168 matches found
CrushFTP-cve-2024-4040-poc
CrushFTP-cve-2024-4040-poc...
CrushFTP-CVE-2024-4040-Proof-of-Concept
CVE-2024-4040 Vulnerability — CrushFTP SSTI / LFI Proof of Concept For educational and authorised lab use only. For CS443 Software and Systems Security module. Lab was done in a controlled local Docker environment. Vulnerability Summary Field| Detail ---|--- CVE| CVE-2024-4040 Affected Software|...
CrushFTP-SSTI-LFI-Proof-of-Concept
CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept For educational and authorised lab use only. CS443 Software and Systems Security — controlled local Docker environment. Vulnerability Summary Field| Detail ---|--- CVE| CVE-2024-4040 Affected Software| CrushFTP … that the server evaluates and...
CVE-2024-4040
This repository does not have a README...
RCE-Exploit-Bolt-3.7.0-CVE-2020-4040-4041
This repository does not have a README...
GenCrushSSTIExploit
EN GenCrushSSTIExploit is a PoC exploit tool targeting the SSTI Server-Side Template Injection vulnerability in CrushFTP CVE-2024-4040. This tool demonstrates how to exploit this vulnerability for educational and ethical hacking purposes only. Features Establishes a session with the CrushFTP serv...
CrushFTP10-Docker-CVE-2024-4040
CrushFTP 10.0 Docker Deployment vulnerable to CVE-2024-4040 This repository provides a Dockerfile to build a Docker image and deploy a Linux container with a CrushFTP server that is vulnerable to the CrushFTP VFS Sandbox Escape Vulnerability CVE-2024-4040. ⚠️ Disclaimer This repository is provided...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 — CrushFTP Authentication Bypass Exploit This repository contains a stealthy Python proof-of-concept PoC exploit for CVE-2024-4040 , a critical vulnerability in CrushFTP v10 and below that allows an attacker to bypass authentication using a forged CrushAuth cookie and AWS-style...
CVE-2024-4040
This repository does not have a README...
CVE-2024-4040
CVE-2024-4040 exploit for CVE-2024-4040...
Apache Spark Application UI - Exposed Detection
Detects exposed PySparkShell Application UI by Apache Spark on port 4040. The UI should not be exposed to the internet as it may leak sensitive job and cluster information. !/usr/bin/env python3 -- coding: utf-8 -- """Detects exposed PySparkShell Application UI by Apache Spark on port 4040.""" fr...
Exploit for Code Injection in Crushftp
CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept For...
CVE-2026-4040
creationtimestamp| type| source ---|---|--- 2026-03-12 11:15:59+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-4040 2026-03-12 16:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mgutbf6fx22k 2026-08-03 03:06:35+00:00|...
EUVD-2026-4040
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...
CVE-2009-4040
Cross-site scripting XSS vulnerability in phpMyFAQ before 2.0.17 and 2.5.x before 2.5.2, when used with Internet Explorer 6 or 7, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters to the search page...
CVE-2025-20737
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040...
EUVD-2017-11372
Malware in sbrugna...
EUVD-2017-11373
Malware in sbrugna...