[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2015-3306":6},{"stargazers_count":4,"fetched_at":5},8,"2026-10-08T19:15:20.587Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":848,"aliases":910,"duplicate_of":9,"upstream":912,"downstream":913,"duplicates":921,"related":922,"reserved_at":9,"published_at":924,"modified_at":925,"state":926,"summary":927,"references_raw":935,"kevs":1013,"epss":1023,"epss_history":1025,"metrics":1220,"affected":1230},"CVE-2015-3306","The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-284","Improper Access Control","The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.","weakness","Incomplete","Pillar",[19,106,110,160,173,177,181,185,189,232,271,381,398,501,521,525,685],{"id":20,"name":21,"techniques":22},"CAPEC-19","Embedding Scripts within Scripts",[23,34,99],{"id":24,"name":25,"tactics":26,"countermeasures":33},"T1027.009","Embedded Payloads",[27,30],{"id":28,"name":29},"TA0030","Defense Evasion",{"id":31,"name":32},"TA0005","Stealth",[],{"id":35,"name":36,"tactics":37,"countermeasures":44},"T1546.004","Unix Shell Configuration Modification",[38,41],{"id":39,"name":40},"TA0111","Privilege Escalation",{"id":42,"name":43},"TA0110","Persistence",[45,50,55,59,64,69,73,78,82,86,90,94],{"id":46,"name":47,"tactic":48},"D3-FA","File Analysis",{"name":49},"Detect",{"id":51,"name":52,"tactic":53},"D3-RFAM","Remote File Access Mediation",{"name":54},"Isolate",{"id":56,"name":57,"tactic":58},"D3-CQ","Content Quarantine",{"name":54},{"id":60,"name":61,"tactic":62},"D3-DF","Decoy File",{"name":63},"Deceive",{"id":65,"name":66,"tactic":67},"D3-FE","File Encryption",{"name":68},"Harden",{"id":70,"name":71,"tactic":72},"D3-FIM","File Integrity Monitoring",{"name":49},{"id":74,"name":75,"tactic":76},"D3-FEV","File Eviction",{"name":77},"Evict",{"id":79,"name":80,"tactic":81},"D3-CM","Content Modification",{"name":54},{"id":83,"name":84,"tactic":85},"D3-USICA","User Session Init Config Analysis",{"name":49},{"id":87,"name":88,"tactic":89},"D3-CF","Content Filtering",{"name":54},{"id":91,"name":92,"tactic":93},"D3-LFP","Local File Permissions",{"name":54},{"id":95,"name":96,"tactic":97},"D3-RF","Restore File",{"name":98},"Restore",{"id":100,"name":101,"tactics":102,"countermeasures":105},"T1546.016","Installer Packages",[103,104],{"id":39,"name":40},{"id":42,"name":43},[],{"id":107,"name":108,"techniques":109},"CAPEC-441","Malicious Logic Insertion",[],{"id":111,"name":112,"techniques":113},"CAPEC-478","Modification of Windows Service Configuration",[114,141],{"id":115,"name":116,"tactics":117,"countermeasures":125},"T1574.011","Services Registry Permissions Weakness",[118,119,120,121,122],{"id":42,"name":43},{"id":39,"name":40},{"id":28,"name":29},{"id":31,"name":32},{"id":123,"name":124},"TA0104","Execution",[126,130,132,136],{"id":127,"name":128,"tactic":129},"D3-SICA","System Init Config Analysis",{"name":49},{"id":56,"name":57,"tactic":131},{"name":54},{"id":133,"name":134,"tactic":135},"D3-RC","Restore Configuration",{"name":98},{"id":137,"name":138,"tactic":139},"D3-CI","Configuration Inventory",{"name":140},"Model",{"id":142,"name":143,"tactics":144,"countermeasures":147},"T1543.003","Windows Service",[145,146],{"id":42,"name":43},{"id":39,"name":40},[148,152,156],{"id":149,"name":150,"tactic":151},"D3-DI","Data Inventory",{"name":140},{"id":153,"name":154,"tactic":155},"D3-SCP","System Configuration Permissions",{"name":68},{"id":157,"name":158,"tactic":159},"D3-RD","Restore Database",{"name":98},{"id":161,"name":162,"techniques":163},"CAPEC-479","Malicious Root Certificate",[164],{"id":165,"name":166,"tactics":167,"countermeasures":172},"T1553.004","Install Root Certificate",[168,169],{"id":28,"name":29},{"id":170,"name":171},"TA0112","Defense Impairment",[],{"id":174,"name":175,"techniques":176},"CAPEC-502","Intent Spoof",[],{"id":178,"name":179,"techniques":180},"CAPEC-503","WebView Exposure",[],{"id":182,"name":183,"techniques":184},"CAPEC-536","Data Injected During Configuration",[],{"id":186,"name":187,"techniques":188},"CAPEC-546","Incomplete Data Deletion in a Multi-Tenant Environment",[],{"id":190,"name":191,"techniques":192},"CAPEC-550","Install