325 matches found
CVE-2025-31161
CVE-2025-31161 Authentifizierungs-Bypass-Schwachstelle in Versionen des CrushFTP-Servers...
CrushFTP10-Docker-CVE-2024-4040
CrushFTP 10.0 Docker Deployment vulnerabile a CVE-2024-4040 Questo repository fornisce un Dockerfile per creare un'immagine Docker e distribuire un container Linux con un server CrushFTP vulnerabile alla vulnerabilità di fuga dalla sandbox VFS di CrushFTP CVE-2024-4040. ⚠️ Disclaimer Questo...
CrushFTP-CVE-2024-4040-illdeed
CVE-2024-4040 — Exploit per il bypass dell'autenticazione di CrushFTP Questo repository contiene un proof-of-concept PoC stealthy in Python per CVE-2024-4040 , una vulnerabilità critica in CrushFTP v10 e versioni precedenti che consente a un attaccante di bypassare l'autenticazione utilizzando un...
CVE-2025-2825-CrushFTP-AuthBypass
🚨 CVE-2025-2825 – CrushFTP Authentifizierungsumgehung 🔎 Überblick CVE-2025-2825 ist eine kritische Schwachstelle zur Authentifizierungsumgehung, die CrushFTP betrifft, einen weit verbreiteten sicheren Dateiübertragungsserver. Der Fehler ermöglicht es entfernten Angreifern, die...
CrushFTP < 10.5.1 - Unauthenticated Remote Code Execution
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes. id: CVE-2023-43177 info: name: CrushFTP 10.5.1 - Unauthenticated Remote Code Execution author: iamnoooob,rootxharsh,pdresearch severity: critical description: | CrushFTP prior...
CrushFTP - Authentication Bypass
CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability that may result in unauthenticated access. Remote and unauthenticated HTTP requests to CrushFTP may allow attackers to gain unauthorized access. id: CVE-2025-31161 info: name: CrushFTP - Authenticati...
CrushFTP-SSTI-LFI-Proof-of-Concept
CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept Nur für Bildungs- und autorisierte Laborzwecke. CS443 Software- und Systemsicherheit — kontrollierte lokale Docker-Umgebung. Schwachstellenübersicht...
CrushFTP VFS - Sandbox Escape LFR
VFS Sandbox Escape in CrushFTP in all versions before 10.7.1 and 11.1.0 on all platforms allows remote attackers with low privileges to read files from the filesystem outside of VFS Sandbox. id: CVE-2024-4040 info: name: CrushFTP VFS - Sandbox Escape LFR author: DhiyaneshDK,pussycat0x severity:...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
Ansible Role: CrushFTP CVE-2025-31161 Ludushttps://ludus.c...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CrushFTP 10.8.0 — CVE-2025-31161 Vulnerable Build Pre-built C...
Exploit for Code Injection in Crushftp
CVE-2024-4040 — CrushFTP SSTI / LFI Proof of Concept For...
PT-2026-36613
Name of the Vulnerable Software and Affected Versions CrushFTP Enterprise Managed File Transfer versions prior to 11.1.0 Description An unauthenticated remote code execution flaw exists due to a Server-Side Template Injection SSTI in the web-based management interface. SSTI is a vulnerability whe...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-3116...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
No d...
Exploit for Unprotected Alternate Channel in Crushftp
C...
Exploit for Authentication Bypass by Primary Weakness in Crushftp
CVE-2025-31161 is a critical severity vulnerability allowing att...
CVE-2023-43177
CrushFTP prior to 10.5.1 is vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes...
CVE-2018-18288
CrushFTP through 8.3.0 is vulnerable to credentials theft via URL redirection...