CVE-2024-22386

creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:31+00:00| seen| https://t.me/ctinow/179063 2024-02-29 08:47:07+00:00| seen| https://t.me/ctinow/196348...

CVE-2018-1215

creationtimestamp| type| source ---|---|--- 2024-01-31 14:42:00+00:00| seen| https://t.me/ctinow/176781 2024-01-31 14:42:01+00:00| seen| https://t.me/ctinow/176782 2024-01-31 14:42:03+00:00| seen| https://t.me/ctinow/176783...

Imperva uncovers new Indicators of Compromise for FBI and CISA-flagged AndroxGh0st botnet

On January 16, a joint alert from FBI and CISA warned about a concerning development: the emergence of a botnet driven by AndroxGh0st malware targeting vulnerable applications and web servers. AndroxGh0st is a Python-based malware, first seen in late 2022, designed to target Laravel .env files an...

CVE-2023-31505

creationtimestamp| type| source ---|---|--- 2024-01-31 04:31:53+00:00| seen| https://t.me/ctinow/176460 2024-02-06 23:16:55+00:00| seen| https://t.me/ctinow/180387 2024-02-22 12:46:49+00:00| seen| https://t.me/ctinow/190684...

CVE-2019-8798

creationtimestamp| type| source ---|---|--- 2024-01-29 20:21:12+00:00| seen| https://t.me/ctinow/175512 2024-01-31 08:41:49+00:00| seen| https://t.me/ctinow/176552 2024-01-31 11:07:10+00:00| seen| https://t.me/ctinow/176650 2024-01-31 14:41:59+00:00| seen| https://t.me/ctinow/176780...

CVE-2019-8797

creationtimestamp| type| source ---|---|--- 2024-01-29 20:21:10+00:00| seen| https://t.me/ctinow/175510 2024-01-31 10:36:58+00:00| seen| https://t.me/ctinow/176635 2024-01-31 13:37:02+00:00| seen| https://t.me/ctinow/176735...

CVE-2023-50785

creationtimestamp| type| source ---|---|--- 2024-01-25 07:26:42+00:00| seen| https://t.me/ctinow/173296 2024-01-25 12:41:18+00:00| seen| https://t.me/ctinow/173408...

Exploit for Forced Browsing in Fortra Goanywhere_Managed_File_Transfer

CVE-2024-0204: Fortra GoAnywhere MFT Authentication Bypass Dee...

CVE-2024-23207

creationtimestamp| type| source ---|---|--- 2024-01-23 02:31:47+00:00| seen| https://t.me/ctinow/171631 2024-02-16 16:52:01+00:00| seen| https://t.me/ctinow/186504 2024-02-16 16:52:04+00:00| seen| https://t.me/ctinow/186505 2024-02-16 16:52:05+00:00| seen| https://t.me/ctinow/186506...

Kasseika Ransomware Deploys BYOVD Attacks, Abuses PsExec and Exploits Martini Driver

In this blog, we detail our investigation of the Kasseika ransomware and the indicators we found suggesting that the actors behind it have acquired access to the source code of the notorious BlackMatter ransomware...

CVE-2023-42833

creationtimestamp| type| source ---|---|--- 2024-01-21 10:16:47+00:00| seen| https://t.me/ctinow/170790 2024-01-30 08:41:33+00:00| seen| https://t.me/ctinow/175749 2024-01-30 08:41:34+00:00| seen| https://t.me/ctinow/175750...

RHSA-2024:0304

creationtimestamp| type| source ---|---|--- 2024-01-18 22:17:07+00:00| seen| https://t.me/ctinow/169961...

CISA and FBI Release Known IOCs Associated with Androxgh0st Malware

Today, CISA and the Federal Bureau of Investigation FBI released a joint Cybersecurity Advisory CSA, Known Indicators of Compromise Associated with Androxgh0st Malware, to disseminate known indicators of compromise IOCs and tactics, techniques, and procedures TTPs associated with threat actors...

Known Indicators of Compromise Associated with Androxgh0st Malware

Actions to take today to mitigate malicious cyber activity: 1. Prioritize patching known exploited vulnerabilities in internet-facing systems. 2. Review and ensure only necessary servers and services are exposed to the internet. 3. Review platforms or services that have credentials listed in .env...

CVE-2024-0528

creationtimestamp| type| source ---|---|--- 2024-01-15 02:27:00+00:00| seen| https://t.me/ctinow/168121 2024-02-03 09:07:06+00:00| seen| https://t.me/ctinow/178439...

CVE-2024-20709

creationtimestamp| type| source ---|---|--- 2024-01-11 22:22:05+00:00| seen| https://t.me/ctinow/166872 2024-01-15 14:26:55+00:00| seen| https://t.me/ctinow/168369 2024-02-03 12:46:30+00:00| seen| https://t.me/ctinow/178538...

Design/Logic Flaw

Nginx-UI is an online statistics for Server Indicators?? Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using DefaultQuery, the "desc" and "id" values are used as default values if the query parameters are not set. Thu...

CVE-2024-22196 Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)

Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using DefaultQuery, the "desc" and "id" values are used as default values if the query parameters are not set. Thu...

CVE-2024-22196 Authenticated (user role) SQL injection in `OrderAndPaginate` (GHSL-2023-270)

Nginx-UI is an online statistics for Server Indicators​​ Monitor CPU usage, memory usage, load average, and disk usage in real-time. This issue may lead to information disclosure. By using DefaultQuery, the "desc" and "id" values are used as default values if the query parameters are not set. Thu...

Information disclosure

Nginx-ui is online statistics for Server Indicators?? Monitor CPU usage, memory usage, load average, and disk usage in real-time. The Home Preference page exposes a small list of nginx settings such as Nginx Access Log Path and Nginx Error Log Path. However, the API also exposes testconfigcmd,...