New Service",[193],{"id":194,"name":195,"tactics":196,"countermeasures":199},"T1543","Create or Modify System Process",[197,198],{"id":42,"name":43},{"id":39,"name":40},[200,202,204,206,208,210,212,214,216,218,222,224,226,228,230],{"id":87,"name":88,"tactic":201},{"name":54},{"id":74,"name":75,"tactic":203},{"name":77},{"id":46,"name":47,"tactic":205},{"name":49},{"id":70,"name":71,"tactic":207},{"name":49},{"id":95,"name":96,"tactic":209},{"name":98},{"id":91,"name":92,"tactic":211},{"name":54},{"id":51,"name":52,"tactic":213},{"name":54},{"id":56,"name":57,"tactic":215},{"name":54},{"id":79,"name":80,"tactic":217},{"name":54},{"id":219,"name":220,"tactic":221},"D3-SFA","System File Analysis",{"name":49},{"id":149,"name":150,"tactic":223},{"name":140},{"id":60,"name":61,"tactic":225},{"name":63},{"id":65,"name":66,"tactic":227},{"name":68},{"id":157,"name":158,"tactic":229},{"name":98},{"id":153,"name":154,"tactic":231},{"name":68},{"id":233,"name":234,"techniques":235},"CAPEC-551","Modify Existing Service",[236],{"id":194,"name":195,"tactics":237,"countermeasures":240},[238,239],{"id":42,"name":43},{"id":39,"name":40},[241,243,245,247,249,251,253,255,257,259,261,263,265,267,269],{"id":87,"name":88,"tactic":242},{"name":54},{"id":74,"name":75,"tactic":244},{"name":77},{"id":46,"name":47,"tactic":246},{"name":49},{"id":70,"name":71,"tactic":248},{"name":49},{"id":95,"name":96,"tactic":250},{"name":98},{"id":91,"name":92,"tactic":252},{"name":54},{"id":51,"name":52,"tactic":254},{"name":54},{"id":56,"name":57,"tactic":256},{"name":54},{"id":79,"name":80,"tactic":258},{"name":54},{"id":219,"name":220,"tactic":260},{"name":49},{"id":149,"name":150,"tactic":262},{"name":140},{"id":60,"name":61,"tactic":264},{"name":63},{"id":65,"name":66,"tactic":266},{"name":68},{"id":157,"name":158,"tactic":268},{"name":98},{"id":153,"name":154,"tactic":270},{"name":68},{"id":272,"name":273,"techniques":274},"CAPEC-552","Install Rootkit ",[275,332,352],{"id":276,"name":277,"tactics":278,"countermeasures":281},"T1014","Rootkit",[279,280],{"id":28,"name":29},{"id":31,"name":32},[282,286,290,292,296,298,300,302,304,306,308,310,314,318,320,324,328,330],{"id":283,"name":284,"tactic":285},"D3-AVE","Asset Vulnerability Enumeration",{"name":140},{"id":287,"name":288,"tactic":289},"D3-SWI","Software Inventory",{"name":140},{"id":79,"name":80,"tactic":291},{"name":54},{"id":293,"name":294,"tactic":295},"D3-SU","Software Update",{"name":68},{"id":87,"name":88,"tactic":297},{"name":54},{"id":91,"name":92,"tactic":299},{"name":54},{"id":95,"name":96,"tactic":301},{"name":98},{"id":51,"name":52,"tactic":303},{"name":54},{"id":46,"name":47,"tactic":305},{"name":49},{"id":70,"name":71,"tactic":307},{"name":49},{"id":60,"name":61,"tactic":309},{"name":63},{"id":311,"name":312,"tactic":313},"D3-RS","Restore Software",{"name":98},{"id":315,"name":316,"tactic":317},"D3-FEMC","Firmware Embedded Monitoring Code",{"name":49},{"id":65,"name":66,"tactic":319},{"name":68},{"id":321,"name":322,"tactic":323},"D3-FV","Firmware Verification",{"name":49},{"id":325,"name":326,"tactic":327},"D3-FBA","Firmware Behavior Analysis",{"name":49},{"id":74,"name":75,"tactic":329},{"name":77},{"id":56,"name":57,"tactic":331},{"name":54},{"id":333,"name":334,"tactics":335,"countermeasures":339},"T1542.003","Bootkit",[336,337,338],{"id":28,"name":29},{"id":31,"name":32},{"id":42,"name":43},[340,344,346,348,350],{"id":341,"name":342,"tactic":343},"D3-BA","Bootloader Authentication",{"name":68},{"id":283,"name":284,"tactic":345},{"name":140},{"id":293,"name":294,"tactic":347},{"name":68},{"id":311,"name":312,"tactic":349},{"name":98},{"id":287,"name":288,"tactic":351},{"name":140},{"id":353,"name":354,"tactics":355,"countermeasures":358},"T1547.006","Kernel Modules and Extensions",[356,357],{"id":42,"name":43},{"id":39,"name":40},[359,361,363,365,367,369,371,373,375,377,379],{"id":65,"name":66,"tactic":360},{"name":68},{"id":70,"name":71,"tactic":362},{"name":49},{"id":60,"name":61,"tactic":364},{"name":63},{"id":74,"name":75,"tactic":366},{"name":77},{"id":87,"name":88,"tactic":368},{"name":54},{"id":91,"name":92,"tactic":370},{"name":54},{"id":51,"name":52,"tactic":372},{"name":54},{"id":56,"name":57,"tactic":374},{"name":54},{"id":79,"name":80,"tactic":376},{"name":54},{"id":95,"name":96,"tactic":378},{"name":98},{"id":46,"name":47,"tactic":380},{"name":49},{"id":382,"name":383,"techniques":384},"CAPEC-556","Replace