Heise.De Monsta FTP Remote Code Execution Vulnerability CVE-2025-34299 Discovered
Article Content
Browse articles 
A critical remote code execution vulnerability (CVE-2025-34299) has been identified in Monsta FTP, a web-based file transfer client, allowing unauthenticated attackers to execute arbitrary code on affected systems. The flaw arises from improper handling of user input during file downloads, endangering thousands of servers. Researchers have confirmed that this vulnerability is being actively exploited in the wild.
Ask AI about this cluster
Answers cite the sources they use
Updated 218d ago How this analysis works
More articles in this cluster (1)
Following this threat?
Track Cl0p, Logitech and CVE-2022-31827 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
ShinyHunters Claims Major Data Breach of FBI Systems The hacking group ShinyHunters has claimed responsibility for breaching FBI systems, asserting that they stole sensitive data on nearly all FBI employees and job applicants. The attack reportedly exploited a zero-day vulnerability in Oracle's PeopleSoft, allowing remote code execution. ShinyHunters claims to have… 
Dutch Hacker Arrested in ShinyHunters Investigation Following FBI Breach Dutch authorities arrested Pepijn van der Stap, a 24-year-old previously convicted hacker, on September 15, 2026, as part of an investigation into the ShinyHunters hacking group. This group claimed responsibility for a significant breach of the FBI's job application site, reportedly stealing sensitive data from over…