attack_type:command_injection × criticity:high × has_exploit:true × latest_source_host:f5.com × limpar

Resultados

2 casos · pág. 1/1

f5.com · há 2d exploit público high

F5 Sensor Intel: Web-Based RCE and Command Injection Flaws Dominate July 2025 Exploitation Telemetry

F5 Labs, using attack telemetry from Efflux's global sensor network, analyzed the most exploited vulnerabilities in July 2025 and found that nearly all top-scanned CVEs are HTTP-based RCE or command injection flaws in web interfaces. CVE-2017-9841 (PHPUnit) was the most exploited, followed by CVE-2023-1389 (TP-Link Archer AX21), CVE-2022-…

CVE-2017-9841 CVE-2023-1389 CVE-2022-24847

f5.com · há 2d exploit público high

NoBooze1 malware delivered to TP-Link AX21 routers and Raisecom web interfaces by a single actor via command injection

F5 Labs, using Efflux sensor telemetry, reports a campaign that began on 2025-06-08. One actor is exploiting TP-Link AX21 routers (CVE-2023-1389, command injection in the country query parameter) and Raisecom web interfaces (CVE-2024-7120) to deliver a new malware family named NoBooze1. Four source IPs and three stage-one hosts were rotat…

CVE-2023-1389 CVE-2024-7120 CVE-2019-9082