File Extension Handlers",[385],{"id":386,"name":387,"tactics":388,"countermeasures":391},"T1546.001","Change Default File Association",[389,390],{"id":39,"name":40},{"id":42,"name":43},[392,394,396],{"id":56,"name":57,"tactic":393},{"name":54},{"id":133,"name":134,"tactic":395},{"name":98},{"id":137,"name":138,"tactic":397},{"name":140},{"id":399,"name":400,"techniques":401},"CAPEC-558","Replace Trusted Executable",[402,408],{"id":403,"name":404,"tactics":405,"countermeasures":407},"T1505.005","Terminal Services DLL",[406],{"id":42,"name":43},[],{"id":409,"name":410,"tactics":411,"countermeasures":414},"T1546.008","Accessibility Features",[412,413],{"id":39,"name":40},{"id":42,"name":43},[415,417,421,425,427,431,433,437,439,443,447,449,453,455,459,461,465,469,471,473,475,477,479,483,487,489,493,497],{"id":74,"name":75,"tactic":416},{"name":77},{"id":418,"name":419,"tactic":420},"D3-APCA","Application Protocol Command Analysis",{"name":49},{"id":422,"name":423,"tactic":424},"D3-NTCD","Network Traffic Community Deviation",{"name":49},{"id":60,"name":61,"tactic":426},{"name":63},{"id":428,"name":429,"tactic":430},"D3-RTSD","Remote Terminal Session Detection",{"name":49},{"id":65,"name":66,"tactic":432},{"name":68},{"id":434,"name":435,"tactic":436},"D3-CAA","Connection Attempt Analysis",{"name":49},{"id":46,"name":47,"tactic":438},{"name":49},{"id":440,"name":441,"tactic":442},"D3-CSPP","Client-server Payload Profiling",{"name":49},{"id":444,"name":445,"tactic":446},"D3-PHDURA","Per Host Download-Upload Ratio Analysis",{"name":49},{"id":70,"name":71,"tactic":448},{"name":49},{"id":450,"name":451,"tactic":452},"D3-DA","Dynamic Analysis",{"name":49},{"id":95,"name":96,"tactic":454},{"name":98},{"id":456,"name":457,"tactic":458},"D3-EFA","Emulated File Analysis",{"name":49},{"id":133,"name":134,"tactic":460},{"name":98},{"id":462,"name":463,"tactic":464},"D3-NTSA","Network Traffic Signature Analysis",{"name":49},{"id":466,"name":467,"tactic":468},"D3-ANAA","Administrative Network Activity Analysis",{"name":49},{"id":87,"name":88,"tactic":470},{"name":54},{"id":91,"name":92,"tactic":472},{"name":54},{"id":51,"name":52,"tactic":474},{"name":54},{"id":56,"name":57,"tactic":476},{"name":54},{"id":79,"name":80,"tactic":478},{"name":54},{"id":480,"name":481,"tactic":482},"D3-EAL","Executable Allowlisting",{"name":54},{"id":484,"name":485,"tactic":486},"D3-EDL","Executable Denylisting",{"name":54},{"id":137,"name":138,"tactic":488},{"name":140},{"id":490,"name":491,"tactic":492},"D3-NTF","Network Traffic Filtering",{"name":54},{"id":494,"name":495,"tactic":496},"D3-UGLPA","User Geolocation Logon Pattern Analysis",{"name":49},{"id":498,"name":499,"tactic":500},"D3-PMAD","Protocol Metadata Anomaly Detection",{"name":49},{"id":502,"name":503,"techniques":504},"CAPEC-562","Modify Shared File",[505],{"id":506,"name":507,"tactics":508,"countermeasures":512},"T1080","Taint Shared Content",[509],{"id":510,"name":511},"TA0109","Lateral Movement",[513,517],{"id":514,"name":515,"tactic":516},"D3-NRAM","Network Resource Access Mediation",{"name":54},{"id":518,"name":519,"tactic":520},"D3-DNR","Decoy Network Resource",{"name":63},{"id":522,"name":523,"techniques":524},"CAPEC-563","Add Malicious File to Shared Webroot",[],{"id":526,"name":527,"techniques":528},"CAPEC-564","Run Software at Logon",[529,576,605,634],{"id":530,"name":531,"tactics":532,"countermeasures":535},"T1037","Boot or Logon Initialization