Exploit / PoCcritical

XE Group shifts from credit card skimming to exploiting zero

Security Affairsby @securityaffairsFeb 10, 2025 · 12:53 UTC (Feb 10, 2025)2 min read3 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-57968 CVE-2025-25181 CVE-2017-9248 CVE-2019-18935

Tags: cve-2024-57968 cve-2025-25181 cve-2017-9248 cve-2019-18935 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2017-9248	Cryptographic key leak (CWE-522) in Progress Telerik UI for ASP.NET AJAX & Sitefinity	9.8	75%	KEVPoC	Jul 3, 2017 KEV Nov 3, 2021
CVE-2019-18935	Unauthenticated .NET Deserialization RCE in Progress Telerik UI for ASP.NET AJAX	9.8	100%	KEVRansomwarePoC ×4	Dec 11, 2019 KEV Nov 3, 2021
CVE-2024-57968 +1 related CVE CVE-2025-25181	Unrestricted File Upload in Advantive VeraCore upload.aspx	8.8 group max	32%	KEVPoC ×2	Feb 3, 2025 KEV Mar 10, 2025

From the original article

2 min read at securityaffairs.com

The cybercrime group XE Group exploited a VeraCore zero-day to deploy reverse shells, web shells in recent attacks. A recent investigation by researchers from Intezer and Solis Security shed light on the recent operations of the XE Group. Active since at least 2013 , XE Group is a cybercriminal group focused on credit card skimming and password theft via supply chain attacks.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.