CVE-2019-18935

geeyoff

HelpwithCrowdsecbouncerinCaddy,please?

Obi_96

IntegrateCrowdSecwithAbuseIPDB

A few things we caught / this week: GOOTKIT deployed via zipped JScript (associate WSH w/ notepad) XMRIG via CVE-2019-18935 (patch) SOLARMARKER deployed via SWC Macros top vector to deploy malware #BEC continues: MFA everywhere, disable legacy protocols, conditional access

CVE-2019-18935 Progress Telerik UI for https://t.co/Wfg83tfi1f?amp=1 AJAX through 2019.3.1023 contains a .NET deserialization vulnerability in the RadAsyncUpload function. This is exploitable when the encryption keys are known due to t... https://t.co/2oXSNs5xmC?amp=1

RT /rwincey: Found #Telerik vulnerable to CVE-2019-18935 on a customer's network and can't seem to get the file upload to work? Host the payload yourself using /SecureAuth impacket. /noperator /mwulftange /bao7uo /straight_blast /pwntester /olekmirosh #b…

CVE-2019-18935 is associated with #PrayingMantis - a new APT Hacking Group that targets Microsoft IIS Servers with https://t.co/YHtuuZSVHt?amp=1 exploits. Categorized under CWE-502, it ranks 13th in the Top 25 dangerous programming errors published by MITRE - https://t.co/26WgQyujae?amp=1

Una campaña de malware contra servidores Microsoft IIS. El grupo detrás «Praying Mantis« también se ha utilizado «TG2021«. Explotan diferentes vulnerabilidades CVE-2021-27852, CVE-2019-18935 y CVE-2017-11317. https://t.co/uFoZo3AMCD?amp=1

M157q_News_RSS

駭客還在利用3年前的Telerik UI漏洞以植入Cobalt Strike與挖礦軟體 https://t.co/AxZw5AKcqH 資安業者Sophos本周警告，今年5月初觀察到針對CVE-2019-18935的新一波攻擊，而這是.NET開發工具Telerik在2019年所修補的遠端程式攻擊漏洞。