Scripts",[533,534],{"id":42,"name":43},{"id":39,"name":40},[536,538,540,542,544,546,548,550,552,554,556,558,560,562,564,566,568,570,572,574],{"id":87,"name":88,"tactic":537},{"name":54},{"id":137,"name":138,"tactic":539},{"name":140},{"id":65,"name":66,"tactic":541},{"name":68},{"id":95,"name":96,"tactic":543},{"name":98},{"id":133,"name":134,"tactic":545},{"name":98},{"id":91,"name":92,"tactic":547},{"name":54},{"id":51,"name":52,"tactic":549},{"name":54},{"id":56,"name":57,"tactic":551},{"name":54},{"id":79,"name":80,"tactic":553},{"name":54},{"id":480,"name":481,"tactic":555},{"name":54},{"id":484,"name":485,"tactic":557},{"name":54},{"id":74,"name":75,"tactic":559},{"name":77},{"id":46,"name":47,"tactic":561},{"name":49},{"id":70,"name":71,"tactic":563},{"name":49},{"id":450,"name":451,"tactic":565},{"name":49},{"id":456,"name":457,"tactic":567},{"name":49},{"id":518,"name":519,"tactic":569},{"name":63},{"id":514,"name":515,"tactic":571},{"name":54},{"id":127,"name":128,"tactic":573},{"name":49},{"id":60,"name":61,"tactic":575},{"name":63},{"id":577,"name":578,"tactics":579,"countermeasures":582},"T1543.001","Launch Agent",[580,581],{"id":42,"name":43},{"id":39,"name":40},[583,585,587,589,591,593,595,597,599,601,603],{"id":87,"name":88,"tactic":584},{"name":54},{"id":51,"name":52,"tactic":586},{"name":54},{"id":70,"name":71,"tactic":588},{"name":49},{"id":65,"name":66,"tactic":590},{"name":68},{"id":79,"name":80,"tactic":592},{"name":54},{"id":95,"name":96,"tactic":594},{"name":98},{"id":91,"name":92,"tactic":596},{"name":54},{"id":56,"name":57,"tactic":598},{"name":54},{"id":60,"name":61,"tactic":600},{"name":63},{"id":46,"name":47,"tactic":602},{"name":49},{"id":74,"name":75,"tactic":604},{"name":77},{"id":606,"name":607,"tactics":608,"countermeasures":611},"T1543.004","Launch Daemon",[609,610],{"id":42,"name":43},{"id":39,"name":40},[612,614,616,618,620,622,624,626,628,630,632],{"id":56,"name":57,"tactic":613},{"name":54},{"id":79,"name":80,"tactic":615},{"name":54},{"id":60,"name":61,"tactic":617},{"name":63},{"id":46,"name":47,"tactic":619},{"name":49},{"id":70,"name":71,"tactic":621},{"name":49},{"id":74,"name":75,"tactic":623},{"name":77},{"id":95,"name":96,"tactic":625},{"name":98},{"id":87,"name":88,"tactic":627},{"name":54},{"id":91,"name":92,"tactic":629},{"name":54},{"id":51,"name":52,"tactic":631},{"name":54},{"id":65,"name":66,"tactic":633},{"name":68},{"id":635,"name":636,"tactics":637,"countermeasures":640},"T1547","Boot or Logon Autostart Execution",[638,639],{"id":42,"name":43},{"id":39,"name":40},[641,643,645,647,649,651,653,655,657,659,661,663,665,667,669,671,673,675,677,679,681,683],{"id":51,"name":52,"tactic":642},{"name":54},{"id":65,"name":66,"tactic":644},{"name":68},{"id":46,"name":47,"tactic":646},{"name":49},{"id":70,"name":71,"tactic":648},{"name":49},{"id":293,"name":294,"tactic":650},{"name":68},{"id":127,"name":128,"tactic":652},{"name":49},{"id":137,"name":138,"tactic":654},{"name":140},{"id":287,"name":288,"tactic":656},{"name":140},{"id":95,"name":96,"tactic":658},{"name":98},{"id":283,"name":284,"tactic":660},{"name":140},{"id":133,"name":134,"tactic":662},{"name":98},{"id":311,"name":312,"tactic":664},{"name":98},{"id":450,"name":451,"tactic":666},{"name":49},{"id":456,"name":457,"tactic":668},{"name":49},{"id":87,"name":88,"tactic":670},{"name":54},{"id":91,"name":92,"tactic":672},{"name":54},{"id":56,"name":57,"tactic":674},{"name":54},{"id":79,"name":80,"tactic":676},{"name":54},{"id":74,"name":75,"tactic":678},{"name":77},{"id":480,"name":481,"tactic":680},{"name":54},{"id":484,"name":485,"tactic":682},{"name":54},{"id":60,"name":61,"tactic":684},{"name":63},{"id":686,"name":687,"techniques":688},"CAPEC-578","Disable Security Software",[689,748,781,800,811,822,833],{"id":690,"name":691,"tactics":692,"countermeasures":699},"T1556.006","Multi-Factor Authentication",[693,694,695,696],{"id":28,"name":29},{"id":170,"name":171},{"id":42,"name":43},{"id":697,"name":698},"TA0031","Credential Access",[700,704,708,712,716,720,724,728,732,736,740,744],{"id":701,"name":702,"tactic":703},"D3-ABPI","Application-based Process Isolation",{"name":54},{"id":705,"name":706,"tactic":707},"D3-PS","Process Suspension",{"name":77},{"id":709,"name":710,"tactic":711},"D3-HBPI","Hardware-based Process Isolation",{"name":54},{"id":713,"name":714,"tactic":715},"D3-WSAM","Web Session Access Mediation",{"name":54},{"id":717,"name":718,"tactic":719},"D3-PSA","Process Spawn Analysis",{"name":49},{"id":721,"name":722,"tactic":723},"D3-PT","Process