Search: “Telerik”

18 stories

TantoSec published a working exploit chaining a Telerik UI padding oracle to unauthenticated RCE; Progress patched the flaws in July.

TantoSec's Marcio Almeida released a full exploit chain and tooling for the RadAsyncUpload control in Telerik UI for ASP.NET AJAX, turning a padding oracle (CVE-2026-13182) into unauthenticated RCE via an unguarded type-resolution flaw (CVE-2026-13181, CVSS 8.1). Exploitation requires a rendered RadAsyncUpload handler and an explicit non-default encryption key, and took roughly 127,000 oracle requests (about an hour) in lab testing. Versions 2010.1.309 through 2026.2.519 are affected; Progress fixed the chain in 2026.2.708 on July 8, 2026, and no in-the-wild exploitation has been confirmed. A separate RCE chain in RadPersistenceManager and RadDockLayout (CVE-2026-13185, -13186, -13190) was also patched but has no public exploit.

The Hacker NewsSep 7, 11:20 UTC · 9d agoExploit / PoC CVE-2026-13181 CVE-2026-13182 CVE-2026-13183+5 CVEs1

CISA: US agency breached by cybercriminals, gov’t hackers

The RecordMar 15, 18:29 UTC · Mar 15, 2023Data breach CVE-2019-18935 CVE-2017-11357 CVE-2017-11317+1 CVEs

Quarterly Report: Incident Response trends in Summer 2020

Cisco TalosSep 1, 15:00 UTC · Sep 1, 2020Ransomware CVE-2019-18935

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.

Recorded FutureSep 8, 00:00 UTC · 9d agoVulnerability in the wildCVE-2025-62593 CVE-2026-72898 CVE-2026-9198+4 CVEs1

IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains

Cisco TalosJul 29, 18:08 UTC · Jul 29, 2026Phishing & fraud1

China-Linked SprySOCKS Backdoor Expands to Windows with Driver

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware CVE-2023-24932

Earth Lusca's New SprySOCKS Linux Backdoor Targets Government Entities

The Hacker NewsSep 20, 04:37 UTC · Sep 20, 2023Malware CVE-2022-39952 CVE-2022-40684 CVE-2021-22205+3 CVEs

Protecting Your Microsoft IIS Servers Against Malware Attacks

The Hacker NewsSep 8, 12:56 UTC · Sep 8, 2023Malware

US, UK, Australia issue joint advisory on today's top exploited vulnerabilities

The RecordDec 12, 00:00 UTC · Dec 12, 2022Vulnerability CVE-2019-19781 CVE-2019-11510 CVE-2018-13379+26 CVEs1

Praying Mantis APT targets IIS servers with ASP.NET exploits

The RecordDec 10, 00:00 UTC · Dec 10, 2022Vulnerability CVE-2021-27852 CVE-2019-18935 CVE-2017-11317

NetWalker ransomware operators have made $25M since March 2020

Security AffairsAug 4, 12:06 UTC · Aug 4, 2020Ransomware CVE-2019-11510 CVE-2019-18935

Australian ACSC 's report confirms the use of Chinese malware in recent attacks

Security AffairsJun 28, 22:26 UTC · Jun 28, 2020Malware CVE-2019-18935 CVE-2017-9248 CVE-2017-11317+3 CVEs

Web shell malware continues to evade many security tools

Help Net SecurityApr 23, 00:00 UTC · Apr 23, 2020Malware CVE-2019-0604 CVE-2019-19781 CVE-2019-3396+10 CVEs