CVE 2025-2825 - CrushFTP Authentication Bypass Analysis
After the news made it’s way to my feeds, having worked on the CrushFTP’s CVE-2024-4040 vulnerability analysis, this sounded like a good thing to do over and maybe I could write …
Welcome to PwnFuzz
Explore our comprehensive research platform with detailed technical analysis, exploit development guides, and cutting-edge security insights.
Exploring Recent CVEs in HPE Insight Remote Support
In this post, we’ll delve into two critical vulnerabilities recently discovered in the HPE Insight Remote Support (IRS) application, versions prior to v7.14.0.629. These …
CVE 2024-37397 - Ivanti Endpoint Manager XXE Vulnerability
This blog provides an in-depth analysis of the exploitation process for an unauthenticated XXE vulnerability in Ivanti Endpoint Manager, identified as CVE-2024-37397. Uncovering …
CVE 2024-4040 - CrushFTP Server-Side Template Injection Vulnerability Analysis
This blog post contains a thorough analysis of Server Side Template Injection vulnerability in a commercial Managed File Transfer product named CrushFTP. Exploit script is …