ProFTPD

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories ProFTPD ACL bypass vulnerability CVE-2026-35025 access control bypass in RNFR command

ProFTPD ACL bypass vulnerability CVE-2026-35025 access control bypass in RNFR command

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories

Do Son July 1, 2026

TL;DR A new ProFTPD ACL bypass, CVE-2026-35025, scores 8.6 on CVSS. It lets a logged-in FTP user...

Full Exploit Disclosed: Public PoC and Technical Details Released for Critical ProFTPD SQL Injection ProFTPD SQL Injection CVE-2026-42167 Exploit

ProFTPD SQL Injection CVE-2026-42167 Exploit

Full Exploit Disclosed: Public PoC and Technical Details Released for Critical ProFTPD SQL Injection

Do Son April 29, 2026

Analysts from ZeroPath Research have uncovered a critical SQL injection vulnerability within the mod_sql extension of ProFTPD,...

CVE-2024-48651: ProFTPD Vulnerability Grants Root Access to Attackers Artivion cybersecurity - Zero-Day Attacks

Artivion cybersecurity - Zero-Day Attacks

CVE-2024-48651: ProFTPD Vulnerability Grants Root Access to Attackers

Do Son December 2, 2024

Popular FTP server ProFTPD has been found to contain a critical security flaw that could allow attackers...

CVE-2023-51713: A DoS Flaw Affects ProFTPD

CVE-2023-51713

CVE-2023-51713: A DoS Flaw Affects ProFTPD

Do Son December 24, 2023

A vulnerability was found in one of the most popular FTP server applications, ProFTPD, an FTP server...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-1207CVSS 5.4
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Raster lookups on...
Admin intel📅 Updated: Jul 10, 2026
CVE-2026-48939CVSS 10.0
A vulnerability in the iCagenda extension for Joomla allows the upload of arbitrary files in the file attachment...
CISA KEV📅 Added to KEV: Jul 10, 2026
CVE-2026-56291CVSS 10.0
The Joomla extension Balbooa Forms is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files...
CISA KEV📅 Added to KEV: Jul 10, 2026
CVE-2026-55255CVSS 8.4
Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct...
CISA KEV📅 Added to KEV: Jul 7, 2026
CVE-2026-48908
A vulnerability in SP Page Builder for Joomla allows unauthenticated users to upload arbitrary files, ultimately resulting in...
CISA KEV📅 Added to KEV: Jul 7, 2026
CVE-2026-56290
The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable...
CISA KEV📅 Added to KEV: Jul 7, 2026
CVE-2026-20896CVSS 9.8
Gitea Docker image: `REVERSE_PROXY_TRUSTED_PROXIES = *` default lets any source IP impersonate any user via `X-WEBAUTH-USER`
Admin intel📅 Updated: Jul 6, 2026
CVE-2026-48282CVSS 10.0
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted...
Admin intelCISA KEV📅 Added to KEV: Jul 7, 2026📅 Updated: Jul 3, 2026