CrushFTP zero-day actively exploited at least since July 18

Hackers exploit CrushFTP zero-day, tracked as CVE-2025-54309, to gain admin access via HTTPS when DMZ proxy is off. Threat actors are exploiting a zero-day vulnerability, tracked as CVE-2025-54309 (CVSS score of 9.0), in the managed file transfer software CrushFTP to gain administrative privileges on vulnerable servers via HTTPS. CrushFTP warned of a zero-day that has […]

New CrushFTP zero-day exploited in attacks to hijack servers

bleepingcomputer.com - 18/Jul 22:24

CrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain...

New CrushFTP zero-day exploited in attacks to hijack servers

bleepingcomputer.com - 18/Jul 22:24

CrushFTP is warning that threat actors are actively exploiting a zero-day vulnerability tracked as CVE-2025-54309, which allows attackers to gain...

Wing FTP Server flaw actively exploited shortly after technical details were made public

securityaffairs.co - 13/Jul 15:50

Hackers exploit critical Wing FTP flaw (CVE-2025-47812) for remote code execution with root/system rights after details leaked on June 30. Threat...

SharePoint zero-day CVE-2025-53770 actively exploited in the wild

securityaffairs.co - 21/Jul 07:27

Microsoft warns of ongoing active exploitation of a SharePoint zero-day vulnerability, tracked as CVE-2025-53770. Microsoft warns of a SharePoint...

SharePoint zero-day CVE-2025-53770 actively exploited in the wild

securityaffairs.co - 21/Jul 07:27

Microsoft warns of ongoing active exploitation of a SharePoint zero-day vulnerability, tracked as CVE-2025-53770. Microsoft warns of a SharePoint...

CVE-2025-54309 – Critical Authentication Bypass in CrushFTP

thecyberthrone.in - 02:31

Overview CVE-2025-54309 is a critical security vulnerability in the CrushFTP Managed File Transfer Server, allowing unauthenticated remote attackers...

CVE-2025-54309 – Critical Authentication Bypass in CrushFTP

thecyberthrone.in - 02:31

Overview CVE-2025-54309 is a critical security vulnerability in the CrushFTP Managed File Transfer Server, allowing unauthenticated remote attackers...

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available

bleepingcomputer.com - 20/Jul 15:40

A critical zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53770, has been actively exploited since at least July 18th, with no...

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available

bleepingcomputer.com - 20/Jul 15:40

A critical zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53770, has been actively exploited since at least July 18th, with no...

Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release

securityaffairs.co - 19/Jul 16:25

Hackers exploited a Fortinet FortiWeb flaw the same day a PoC was published, compromising dozens of systems. Hackers began exploiting a critical...

Rubriques :

CrushFTP zero-day actively exploited at least since July 18

Articles similaires

New CrushFTP zero-day exploited in attacks to hijack servers

New CrushFTP zero-day exploited in attacks to hijack servers

Wing FTP Server flaw actively exploited shortly after technical details were made public

SharePoint zero-day CVE-2025-53770 actively exploited in the wild

SharePoint zero-day CVE-2025-53770 actively exploited in the wild

CVE-2025-54309 – Critical Authentication Bypass in CrushFTP

CVE-2025-54309 – Critical Authentication Bypass in CrushFTP

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available

Microsoft SharePoint zero-day exploited in RCE attacks, no patch available

Fortinet FortiWeb flaw CVE-2025-25257 exploited hours after PoC release

Les derniers communiqués