Wingftp — PoC Archivehttps://poc.intelseclab.com/tags/wingftp/Latest proof-of-concept entries.Hugoen-usMon, 06 Jul 2026 00:00:00 +0000Wing FTP Server NULL-Byte Lua Injection Unauthenticated RCE (CVE-2025-47812)https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-47812-wingftp-null-byte-lua-rce/Mon, 06 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-06_cve-2025-47812-wingftp-null-byte-lua-rce/Critical severity (CVSS 10) — web · CVE-2025-47812. Status: Weaponized. Affects: Wing FTP Server, web administration/login interface (loginok.html, session mechanism). Tags: wingftp, ftp-server, null-byte-injection, lua-injection, unauthenticated-rce, session-file, cwe-94, cwe-158, python.webCriticalwingftpftp-servernull-byte-injectionlua-injectionunauthenticated-rcesession-filecwe-94cwe-158pythonWing FTP Server Admin Session Poisoning via Lua loadfile() RCE (CVE-2026-44403)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44403-wingftp-session-poisoning-rce/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-44403-wingftp-session-poisoning-rce/High severity — web · CVE-2026-44403. Status: PoC. Affects: Wing FTP Server (WebAdmin console). Tags: wingftp, lua, session-poisoning, loadfile, rce, webadmin, authenticated.webHighwingftpluasession-poisoningloadfilercewebadminauthenticated