tag #WingFTP

1 post · browse all

• Mar 20, 2026 HackTheBox: Wingdata exploiting CVE-2025-47812 lua injection in WingFTP for RCE, cracking a salted sha256 hash, then abusing CVE-2025-4138 PATH_MAX overflow to escape tarfile filter and get root