CrushFTP

Reported Context (2)

On 4 April 2025, the CrushFTP CVE-2025-31161 Auth Bypass and Post-Exploitation blog was published, and on 14 April 2025, the CVE-2025-30406 - Critical Gladinet CentreStack & Triofox Vulnerability Exploited in the Wild Huntress Finds Attackers Reused Tactics in CrushFTP and CentreStack Intrusions
On April 19, 2024, CrushFTP, a managed file transfer vendor disclosed a 0day vulnerability in several versions of its software through a private mailing list. CrushFTP CVE-2024-4040 Exploited in the Wild, Enables Unauthenticated Remote Code Execution

CVE (3)

Malware (2)

People (1)

MITRE ATT&CK (3)

Vendors (1)

Products (5)

Tools (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.