Termination",{"name":77},{"id":725,"name":726,"tactic":727},"D3-HR","Host Reboot",{"name":77},{"id":729,"name":730,"tactic":731},"D3-PLA","Process Lineage Analysis",{"name":49},{"id":733,"name":734,"tactic":735},"D3-PSMD","Process Self-Modification Detection",{"name":49},{"id":737,"name":738,"tactic":739},"D3-KBPI","Kernel-based Process Isolation",{"name":54},{"id":741,"name":742,"tactic":743},"D3-HS","Host Shutdown",{"name":77},{"id":745,"name":746,"tactic":747},"D3-SCF","System Call Filtering",{"name":54},{"id":749,"name":750,"tactics":751,"countermeasures":754},"T1562.001","Disable or Modify Tools",[752,753],{"id":28,"name":29},{"id":31,"name":32},[755,757,759,761,765,767,769,771,773,775,777,779],{"id":701,"name":702,"tactic":756},{"name":54},{"id":733,"name":734,"tactic":758},{"name":49},{"id":717,"name":718,"tactic":760},{"name":49},{"id":762,"name":763,"tactic":764},"D3-SDM","System Daemon Monitoring",{"name":49},{"id":737,"name":738,"tactic":766},{"name":54},{"id":745,"name":746,"tactic":768},{"name":54},{"id":709,"name":710,"tactic":770},{"name":54},{"id":725,"name":726,"tactic":772},{"name":77},{"id":741,"name":742,"tactic":774},{"name":77},{"id":721,"name":722,"tactic":776},{"name":77},{"id":705,"name":706,"tactic":778},{"name":77},{"id":729,"name":730,"tactic":780},{"name":49},{"id":782,"name":783,"tactics":784,"countermeasures":787},"T1562.002","Disable Windows Event Logging",[785,786],{"id":28,"name":29},{"id":31,"name":32},[788,792,794,798],{"id":789,"name":790,"tactic":791},"D3-ACH","Application Configuration Hardening",{"name":68},{"id":137,"name":138,"tactic":793},{"name":140},{"id":795,"name":796,"tactic":797},"D3-DRA","Disable Remote Access",{"name":68},{"id":133,"name":134,"tactic":799},{"name":98},{"id":801,"name":802,"tactics":803,"countermeasures":806},"T1562.004","Disable or Modify System Firewall",[804,805],{"id":28,"name":29},{"id":31,"name":32},[807,809],{"id":137,"name":138,"tactic":808},{"name":140},{"id":133,"name":134,"tactic":810},{"name":98},{"id":812,"name":813,"tactics":814,"countermeasures":817},"T1562.007","Disable or Modify Cloud Firewall",[815,816],{"id":28,"name":29},{"id":31,"name":32},[818,820],{"id":137,"name":138,"tactic":819},{"name":140},{"id":133,"name":134,"tactic":821},{"name":98},{"id":823,"name":824,"tactics":825,"countermeasures":828},"T1562.008","Disable or Modify Cloud Logs",[826,827],{"id":28,"name":29},{"id":31,"name":32},[829,831],{"id":137,"name":138,"tactic":830},{"name":140},{"id":133,"name":134,"tactic":832},{"name":98},{"id":834,"name":835,"tactics":836,"countermeasures":839},"T1562.009","Safe Mode Boot",[837,838],{"id":28,"name":29},{"id":31,"name":32},[840,842,844,846],{"id":56,"name":57,"tactic":841},{"name":54},{"id":133,"name":134,"tactic":843},{"name":98},{"id":127,"name":128,"tactic":845},{"name":49},{"id":137,"name":138,"tactic":847},{"name":140},[849,864,875,883,891],{"_key":850,"name":851,"source":852,"url":853,"maturity":854,"reliability_score":855,"verified":856,"type":857,"platforms":858,"requires_auth":9,"exploitdb":860,"metasploit":9},"37262","ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)","exploit-database","https://www.exploit-db.com/exploits/37262","weaponized",0.8,true,"remote",[859],"linux",{"verified":856,"type":857,"platform":859,"file":861,"codes":862},"exploits/linux/remote/37262.rb",[7,863],"OSVDB-120834",{"_key":865,"name":866,"source":852,"url":867,"maturity":868,"reliability_score":869,"verified":870,"type":857,"platforms":871,"requires_auth":9,"exploitdb":872,"metasploit":9},"36803","ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution","https://www.exploit-db.com/exploits/36803","poc",0.5,false,[859],{"verified":870,"type":857,"platform":859,"file":873,"codes":874},"exploits/linux/remote/36803.py",[7,863],{"_key":876,"name":877,"source":852,"url":878,"maturity":854,"reliability_score":855,"verified":856,"type":857,"platforms":879,"requires_auth":9,"exploitdb":880,"metasploit":9},"49908","ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)","https://www.exploit-db.com/exploits/49908",[859],{"verified":856,"type":857,"platform":859,"file":881,"codes":882},"exploits/linux/remote/49908.py",[7],{"_key":884,"name":885,"source":852,"url":886,"maturity":854,"reliability_score":855,"verified":856,"type":857,"platforms":887,"requires_auth":9,"exploitdb":888,"metasploit":9},"36742","ProFTPd 