CVE Listesine Dön
CVE-2025-31161 CISA KEV · Aktif SömürülüyorFidye Yazılımı İlişkili

CrushFTP Authentication Bypass Vulnerability

CVSS Skor

—

EPSS İhtimal

%100.0

Risk Skoru

—

Yayın

1 yıl önce

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

CVE-2025-31161

Public PoCKaynak güncellemesi: 30.09.2026 11:18:37

rufflabs/ludus_crushftp_cve-2025-31161_sim

Public PoCKaynak güncellemesi: 30.06.2026 03:43:53

rufflabs/ludus_crushftp_cve-2025-31161

Public PoCKaynak güncellemesi: 29.06.2026 23:17:47

rufflabs/crushftp_cve-2025-31161

Public PoCKaynak güncellemesi: 29.06.2026 20:41:22

Wrote an exploit in Go for CVE-2025-31161 affecting crushFTP.

Public PoCKaynak güncellemesi: 23.02.2026 00:52:57

PoC Authentication Bypass to RCE to Exploit CVE-2025-31161

Public PoCKaynak güncellemesi: 12.02.2026 09:12:21

ch3m1cl/CVE-2025-31161

Public PoCKaynak güncellemesi: 13.12.2025 17:48:39

cesarbtakeda/CVE-2025-31161

Public PoCKaynak güncellemesi: 19.10.2026 16:33:18

0xDTC/CrushFTP-auth-bypass-CVE-2025-31161

Public PoCKaynak güncellemesi: 02.10.2025 16:17:28

Scans target to see if its vulnerable to CVE-2025-31161

Public PoCKaynak güncellemesi: 26.09.2025 22:20:01

CVE-2025-31161, a critical authentication bypass vulnerability in CrushFTP WebInterface. This tool allows security researchers to scan for vulnerable instances and verify the security posture of CrushFTP servers. (★1)

Public PoCKaynak güncellemesi: 03.05.2025 15:48:43

Proof of Concept for CVE-2025-31161 / CVE-2025-2825 (★0)

Public PoCKaynak güncellemesi: 09.04.2025 00:47:39

CrushFTP CVE-2025-31161 Exploit Tool 🔓 (★0)

Public PoCKaynak güncellemesi: 22.04.2025 09:29:05

Official Nuclei template for CVE-2025-31161 (formerly CVE-2025-2825) (★0)

Public PoCKaynak güncellemesi: 24.04.2025 19:25:42

CVE-2025-31161 python exploit (★0)

Public PoCKaynak güncellemesi: 30.04.2025 06:19:05

🛡️ CVE-2025-31161 - CrushFTP User Creation Authentication Bypass Exploit (★0)

Public PoCKaynak güncellemesi: 24.05.2025 06:17:25

CVE-2025-31161 (★0)

Public PoCKaynak güncellemesi: 06.06.2025 19:12:40

CVE-2025-31161 (★0)

Public PoCKaynak güncellemesi: 07.06.2025 14:09:40

CrushFTP 11.3.1 - Authentication Bypass (★0)

Public PoCKaynak güncellemesi: 15.06.2025 19:36:41

PoC CVE-2025-31161 - Authentication Bypass CrushFTP (★0)

Public PoCKaynak güncellemesi: 10.09.2025 09:49:20

Authentication bypass vulnerability in versions of the CrushFTP server. (★0)

Public PoCKaynak güncellemesi: 15.09.2025 13:24:31

Scans target to see if its vulnerable to CVE-2025-31161 (★0)

Public PoCKaynak güncellemesi: 27.09.2025 07:20:01

A proof of concept for CVE-2025-31161, using mangled HTTP header to perform unauthenticated impersonation of any user in Crush FTP server. (★0)

Public PoCKaynak güncellemesi: 20.02.2026 23:10:16

CrushFTP 11.3.1 - Authentication Bypass

Exploit referansıKaynak güncellemesi: 18.05.2025 00:00:00

Nuclei: CrushFTP - Authentication Bypass

Exploit referansı

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-31161"