7 matches found
CVE-2025-31161
🚨 CVE-2025-31161 - CrushFTP における重大な認証バイパス CVE-2025-31161 は、人気のManaged File Transfer MFT ソリューションである CrushFTP における重大な認証バイパスの脆弱性です。 認証されていないリモート攻撃者は、AWS4-HMAC-SHA256 認証ヘッダー処理の欠陥を悪用して、既知のユーザー（デフォルトの crushadmin 管理者アカウントを含む）をなりすますことができます。 この脆弱性は 実際に積極的に悪用されており 、CISAの既知の悪用された脆弱性カタログ KEV に追加されました。 📊 脆弱性の...
CVE-2025-31161
CVE-2025-31161 警告： 此工具仅用于经授权的安全测试和教育目的。未经明确许可对系统进行未授权测试属于违法行为。 概述 此工具是 CVE-2025-31161 的概念验证（PoC），该漏洞是 CrushFTP（版本 -p 示例： python3 exploit.py check -u 192.168.1.50 -p 8080 2. 利用模式 劫持指定管理用户的会话，并利用该会话向 MainUsers 组注入一个新的管理员账户。 root@kitploit: python3 exploit.py exploit -u -p -a -nu -np 示例： python3...
CrushFTP AWS4-HMAC Authentication Bypass
This module leverages an authentication bypass in CrushFTP 11 use auxiliary/gather/crushftpauthbypasscve20252825 msf auxiliarycrushftpauthbypasscve20252825 show actions ...actions... msf auxiliarycrushftpauthbypasscve20252825 set ACTION msf auxiliarycrushftpauthbypasscve20252825 show options...
CVE-2025-31161
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account unless a DMZ proxy instance is used, as exploited in the wild in March and April 2025, aka “Unauthenticated HTTPS port access.” A race condition exists in the AWS4-HMAC compatible wi...
CVE-2025-31161
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account unless a DMZ proxy instance is used, as exploited in the wild in March and April 2025, aka "Unauthenticated HTTPS port access." A race condition exists in the AWS4-HMAC compatible wi...
CVE-2025-31161
CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover of the crushadmin account unless a DMZ proxy instance is used, as exploited in the wild in March and April 2025, aka "Unauthenticated HTTPS port access." A race condition exists in the AWS4-HMAC compatible wi...
PT-2025-14099
Name of the Vulnerable Software and Affected Versions CrushFTP versions 10.0.0 through 10.8.3 CrushFTP versions 11.0.0 through 11.3.0 Description An authentication bypass exists in the HTTP component of the FTP server, specifically within the AWS4-HMAC S3 compatible authorization method. The issu...