1.3.5 - File Copy","https://www.exploit-db.com/exploits/36742",[859],{"verified":856,"type":857,"platform":859,"file":889,"codes":890},"exploits/linux/remote/36742.txt",[7,863],{"_key":892,"name":893,"source":894,"url":895,"maturity":854,"reliability_score":896,"verified":856,"type":857,"platforms":897,"requires_auth":870,"exploitdb":9,"metasploit":898},"MSF_EXPLOIT_UNIX_FTP_PROFTPD_MODCOPY_EXEC","ProFTPD 1.3.5 Mod_Copy Command Execution","metasploit","https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/unix/ftp/proftpd_modcopy_exec.rb",1,[],{"fullname":899,"rank":900,"rank_name":901,"post_auth":870,"check":856,"notes":902},"exploit/unix/ftp/proftpd_modcopy_exec",600,"excellent",{"Stability":903,"SideEffects":905,"Reliability":908},[904],"crash-safe",[906,907],"artifacts-on-disk","ioc-in-logs",[909],"repeatable-session",[911],"DEBIAN-CVE-2015-3306",[],[914,916,918,920],{"_key":915},"OPENSUSE-SU-2024:10048-1",{"_key":917},"DSA-3263-1",{"_key":919},"UBUNTU-CVE-2015-3306",{"_key":911},[],[923],{"_key":915},"2015-05-18T15:00:00.000Z","2026-10-08T19:58:24.892Z","Modified",{"cisa_kev":856,"cisa_ransomware":870,"cisa_vendor":928,"epss_severity":929,"epss_score":930,"severity":929,"severity_score":931,"severity_version":932,"severity_source":933,"severity_vector":934,"severity_status":926},"ProFTPD","critical",0.96752,10,"v3.1","nvd","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",[936,942,948,952,958,962,966,971,976,980,986,990,994,998,1002,1008],{"url":937,"sources":938,"tags":940},"http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec",[939,933],"cve.org",[941],"X Refsource MISC",{"url":943,"sources":944,"tags":945},"https://www.exploit-db.com/exploits/36803/",[939,933],[946,947],"Exploit","X Refsource EXPLOIT DB",{"url":949,"sources":950,"tags":951},"http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html",[939,933],[941],{"url":953,"sources":954,"tags":955},"http://www.debian.org/security/2015/dsa-3263",[939,933],[956,957],"Vendor Advisory","X Refsource DEBIAN",{"url":959,"sources":960,"tags":961},"http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html",[939,933],[941],{"url":963,"sources":964,"tags":965},"http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html",[939,933],[941],{"url":967,"sources":968,"tags":969},"http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html",[939,933],[956,970],"X Refsource SUSE",{"url":972,"sources":973,"tags":974},"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html",[939,933],[956,975],"X Refsource FEDORA",{"url":977,"sources":978,"tags":979},"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html",[939,933],[956,975],{"url":981,"sources":982,"tags":983},"http://www.securityfocus.com/bid/74238",[939,933],[984,985],"VDB Entry","X Refsource BID",{"url":987,"sources":988,"tags":989},"https://www.exploit-db.com/exploits/36742/",[939,933],[946,947],{"url":991,"sources":992,"tags":993},"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html",[939,933],[956,975],{"url":995,"sources":996,"tags":997},"http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html",[939,933],[941],{"url":999,"sources":1000,"tags":1001},"http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html",[939,933],[941],{"url":1003,"sources":1004,"tags":1006},"https://security-tracker.debian.org/tracker/CVE-2015-3306",[1005],"osv_debian",[1007],"Advisory",{"url":1009,"sources":1010,"tags":1011},"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3306",[939,933],[1012],"Government Resource",[1014],{"source":1015,"vendor":928,"product":928,"date_added":1016,"vulnerability_name":1017,"short_description":1018,"required_action":1019,"due_date":1020,"known_ransomware_campaign_use":1021,"notes":1022,"exploitation_type":9},"cisa","2026-10-08","ProFTPD Improper Access Control Vulnerability","ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","2026-10-11","Unknown","This vulnerability could affect an open-source component, third-party