/
affected_products:PHP-CGI × has_exploit:true × latest_source_host:f5.com × limpar

Resultados

3 casos · pág. 1/1

f5.com · exploit público medium

Scanner from HOSTGLOBAL.PLUS (UK) probes 130 URLs for exposed .env files using 12,000+ rotating User-Agents; August 2025 CVE trends

F5 Labs, with Efflux sensor telemetry, profiled a persistent information-disclosure scanner operating from 78.153.140.203 in a netblock of AS202306 (HOSTGLOBAL.PLUS LTD), a UK ISP. The IP was first seen on 10 January 2025, vanished on 10 April, and returned on 11 July 2025. It scans 130 unique URLs: 80.23% are variations of /.env, 11.45% …

CVE-2017-9841 CVE-2023-1389 CVE-2019-9082
f5.com · exploit público medium

F5 Labs June 2026: Honeynet attacks up 55.5%; LiteSpeed Cache CVE-2024-44000 debug.log scanning surges alongside Exchange and PHP exploits

F5 Labs honeynet telemetry shows overall hostile activity rising 55.5% month over month in June 2026, a return to the levels of the earlier-year spike. Highlighted is CVE-2024-44000, an unauthenticated account takeover flaw (CVSS 9.8, CWE-522) in the LiteSpeed Cache WordPress plugin, which rose by 1,128 to 2,603 attacks (8). Scanning is i…

CVE-2024-44000 CVE-2005-0869 CVE-2024-4577
f5.com · exploit público critical

React2Shell (CVE-2025-55182) mass exploitation: RondoDox, credential stealers and reverse shells observed in December 2025

F5 Labs, using Efflux sensor telemetry, analyzed December 2025 exploitation of React2Shell (CVE-2025-55182), a CVSS 10.0 unsafe deserialization RCE in React Server Components. It was disclosed on 3 December 2025 and rose to second place among the most exploited CVEs, behind only CVE-2017-9841. Within days of disclosure, actors moved from …

CVE-2025-55182 CVE-2017-9841 CVE-2023-1389 RondoDox