Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2024-4040 PoC — CrushFTP 代码注入漏洞

Source
https://github.com/rbih-boulanouar/CVE-2024-4040
Associated Vulnerability
Title:CrushFTP 代码注入漏洞 (CVE-2024-4040)
Description:CrushFTP是一款文件传输服务器。 CrushFTP 10.7.1 和 11.1.0 之前版本存在安全漏洞，该漏洞源于允许低权限的远程攻击者从 VFS 沙箱之外的文件系统读取文件。
File Snapshot

 [4.0K]  /data/pocs/54bed6962e804cb694ac7f47914897dc3cfcd2f6
├── [ 16K]  crush_ftp-cve.webp
├── [1.4K]  exploit.py
└── [ 570]  README.MD

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.