Skip to content

CVE-2025-34299

CVE

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
November 7, 2025
Last Seen
November 11, 2025
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

A critical remote code execution vulnerability (CVE-2025-34299) has been identified in Monsta FTP, a web-based file transfer client, allowing unauthenticated attackers to execute arbitrary code on affected systems. The flaw arises from improper handling of user input during file downloads, endangeri...

A remote code execution vulnerability, CVE-2025-34299, has been identified in Monsta FTP, affecting versions 2.11 and earlier. This flaw allows unauthenticated users to upload arbitrary files, enabling attackers to execute malicious code. An update is available to address this critical risk, rated C...

A remote code execution vulnerability, identified as CVE-2025-34299, has been discovered in Monsta FTP. This zero-day exploit affects users of the software, allowing attackers to execute arbitrary code remotely. The situation has prompted discussions about the implications of this emerging threat.

A remote code execution vulnerability (CVE-2025-34299) has been identified in Monsta FTP. This zero-day exploit affects users of the software, allowing unauthorized access and control. Details about the vulnerability and its implications are being discussed in cybersecurity circles.

Public Exploits

Checking GitHub for proof-of-concept code…