CyberSecBulletin

Filezilla-project vulnerabilities

We track 2 vulnerabilities in Filezilla-project products across 2 products. 2 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on December 19, 2025.

2vulnerabilities
1critical
1high
1exploited
8.7average CVSS score

Latest Filezilla-project vulnerabilities

  • 9.8 Critical severity

    FileZilla Client: Uncontrolled Search Path Element

    CVE-2023-53959Filezilla-project

    FileZilla Client 3.63.1 contains a DLL hijacking vulnerability that allows attackers to execute malicious code by placing a crafted TextShaping.dll in the application directory. Attackers can generate a reverse shell payload using msfvenom and replace the miss

  • 7.5 High severity

    OpenSSL Information Disclosure Exploited

    CVE-2014-0160OpenSSLEPSS 100%

    The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, a