Vulnerabilityhigh
Hackers leverage 1-day vulnerabilities to deliver custom Linux malware
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-24086 | Unauthenticated RCE via checkout input-validation flaw in Adobe Commerce/Magento | 9.8 | 99% | KEV | KEV |
CVE-2023-41265+1 related CVE | HTTP Request Tunneling Privilege Escalation in Qlik Sense Enterprise for Windows | 9.9 group max | 88% | KEVRansomware | KEV |
CVE-2024-21887+1 related CVE | Command Injection RCE in Ivanti Connect Secure and Policy Secure | 9.1 group max | 100% | KEVRansomwarePoC | KEV |
| CVE-2023-48365 | HTTP Request Smuggling/Tunneling in Qlik Sense Allows Privilege Escalation | 9.9 | 48% | KEVRansomware | KEV |
| CVE-2024-21888 | A privilege escalation vulnerability in web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a user to elevate… | 8.8 | 87% | ||
| CVE-2024-21893 | SSRF in Ivanti Connect Secure, Policy Secure, and Neurons SAML Component | 8.2 | 100% | KEVRansomware | KEV |
From the original article
1 min read at helpnetsecurity.com
A financially motivated threat actor is using known vulnerabilities to target public-facing services and deliver custom malware to unpatched Windows and Linux systems. Among the exploited vulnerabilities are also two recently discovered Ivanti Connect Secure VPN flaws that are widely exploited by a variety of attackers.
By @helpnetsecurity · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.