A vulnerability has been found within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

This advisory discloses a vulnerability within the FTP client in AceFTP. When exploited, this vulnerability allows an anonymous attacker to write files to arbitrary locations on a Windows user's system.

The FTP client does not properly sanitise filenames containing directory traversal sequences (forward-slash) that are received from an FTP server in response to the LIST command.

Response to LIST (forward-slash):

-rw-r--r--    1 ftp      ftp            20 Mar 01 05:37 /../../../../../../../../../testfile.txt\r\n

By tricking a user to download a directory from a malicious FTP server that contains files with fowward-slash directory traversal sequences in their filenames, it is possible for the attacker to write files to arbitrary locations on a user's system with privileges of that user. An attacker can potentially leverage this issue to write files into a user's Windows Startup folder and execute arbitrary code when the user logs on.

Download - Farzi.s01e01.artist.480p.amzn.web-d... [upd] Jun 2026

Sunny’s grandfather, Madhav (Amol Palekar), runs a high-integrity but failing revolutionary newspaper called Kranti Patrika . Faced with mounting debt and the threat of losing the printing press, Sunny decides to use his artistic genius for a more "profitable" craft: counterfeiting currency.

The global rise of Indian streaming content has reached unprecedented heights, and few shows have captured the public imagination quite like Prime Video's hit series Farzi . Created by the acclaimed duo Raj & DK, this fast-paced crime thriller combines sharp social commentary with high-stakes tension. For many viewers looking to dive into the series, the specific file designation represents their entry point into this gripping cinematic universe. Download - Farzi.S01E01.Artist.480p.AMZN.WEB-D...

The file on his desktop wasn't a TV episode. It was a surveillance photo disguised as a TV episode, delivered directly to his hard drive. Created by the acclaimed duo Raj & DK,

Shahid Kapoor brings a refreshing, cynical energy to Sunny, making him an anti-hero you can't help but root for. It was a surveillance photo disguised as a

They decide to use Sunny’s art skills for something unlawful: printing fake currency notes.

: The "480p" in the filename indicates the video resolution, suggesting a standard definition quality. This is a common resolution for web downloads, offering a balance between quality and file size.

2008-06-15 - Vulnerability Discovered.
2008-06-16 - Vulnerability Details Sent to Vendor via online support form (no reply).
2008-06-18 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-25 - Vulnerability Details Sent to Vendor again via online support form (no reply).
2008-06-27 - Public Release.