <p>In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle &#39;\0&#39; bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.</p> <p>In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle &#39;\0&#39; bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.</p> https://cve.radiocsirt.org/vuln/ghsa-j4xf-75rr-vvrv