Ftp — PoC Archivehttps://poc.intelseclab.com/tags/ftp/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Monsta FTP Pre-Authentication Remote Code Execution via Arbitrary File Upload (CVE-2025-34299)https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-34299-monsta-ftp-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-06_cve-2025-34299-monsta-ftp-rce/Critical severity (CVSS 9.8) — network · CVE-2025-34299. Status: Weaponized. Affects: Monsta FTP (web-based FTP manager). Tags: monsta-ftp, rce, pre-auth, unrestricted-file-upload, cwe-434, php, ftp, docker, nuclei, kev.networkCriticalmonsta-ftprcepre-authunrestricted-file-uploadcwe-434phpftpdockernucleikevProFTPD mod_sql Pre-Auth SQL Injection Leading to RCE (CVE-2026-42167)https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42167-proftpd-sqli-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-42167-proftpd-sqli-rce/High severity (CVSS 8.1) — network · CVE-2026-42167. Status: PoC. Affects: ProFTPD (with mod_sql and SQL-backed logging configured). Tags: sqli, unauthenticated, proftpd, mod_sql, ftp, rce, backdoor, go.networkHighsqliunauthenticatedproftpdmod_sqlftprcebackdoorgoLiteSpeed cPanel/WHM Plugin Symlink Privilege Escalation — CVE-2026-54420https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-54420-litespeed-symlink-lpe/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-05_cve-2026-54420-litespeed-symlink-lpe/High severity (CVSS 8.5) — network · CVE-2026-54420. Status: PoC. Affects: LiteSpeed cPanel Plugin / WHM Plugin. Tags: litespeed, cpanel, whm, symlink, cwe-61, cloudlinux, cagefs, shared-hosting, ftp, privilege-escalation.networkHighlitespeedcpanelwhmsymlinkcwe-61cloudlinuxcagefsshared-hostingftpprivilege-escalationSquidbleed — Squid Proxy FTP Gateway Out-of-Bounds Heap Read (CVE-2026-47729)https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-47729-squidbleed-squid-ftp-oob-read/Wed, 01 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/network/2026-07-01_cve-2026-47729-squidbleed-squid-ftp-oob-read/Medium severity — network · CVE-2026-47729. Status: PoC. Affects: Squid Proxy — FTP gateway / directory-listing parser. Tags: memory-disclosure, information-disclosure, Squid, proxy, FTP, heap-overflow, oob-read, credential-theft, legacy.networkMediummemory-disclosureinformation-disclosureSquidproxyFTPheap-overflowoob-readcredential-theftlegacy