Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux Systems
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2017-12611 | In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a… | 9.8 | 87% | PoC | |
| CVE-2017-5638 | Unauthenticated RCE in Apache Struts Jakarta Multipart parser | 9.8 | 100% | KEVRansomwarePoC ×10 | KEV |
| CVE-2017-7657 | In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled)… | 9.8 | 15% | ||
| CVE-2017-9805 | XML Deserialization RCE in Apache Struts 2 REST Plugin | 8.1 | 99% | KEVPoC | KEV |
| CVE-2018-11776 | Apache Struts Remote Code Execution via Missing or Wildcard Namespace | 8.1 | 100% | KEVPoC ×5 | KEV |
| CVE-2018-7600 | Unauthenticated Remote Code Execution in Drupal Core (Drupalgeddon 2) | 9.8 | 100% | KEVRansomwarePoC ×4 | KEV |
| CVE-2019-0230 | Apache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation, when evaluated on raw user input in tag attributes, may lead to remote code execution | 9.8 | 97% | PoC ×2 | |
| CVE-2020-11651 | Authentication Bypass and Unauthenticated RCE in SaltStack Salt | 9.8 | 97% | KEVPoC ×2 | KEV |
| CVE-2020-14179 | Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an… | 5.3 | 76% | ||
| CVE-2020-14750 | Unauthenticated RCE in Oracle WebLogic Server Console (CVE-2020-14750) | 9.8 | 99% | KEV | KEV |
| CVE-2020-17496 | Unauthenticated Remote Command Execution in vBulletin 5.5.4-5.6.2 | 9.8 | 87% | KEVPoC ×2 | KEV |
| CVE-2020-25213 | Unauthenticated RCE in WordPress File Manager (wp-file-manager) Plugin | 9.8 | 97% | KEVPoC ×5 | KEV |
| CVE-2020-7961 | Deserialization RCE in Liferay Portal via JSON Web Services | 9.8 | 100% | KEVPoC | KEV |
| CVE-2021-29441 | Nacos: When configured to use authentication (-Dnacos.core.auth.enabled=true) Nacos uses the AuthFilter servlet filter to enforce… | 9.8 | 83% | PoC ×2 |
From the original article
2 min read at thehackernews.com
Close to 14 million Linux-based systems are directly exposed to the Internet, making them a lucrative target for an array of real-world attacks that could result in the deployment of malicious web shells, coin miners, ransomware, and other trojans. That's according to an in-depth look at the Linux threat landscape published by U. S.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.