library, protocol, or proprietary implementation that could be used by different products. For more information, please see: http://www.proftpd.org/ ; https://lists.debian.org/debian-security-announce/2015/msg00154.html ; https://lists.opensuse.org/archives/list/updates@lists.opensuse.org/message/WE6YZRG5UVXMGQ7IVDRYBPIWV4M6UUGM/ ; BOD 26-04: https://www.cisa.gov/news-events/directives/bod-26-04-prioritizing-security-updates-based-risk ; Forensics Triage Requirements: https://www.cisa.gov/news-events/directives/bod-26-04-implementation-guidance-prioritizing-security-updates-based-risk ; https://nvd.nist.gov/vuln/detail/CVE-2015-3306",{"date":1016,"score":930,"percentile":1024},0.99887,[1026,1030,1033,1035,1037,1039,1041,1043,1045,1047,1049,1051,1053,1055,1057,1060,1062,1064,1066,1068,1070,1073,1076,1078,1080,1082,1084,1086,1090,1092,1094,1096,1098,1100,1102,1104,1106,1108,1110,1112,1114,1116,1118,1120,1122,1124,1126,1128,1130,1132,1134,1136,1138,1140,1144,1146,1148,1150,1152,1156,1158,1160,1162,1164,1166,1168,1170,1172,1174,1176,1178,1180,1182,1184,1186,1188,1190,1192,1194,1196,1198,1200,1202,1204,1206,1209,1211,1213,1215,1217],{"date":1027,"score":1028,"percentile":1029},"2025-11-04",0.9393,0.9987,{"date":1031,"score":1028,"percentile":1032},"2025-11-05",0.99871,{"date":1034,"score":1028,"percentile":1032},"2025-11-06",{"date":1036,"score":1028,"percentile":1029},"2025-11-07",{"date":1038,"score":1028,"percentile":1032},"2025-11-08",{"date":1040,"score":1028,"percentile":1029},"2025-11-09",{"date":1042,"score":1028,"percentile":1032},"2025-11-10",{"date":1044,"score":1028,"percentile":1029},"2025-11-11",{"date":1046,"score":1028,"percentile":1032},"2025-11-12",{"date":1048,"score":1028,"percentile":1032},"2025-11-13",{"date":1050,"score":1028,"percentile":1032},"2025-11-14",{"date":1052,"score":1028,"percentile":1032},"2025-11-15",{"date":1054,"score":1028,"percentile":1032},"2025-11-16",{"date":1056,"score":1028,"percentile":1032},"2025-11-17",{"date":1058,"score":1028,"percentile":1059},"2025-11-18",0.9992,{"date":1061,"score":1028,"percentile":1059},"2025-11-19",{"date":1063,"score":1028,"percentile":1059},"2025-11-20",{"date":1065,"score":1028,"percentile":1029},"2025-11-21",{"date":1067,"score":1028,"percentile":1029},"2025-11-22",{"date":1069,"score":1028,"percentile":1029},"2025-11-23",{"date":1071,"score":1028,"percentile":1072},"2025-11-24",0.99868,{"date":1074,"score":1028,"percentile":1075},"2025-11-25",0.99869,{"date":1077,"score":1028,"percentile":1072},"2025-11-26",{"date":1079,"score":1028,"percentile":1072},"2025-11-27",{"date":1081,"score":1028,"percentile":1072},"2025-11-28",{"date":1083,"score":1028,"percentile":1072},"2025-11-29",{"date":1085,"score":1028,"percentile":1072},"2025-11-30",{"date":1087,"score":1088,"percentile":1089},"2025-12-01",0.93977,0.9988,{"date":1091,"score":1088,"percentile":1089},"2025-12-02",{"date":1093,"score":1088,"percentile":1089},"2025-12-03",{"date":1095,"score":1028,"percentile":1072},"2025-12-04",{"date":1097,"score":1028,"percentile":1072},"2025-12-05",{"date":1099,"score":1028,"percentile":1072},"2025-12-06",{"date":1101,"score":1028,"percentile":1072},"2025-12-07",{"date":1103,"score":1028,"percentile":1072},"2025-12-08",{"date":1105,"score":1028,"percentile":1075},"2025-12-09",{"date":1107,"score":1028,"percentile":1072},"2025-12-10",{"date":1109,"score":1028,"percentile":1072},"2025-12-11",{"date":1111,"score":1028,"percentile":1072},"2025-12-12",{"date":1113,"score":1028,"percentile":1072},"2025-12-13",{"date":1115,"score":1028,"percentile":1072},"2025-12-14",{"date":1117,"score":1028,"percentile":1075},"2025-12-15",{"date":1119,"score":1028,"percentile":1075},"2025-12-16",{"date":1121,"score":1028,"percentile":1075},"2025-12-17",{"date":1123,"score":1028,"percentile":1029},"2025-12-18",{"date":1125,"score":1028,"percentile":1029},"2025-12-19",{"date":1127,"score":1028,"percentile":1029},"2025-12-20",{"date":1129,"score":1028,"percentile":1029},"2025-12-21",{"date":1131,"score":1028,"percentile":1029},"2025-12-22",{"date":1133,"score":1028,"percentile":1029},"2025-12-23",{"date":1135,"score":1028,"percentile":1075},"2025-12