![Wanted: Suspect for Multiple Robberies in the 3rd District [VIDEO]](https://thephillypi.com/wp-content/uploads/2026/07/Wanted-Suspect-for-Multiple-Robberies-in-the-3rd-District-VIDEO-330x220.jpg "Wanted: Suspect for Multiple Robberies in the 3rd District [VIDEO]")
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Wing FTP Server to its Known Exploited Vulnerabilities catalog.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Wing FTP Server flaw, tracked as CVE-2025-47813 (CVSS score of 4.3), to its Known Exploited Vulnerabilities (KEV) catalog.
CVE-2025-47813 is an information disclosure vulnerability affecting Wing FTP Server versions prior to 7.4.4. The issue occurs in the loginok.html page during the web authentication process.
“loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UID cookie.” reads the advisory.
The flaw occurs when an attacker sends an excessively long UID cookie, triggering improper input handling that causes the server to return an error revealing the full local installation path. While it does not enable remote code execution, the leak exposes filesystem details that could aid reconnaissance and facilitate further attacks such as path-based exploitation or file inclusion attempts.
EXPLORE MORE
ClawJacked flaw exposed OpenClaw users to data theft
“ClawJacked” flaw let malicious sites hijack OpenClaw AI agents to steal data;…
250+ Democrats urge federal court to uphold Biden abortion pill rules
WASHINGTON, D.C. – 259 Democrat members of Congress have signed an amicus…
New study discredits LGBT activist claims that ‘anti-transgender’ laws cause suicide
The pro-LGBT Trevor Project continues to promote “research” purporting to link so-called…
ManoMano data breach impacted 38 Million customer accounts
European DIY platform ManoMano suffered a data breach via a third-party provider,…
‘This is a canonical mess’: Fr. Murray explains why SSPX priests, laity are not excommunicated
Renowned canon lawyer Fr. Gerald Murray explained Friday why a recent document…
Endangered Missing Juvenile Eli Guzman from the 24th District
The Philadelphia Police Department is seeking the public’s assistance in locating endangered…
According to Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, FCEB agencies have to address the identified vulnerabilities by the due date to protect their networks against attacks exploiting the flaws in the catalog.
Experts also recommend that private organizations review the Catalog and address the vulnerabilities in their infrastructure.
CISA orders federal agencies to fix the vulnerability by March 30, 2026.
