New Security Flaws Found in VMware Tools and CrushFTP — High Risk, PoC Released

🗓️ 26 Mar 2025 04:20:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 28 Views

High severity flaws in VMware Tools and CrushFTP require patches; no workarounds available for risks.

Reporter	Title	Published	Views	Family All 46
GithubExploit	Exploit for CVE-2025-2825	22 Jul 202510:40	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	6 Jun 202509:14	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	8 Apr 202515:37	–	githubexploit
GithubExploit	Exploit for Improper Restriction of XML External Entity Reference in Ivanti Endpoint_Manager	9 May 202403:10	–	githubexploit
GithubExploit	Exploit for CVE-2025-2825	11 Apr 202510:54	–	githubexploit
GithubExploit	Exploit for CVE-2025-2825	3 Apr 202501:13	–	githubexploit
GithubExploit	Exploit for Authentication Bypass by Primary Weakness in Crushftp	24 Apr 202522:09	–	githubexploit
ATTACKERKB	CVE-2025-2825	26 Mar 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of the VMware Tools utility set for Windows operating systems relates to bypassing the authentication process by using an alternative path or channel, allowing an intruder to gain increased privileges.	26 Mar 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the web interface of the cross-platform FTP server CrushFTP allows a hacker to gain unauthorized access to the software.	28 Mar 202500:00	–	bdu_fstec

08 Apr 2025 08:12Current

8.4High risk

Vulners AI Score8.4

CVSS 3.19.8

EPSS0.00334

SSVC

vmware tools crushftp authentication bypass unauthenticated access security patch vulnerability.