AhsayCBS intrusion left webshells, an XMRig miner, and a C2 implant
Huntress analyzed three servers breached October 8-11, 2026, before Ahsay's hotfixes, and found a host-locked in-memory implant.
Stories per day · 30 days
1 RSS
3 stories, newest first · one card per story
Stories tagged #jsp
Exploit-DB lists JSP command execution in Parasoft CTP 10.7.5
The remote entry covers Parasoft Continuous Testing Platform 10.7.5 and states no patch or attack status.
[0day-rubbish] PrizmDoc for Java (VirtualViewer) 5.22.1 Unauthenticated uploadDocument write into the webapp root to JSP webshell (9.8)
Unauthenticated upload in PrizmDoc for Java 5.22.1 writes a JSP webshell into the webapp root as root.