<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: crushftp</title><description>Every new CVE for crushftp.</description><link>https://agentprime.io/</link><item><title>CVE-2015-20129: CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/</title><link>https://agentprime.io/advisories/CVE-2015-20129/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2015-20129/</guid><description>CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 28 Oct 2026 02:03:14 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-54309: CrushFTP: CrushFTP 10 before 10.8.5 and 11 before 11.3.4_23…</title><link>https://agentprime.io/advisories/CVE-2025-54309/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-54309/</guid><description>CVSS 9.0 (Critical). Critical: In CISA’s KEV catalogue since 22 Jul 2025: it is known to be exploited. CVSS score 9.0: 9.0 or more. CVSS score 9.0 (7.0 or more) and EPSS 0.93 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 18 Jul 2025 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2025-32103: CrushFTP: CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal…</title><link>https://agentprime.io/advisories/CVE-2025-32103/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32103/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Apr 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-32102: Server-side request forgery in CrushFTP</title><link>https://agentprime.io/advisories/CVE-2025-32102/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-32102/</guid><description>CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 15 Apr 2025 00:00:00 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-31161: CrushFTP: CrushFTP 10 before 10.8.4 and 11 before 11.3.1 allows authentication bypass and takeover…</title><link>https://agentprime.io/advisories/CVE-2025-31161/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-31161/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 7 Apr 2025: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 03 Apr 2025 00:00:00 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item><item><title>CVE-2024-11986: Stored XSS in CrushFTP</title><link>https://agentprime.io/advisories/CVE-2024-11986/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-11986/</guid><description>CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 13 Dec 2024 13:46:54 GMT</pubDate><category>CVE</category><category>critical</category></item><item><title>CVE-2024-4040: Unauthenticated arbitrary file read and remote code execution in CrushFTP</title><link>https://agentprime.io/advisories/CVE-2024-4040/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-4040/</guid><description>CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 24 Apr 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Mon, 22 Apr 2024 19:21:46 GMT</pubDate><category>CVE</category><category>critical</category><category>KEV</category></item></channel></rss>