<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>CrushFTP VFS Sandbox Escape · updates</title>
  <link>https://pwn.watch/i/crushftp-cve-2024-4040</link>
  <description>CrushFTP contains an unspecified sandbox escape vulnerability that allows a remote attacker to escape the CrushFTP virtual file system (VFS). Added to the CISA KEV catalog on 2024-04-24.</description>
  <language>en</language>
  <lastBuildDate>Wed, 24 Apr 2024 00:00:00 GMT</lastBuildDate>
  <atom:link href="https://pwn.watch/i/crushftp-cve-2024-4040/feed.xml" rel="self" type="application/rss+xml" />
  <item>
    <title>CrushFTP VFS Sandbox Escape: CISA added CVE-2024-4040 to the KEV catalog (federal deadline 2024-05-01)</title>
    <link>https://pwn.watch/i/crushftp-cve-2024-4040</link>
    <guid isPermaLink="false">https://pwn.watch/i/crushftp-cve-2024-4040#2024-04-24-e6c9a29c</guid>
    <pubDate>Wed, 24 Apr 2024 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://www.cisa.gov/known-exploited-vulnerabilities-catalog&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
  <item>
    <title>CrushFTP VFS Sandbox Escape: CVE-2024-4040 published</title>
    <link>https://pwn.watch/i/crushftp-cve-2024-4040</link>
    <guid isPermaLink="false">https://pwn.watch/i/crushftp-cve-2024-4040#2024-04-22-83aa2101</guid>
    <pubDate>Mon, 22 Apr 2024 00:00:00 GMT</pubDate>
    <category>critical</category>
    <description>&lt;p&gt;&lt;a href=&quot;https://nvd.nist.gov/vuln/detail/CVE-2024-4040&quot;&gt;Source&lt;/a&gt;&lt;/p&gt;</description>
  </item>
</channel>
</rss>
