Description
（CVE-2025-54309）CrushFTP AS2验证漏洞导致远程管理员权限提升
（CVE-2025-54309）CrushFTP AS2验证漏洞导致远程管理员权限提升
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-54309
https://www.crushftp.com/crush11wiki/Wiki.jsp?page=CompromiseJuly2025
https://www.rapid7.com/blog/post/crushftp-zero-day-exploited-in-the-wild/
https://zeropath.com/blog/crushftp-cve-2025-54309-as2-validation-flaw
https://reliaquest.com/blog/threat-spotlight-cve-2025-54309-crushftp-exploit/
https://guardz.com/blog/critical-zero-day-in-crushftp-actively-exploited/
https://www.bleepingcomputer.com/news/security/crushftp-zero-day-exploited-in-attacks-to-gain-admin-access-on-servers/
https://www.cve.org/CVERecord?id=CVE-2025-54309
https://arcticwolf.com/resources/blog/cve-2025-54309-critical-zero-day-vulnerability-in-crushftp-exploited/
https://fidelissecurity.com/vulnerabilities/cve-2025-54309/