DanSec

Vulnerability

CVE-2025-54309

In 2 briefs, most recently 21 July 2025. RSS for this tag

Published 2025-07-18

Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗

Known exploited (CISA KEV)

CrushFTP Unprotected Alternate Channel Vulnerability.

Added 2025-07-22

Coverage in DanSec Daily

  1. SharePoint zero-days (CVE-2025-53770/53771) breached 75+ servers, 3,500 sites ran stealth crypto miners, and npm packages were trojanized via phishing.
  2. NCSC attributes Microsoft 365 Authentic Antics malware to APT28, CrushFTP zero-day hijacks servers, and Google sues BADBOX 2.0 botnet operators.