PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-2825] CrushFTP Authentication Bypass: Indicators of Compromise

horizon3.ai | vulnerability | CVE-2025-2825 | #vulnerability-research | #auth-bypass
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CrushFTP auth bypass (CVE-2025-2825) could grant attackers admin access. Learn IoCs & test exposure with NodeZero. Patch now!
CVE
CVE-2025-2825
Published
Collected

Related coverage

vulnerability · vercel.com
Postmortem on Next.js Middleware bypass
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
vulnerability · horizon3.ai
[CVE-2026-105133] AhsayCBS Deep-Dive: Auth Bypass to RCE
Technical analysis of CVE-2026-105133 and CVE-2026-105134 in AhsayCBS, revealing how authentication bypass and path traversal enable remote code execution.
vulnerability · horizon3.ai
CVE-2026-48558: SimpleHelp Authentication Bypass Indicators of Compromise
Learn how to identify indicators of compromise associated with CVE-2026-48558, a SimpleHelp OIDC authentication bypass vulnerability discovered by Horizon3.
vulnerability · horizon3.ai
The FreePBX Rabbit Hole: CVE-2025-66039 and others
Horizon3 uncovers FreePBX flaws, including CVE-2025-66039 auth bypass, SQL injection, and file upload RCE—and shows how NodeZero detects them.
vulnerability · horizon3.ai
CVE-2024-1403: Progress OpenEdge Authentication Bypass Deep-Dive
CVE-2024-1403 Progress OpenEdge Authentication Bypass Deep-Dive and Indicators of Compromise. This blog details the authentication bypass which allows an unauthenticated attacker to access the OpenEdge platform as an administrator.
vulnerability · horizon3.ai
ConnectWise ScreenConnect: Authentication Bypass Deep Dive
An analysis of the recent ConnectWise ScreenConnect authentication bypass vulnerability assigned as CVE-2024-1709, its root cause, and indicators of compromise.
Back