/
countries_code:CN × has_exploit:true × criticity:medium × limpar

Resultados

3 casos · pág. 1/1

f5.com · exploit público medium

F5 Sensor Intel: CVE-2023-1389 (TP-Link Archer AX21) tops scanning for a fifth month, December 2024

F5 Labs, using Efflux sensor telemetry, reports that CVE-2023-1389, an RCE in TP-Link Archer AX21 routers, was the most scanned-for CVE in December 2024 for the fifth consecutive month, with traffic far above any other tracked CVE. Other heavily scanned flaws include CVE-2022-24847 (GeoServer), CVE-2022-22947 (Spring Cloud Gateway), CVE-2…

sekoia.com · exploit público medium

Chinese-speaking actor abuses unauthenticated Flowise honeypot to steal secrets and use its LLM agent against a gambling network's Nightingale server

In late August 2026, Sekoia's TDR team observed an attacker compromise an unauthenticated Flowise honeypot (emulating v2.2.8). The attacker harvested stored credentials, tried to plant a malicious chatflow with a callback to 154.217.251.226, and used prompt injection to turn the LLM agent into an offensive analysis assistant. The activity…

f5.com · exploit público medium

F5 Labs June 2026: Honeynet attacks up 55.5%; LiteSpeed Cache CVE-2024-44000 debug.log scanning surges alongside Exchange and PHP exploits

F5 Labs honeynet telemetry shows overall hostile activity rising 55.5% month over month in June 2026, a return to the levels of the earlier-year spike. Highlighted is CVE-2024-44000, an unauthenticated account takeover flaw (CVSS 9.8, CWE-522) in the LiteSpeed Cache WordPress plugin, which rose by 1,128 to 2,603 attacks (8). Scanning is i…