Back to the CVE list
CVE-2025-31161 CISA KEV · Actively exploitedLinked to ransomware

CrushFTP Authentication Bypass Vulnerability

CVSS score

—

EPSS probability

%100.0

Risk score

—

Published

1 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

CVE-2025-31161

Public PoCSource updated: 30.09.2026 11:18:37

rufflabs/ludus_crushftp_cve-2025-31161_sim

Public PoCSource updated: 30.06.2026 03:43:53

rufflabs/ludus_crushftp_cve-2025-31161

Public PoCSource updated: 29.06.2026 23:17:47

rufflabs/crushftp_cve-2025-31161

Public PoCSource updated: 29.06.2026 20:41:22

Wrote an exploit in Go for CVE-2025-31161 affecting crushFTP.

Public PoCSource updated: 23.02.2026 00:52:57

PoC Authentication Bypass to RCE to Exploit CVE-2025-31161

Public PoCSource updated: 12.02.2026 09:12:21

ch3m1cl/CVE-2025-31161

Public PoCSource updated: 13.12.2025 17:48:39

cesarbtakeda/CVE-2025-31161

Public PoCSource updated: 19.10.2026 16:33:18

0xDTC/CrushFTP-auth-bypass-CVE-2025-31161

Public PoCSource updated: 02.10.2025 16:17:28

Scans target to see if its vulnerable to CVE-2025-31161

Public PoCSource updated: 26.09.2025 22:20:01

CVE-2025-31161, a critical authentication bypass vulnerability in CrushFTP WebInterface. This tool allows security researchers to scan for vulnerable instances and verify the security posture of CrushFTP servers. (★1)

Public PoCSource updated: 03.05.2025 15:48:43

Proof of Concept for CVE-2025-31161 / CVE-2025-2825 (★0)

Public PoCSource updated: 09.04.2025 00:47:39

CrushFTP CVE-2025-31161 Exploit Tool 🔓 (★0)

Public PoCSource updated: 22.04.2025 09:29:05

Official Nuclei template for CVE-2025-31161 (formerly CVE-2025-2825) (★0)

Public PoCSource updated: 24.04.2025 19:25:42

CVE-2025-31161 python exploit (★0)

Public PoCSource updated: 30.04.2025 06:19:05

🛡️ CVE-2025-31161 - CrushFTP User Creation Authentication Bypass Exploit (★0)

Public PoCSource updated: 24.05.2025 06:17:25

CVE-2025-31161 (★0)

Public PoCSource updated: 06.06.2025 19:12:40

CVE-2025-31161 (★0)

Public PoCSource updated: 07.06.2025 14:09:40

CrushFTP 11.3.1 - Authentication Bypass (★0)

Public PoCSource updated: 15.06.2025 19:36:41

PoC CVE-2025-31161 - Authentication Bypass CrushFTP (★0)

Public PoCSource updated: 10.09.2025 09:49:20

Authentication bypass vulnerability in versions of the CrushFTP server. (★0)

Public PoCSource updated: 15.09.2025 13:24:31

Scans target to see if its vulnerable to CVE-2025-31161 (★0)

Public PoCSource updated: 27.09.2025 07:20:01

A proof of concept for CVE-2025-31161, using mangled HTTP header to perform unauthenticated impersonation of any user in Crush FTP server. (★0)

Public PoCSource updated: 20.02.2026 23:10:16

CrushFTP 11.3.1 - Authentication Bypass

Exploit referenceSource updated: 18.05.2025 00:00:00

Nuclei: CrushFTP - Authentication Bypass

Exploit reference

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-31161"