-24",{"date":1137,"score":1028,"percentile":1029},"2025-12-25",{"date":1139,"score":1028,"percentile":1075},"2025-12-26",{"date":1141,"score":1142,"percentile":1143},"2025-12-27",0.9391,0.99866,{"date":1145,"score":1028,"percentile":1075},"2025-12-28",{"date":1147,"score":1028,"percentile":1075},"2025-12-29",{"date":1149,"score":1028,"percentile":1075},"2025-12-30",{"date":1151,"score":1028,"percentile":1075},"2025-12-31",{"date":1153,"score":1154,"percentile":1155},"2026-01-01",0.94036,0.9989,{"date":1157,"score":1154,"percentile":1155},"2026-01-02",{"date":1159,"score":1154,"percentile":1155},"2026-01-03",{"date":1161,"score":1028,"percentile":1072},"2026-01-04",{"date":1163,"score":1028,"percentile":1075},"2026-01-05",{"date":1165,"score":1028,"percentile":1075},"2026-01-06",{"date":1167,"score":1028,"percentile":1072},"2026-01-07",{"date":1169,"score":1028,"percentile":1075},"2026-01-08",{"date":1171,"score":1028,"percentile":1075},"2026-01-09",{"date":1173,"score":1028,"percentile":1029},"2026-01-10",{"date":1175,"score":1028,"percentile":1029},"2026-01-11",{"date":1177,"score":1028,"percentile":1029},"2026-01-12",{"date":1179,"score":1028,"percentile":1029},"2026-01-13",{"date":1181,"score":1028,"percentile":1029},"2026-01-14",{"date":1183,"score":1028,"percentile":1029},"2026-01-15",{"date":1185,"score":1028,"percentile":1032},"2026-01-16",{"date":1187,"score":1028,"percentile":1032},"2026-01-17",{"date":1189,"score":1028,"percentile":1032},"2026-01-18",{"date":1191,"score":1028,"percentile":1032},"2026-01-19",{"date":1193,"score":1028,"percentile":1032},"2026-01-20",{"date":1195,"score":1028,"percentile":1032},"2026-01-21",{"date":1197,"score":1028,"percentile":1032},"2026-01-22",{"date":1199,"score":1028,"percentile":1032},"2026-01-23",{"date":1201,"score":1028,"percentile":1032},"2026-01-24",{"date":1203,"score":1028,"percentile":1032},"2026-01-25",{"date":1205,"score":1028,"percentile":1032},"2026-01-26",{"date":1207,"score":1028,"percentile":1208},"2026-01-27",0.99872,{"date":1210,"score":1028,"percentile":1208},"2026-01-28",{"date":1212,"score":1028,"percentile":1032},"2026-01-29",{"date":1214,"score":1028,"percentile":1032},"2026-01-30",{"date":1216,"score":1028,"percentile":1208},"2026-01-31",{"date":1218,"score":1154,"percentile":1219},"2026-02-01",0.99896,[1221,1226,1228],{"source":933,"cvss_v2_0":1222,"cvss_v3_0":9,"cvss_v3_1":1224,"cvss_v4_0":9},{"baseScore":931,"baseSeverity":9,"vectorString":1223,"impactScore":931,"exploitabilityScore":931},"AV:N/AC:L/Au:N/C:C/I:C/A:C",{"baseScore":931,"baseSeverity":1225,"vectorString":934,"impactScore":931,"exploitabilityScore":931},"CRITICAL",{"source":939,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1227,"cvss_v4_0":9},{"baseScore":931,"baseSeverity":1225,"vectorString":934,"impactScore":931,"exploitabilityScore":931},{"source":1005,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":1229,"cvss_v4_0":9},{"baseScore":931,"baseSeverity":9,"vectorString":934,"impactScore":931,"exploitabilityScore":931},[1231,1245],{"ecosystem":1232,"name":1233,"vendor":1234,"product":1233,"cpe_part":9,"purl_type":1235,"purl_namespace":1234,"purl_name":1233,"source":9,"versions":1236},"Debian","proftpd-dfsg","debian","deb",[1237,1242,1243,1244],{"version":1238,"is_range":856,"range_type":1239,"version_start":9,"version_start_type":9,"version_end":1240,"version_end_type":1241,"fixed_in":9},"lt1_3_5_2","ecosystem","1.3.5-2","excluding",{"version":1238,"is_range":856,"range_type":1239,"version_start":9,"version_start_type":9,"version_end":1240,"version_end_type":1241,"fixed_in":9},{"version":1238,"is_range":856,"range_type":1239,"version_start":9,"version_start_type":9,"version_end":1240,"version_end_type":1241,"fixed_in":9},{"version":1238,"is_range":856,"range_type":1239,"version_start":9,"version_start_type":9,"version_end":1240,"version_end_type":1241,"fixed_in":9},{"ecosystem":9,"name":928,"vendor":1246,"product":1246,"cpe_part":1247,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":1248},"proftpd","a",[1249],{"version":1250,"is_range":870,"range_type":1251,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"1.3.5","cpe"]