CFADVISORY-CL-application-security-waf-waf-release-2025-04-22

Exploit Intelligence

• rufflabs/ludus_crushftp_cve-2025-31161_sim (github-poc)
• rufflabs/ludus_crushftp_cve-2025-31161 (github-poc)
• rufflabs/crushftp_cve-2025-31161 (github-poc)
• Implementation and exploitation of CVE-2023-7028 account takeover vulnerability related to GO-TO CVE weekly articles of the 11th week. (github-poc-repo)
• CVE-2023-7028 POC && Exploit (github-poc-repo)
• Exploit for CVE-2023-7028 - GitLab CE/EE (github-poc-repo)
• sariamubeen/CVE-2023-7028 (github-poc-repo)
• Sornphut/CVE-2023-7028-GitLab (github-poc-repo)
• Leveraging arbitrary file read to RCE on Oracle PeopleSoft (github-poc-repo)
• This FORK of repository presents a proof-of-concept of CVE-2023-7028. I am only improve exploit usage (github-poc-repo)

…and 65 more exploits

Timeline

• Apr 22, 2025 CVE Published

References

• WAF - WAF Release - 2025-04-22 advisory