Malwarecritical
Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT Devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-10987 | Unauthenticated OS Command Injection in Tenda AC15 AC1900 Router | 9.8 | 80% | KEVPoC | KEV |
| CVE-2020-17463 | Unauthenticated SQL Injection in FUEL CMS 1.4.7 | 9.8 | 90% | KEVPoC | KEV |
| CVE-2020-17496 | Unauthenticated Remote Command Execution in vBulletin 5.5.4-5.6.2 | 9.8 | 87% | KEVPoC ×2 | KEV |
| CVE-2020-5902 | Unauthenticated RCE via path traversal in F5 BIG-IP TMUI | 9.8 | 100% | KEVRansomwarePoC ×8 | KEV |
| CVE-2020-8816 | Authenticated Command Injection RCE in Pi-hole AdminLTE Web Dashboard | 7.2 | 78% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
A new wormable botnet that spreads via GitHub and Pastebin to install cryptocurrency miners and backdoors on target systems has returned with expanded capabilities to compromise web applications, IP cameras, and routers.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.