SimpleHelp <= 5.5.7 - Unauthenticated Path Traversal

SimpleHelp remote support software v5.5.7 and before is vulnerable to multiple path traversal vulnerabilities that enable unauthenticated remote attackers to download arbitrary files from the SimpleHelp host via crafted HTTP requests. These files include server configuration files containing...

DragonForce Exploits SimpleHelp Flaws to Deploy Ransomware Across Customer Endpoints

The threat actors behind the DragonForce ransomware gained access to an unnamed Managed Service Provider's MSP SimpleHelp remote monitoring and management RMM tool, and then leveraged it to exfiltrate data and drop the locker on multiple endpoints. It's believed that the attackers exploited a tri...

Exploit for Path Traversal in Simple-Help Simplehelp

CVE-2024-57727 CVE-2024-57727 python...

CVE-2024-57727

creationtimestamp| type| source ---|---|--- 2025-01-15 07:04:46+00:00| seen| https://bsky.app/profile/hackingne.ws/post/3lfr77ikywk22 2025-01-15 13:18:05+00:00| seen| https://t.me/truesecator/6621 2025-01-15 17:18:02+00:00| seen| https://bsky.app/profile/tmjintel.bsky.social/post/3lfsbi3fw5c25...