THE IONIX BLOG

Amit Sheps
April 02nd, 2025

Exploited: Critical Unauthenticated Access Vulnerability in CrushFTP (CVE-2025-2825)

In the ever-evolving landscape of web application vulnerabilities, a new critical flaw has emerged. CVE-2025-2825 is a high-severity vulnerability that allows attackers to bypass authentication on CrushFTP servers. This popular enterprise file transfer solution is often used in corporate environments to manage sensitive data, making this vulnerability particularly concerning. Attackers are actively exploiting this flaw…
Read more

EDITORS PICKS

Amit Sheps
November 19th, 2024

IONIX Launches Cloud Exposure Validator: Bringing CTEM to Cloud Security

Fara Hain
June 04th, 2024

Cloud Cross-View for Complete Attack Surface Visibility

Amit Sheps
March 06th, 2024

Security Validation Explained: A Trusted Path to Risk Reduction

Amit Sheps
January 04th, 2024

How to Implement Multi-Factor Asset Attribution in Attack Surface Discovery

Nethanel Gelernter
June 26th, 2024

CVE-2024-38526 – Polyfill Supply Chain Attack for Malicious Code Execution

THE LATEST FROM IONIX >>

LATEST

  • Amit Sheps
    April 2nd, 2025

    Exploited: Critical Unauthenticated Access Vulnerability in CrushFTP (CVE-2025-2825)

  • Sahar Lazari
    April 1st, 2025

    IONIX Unveils Parked Domain Classification 

  • Amit Sheps
    March 26th, 2025

    Exploited! Kentico Xperience Staging Service Authentication Bypass Vulnerabilities (CVE-2025-2746 & CVE-2025-2747)

  • Amit Sheps
    March 12th, 2025

    Exploited! Apache Tomcat Path Equivalence Vulnerability (CVE-2025-24813)

  • Fara Hain
    March 3rd, 2025

    Can Autonomous LLM Agents Exploit One Day Vulnerabilities?

  • Amit Sheps
    March 2nd, 2025

    Exploited: XWiki Remote Code Execution Vulnerability (CVE-2025-24893)

  • Amit Sheps
    February 13th, 2025

    Exploited! PAN‑OS Authentication Bypass Vulnerability (CVE‑2025‑0108)

  • Fara Hain
    February 5th, 2025

    What Is CTEM? Understanding Gartner’s CTEM Framework

  • Amit Sheps
    December 19th, 2024

    CTEM: Closing the Cloud Security Gap

  • Gilad Friedman
    December 19th, 2024

    Three Pillars for MSSP Success in EASM

  • Amit Sheps
    December 19th, 2024

    Continuous Risk Assessment: The Connecting Thread in CTEM

  • Fara Hain
    December 18th, 2024

    Exploited! Kerio Control’s HTTP Response Splitting Vulnerability (CVE-2024-52875)