GeoServer Vulnerability Targeted by Hackers to Deliver Backdoors and Botnet Malware

A recently disclosed security flaw in OSGeo GeoServer GeoTools has been exploited as part of multiple campaigns to deliver cryptocurrency miners, botnet malware such as Condi and JenX, and a known backdoor called SideWalk. The security vulnerability is a critical remote code execution bug...

CVE-2024-45195

creationtimestamp| type| source ---|---|--- 2024-09-04 11:53:36+00:00| seen| https://t.me/cvedetector/4781 2024-09-06 07:47:53+00:00| seen| https://t.me/thehackernews/5532 2024-09-06 09:13:35+00:00| published-proof-of-concept| Telegram/EFBeGFmA75ewgbU3HNfojE07wPqv1eLOdUnFt8ddrNP22g 2024-09-06...

CVE-2024-45507

creationtimestamp| type| source ---|---|--- 2024-09-04 11:53:32+00:00| seen| https://t.me/cvedetector/4778 2024-09-21 16:06:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/18824 2024-09-21 16:06:49+00:00| published-proof-of-concept| https://t.me/realLulzSec/2041 2024-09-21...

CVE-2024-45388

creationtimestamp| type| source ---|---|--- 2024-09-02 21:24:11+00:00| seen| https://t.me/cvedetector/4642 2024-09-09 11:01:47+00:00| published-proof-of-concept| https://t.me/realLulzSec/1943 2024-09-09 11:38:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8495 2024-09-09...

CVE-2024-8181

creationtimestamp| type| source ---|---|--- 2024-08-27 15:43:21+00:00| seen| https://t.me/cvedetector/4243 2024-11-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-10 2024-11-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...

CVE-2024-6670

creationtimestamp| type| source ---|---|--- 2024-08-24 09:50:28+00:00| published-proof-of-concept| https://t.me/HackingInsights/11136 2024-08-30 01:25:57+00:00| seen| https://t.me/cvedetector/4481 2024-08-30 20:28:51+00:00| published-proof-of-concept| https://t.me/proxybar/2254 2024-08-30...

CVE-2024-7954

creationtimestamp| type| source ---|---|--- 2024-08-21 13:15:03+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/spipporteplumeprevisurce.rb 2024-08-23 21:19:06+00:00| seen| https://t.me/cvedetector/4034 2024-09-08 11:06:23+00:00|...

CVE-2024-7928

creationtimestamp| type| source ---|---|--- 2024-08-20 01:14:07+00:00| seen| https://t.me/cvedetector/3571 2024-08-20 07:15:06+00:00| published-proof-of-concept| https://t.me/proxybar/2240 2024-08-20 12:19:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8313 2024-08-20...

CVE-2024-38653

creationtimestamp| type| source ---|---|--- 2024-08-14 05:40:25+00:00| seen| https://t.me/cvedetector/3093 2024-09-08 17:47:03+00:00| published-proof-of-concept| https://t.me/HackingInsights/12332 2024-12-15 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-...

CVE-2024-7593

creationtimestamp| type| source ---|---|--- 2024-08-13 19:39:08+00:00| published-proof-of-concept| https://t.me/CyberSecurityIL/53982 2024-08-13 22:08:55+00:00| seen| https://t.me/cvedetector/3075 2024-08-14 07:39:43+00:00| seen| https://t.me/thehackernews/5409 2024-08-14 08:35:48+00:00| seen|...

Critical Security Flaw in WhatsUp Gold Under Active Attack - Patch Now

A critical security flaw impacting Progress Software WhatsUp Gold is seeing active exploitation attempts, making it essential that users move quickly to apply the latest. The vulnerability in question is CVE-2024-4885 CVSS score: 9.8, an unauthenticated remote code execution bug impacting version...

CVE-2024-6893

creationtimestamp| type| source ---|---|--- 2024-08-08 03:01:07+00:00| seen| https://t.me/cvedetector/2738 2024-08-17 22:49:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8284 2024-08-18 00:46:55+00:00| published-proof-of-concept|...

CVE-2024-39713

creationtimestamp| type| source ---|---|--- 2024-08-05 08:03:13+00:00| seen| https://t.me/cvedetector/2432 2025-02-07 19:47:04+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/113964326855977547 2025-02-07 19:47:36+00:00| published-proof-of-concept|...

CVE-2024-7029

creationtimestamp| type| source ---|---|--- 2024-08-02 18:11:55+00:00| seen| https://t.me/cvedetector/2353 2024-08-05 14:50:05+00:00| published-proof-of-concept| https://t.me/truesecator/6057 2024-08-05 14:55:24+00:00| published-proof-of-concept| https://t.me/SEReborn/5001 2024-08-06...

CVE-2024-7314

anji-plus AJ-Report is affected by an authentication bypass vulnerability. A remote and unauthenticated attacker can append ";swagger-ui" to HTTP requests to bypass authentication and execute arbitrary Java on the victim server. Exploitation evidence was observed by the Shadowserver Foundation on...

CVE-2024-7339

creationtimestamp| type| source ---|---|--- 2024-08-01 07:03:40+00:00| seen| https://t.me/cvedetector/2206 2024-08-02 18:06:53+00:00| published-proof-of-concept| https://t.me/HackingInsights/8336 2024-08-05 16:30:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8172 2024-08-05...

CVE-2024-7120

creationtimestamp| type| source ---|---|--- 2024-07-26 07:58:21+00:00| seen| https://t.me/cvedetector/1667 2024-08-01 10:24:33+00:00| published-proof-of-concept| https://t.me/proxybar/2199 2024-08-01 13:53:33+00:00| published-proof-of-concept| https://t.me/HackerArsenal/92 2024-08-01...

CVE-2024-38289

creationtimestamp| type| source ---|---|--- 2024-07-25 22:46:17+00:00| seen| https://t.me/cvedetector/1645 2024-12-14 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-14 2025-03-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...

CVE-2024-36111

creationtimestamp| type| source ---|---|--- 2024-07-25 19:25:33+00:00| seen| https://t.me/cvedetector/1632 2025-02-22 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-22 2025-04-20 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-04-20...

CVE-2024-6205

creationtimestamp| type| source ---|---|--- 2024-07-19 08:40:53+00:00| seen| https://t.me/cvedetector/1192 2024-07-30 15:25:26+00:00| published-proof-of-concept| https://t.me/HackerArsenal/81 2025-02-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-01 2025-05-15...