/
ttps_attack:T1595.002 × cves:CVE-2019-9082 × limpar

Resultados

3 casos · pág. 1/1

f5.com · exploit público critical

F5 Labs observes lone Russian IP scanning for SmarterMail CVE-2026-24423 unauthenticated RCE, a CISA KEV-listed flaw used in ransomware

F5 Labs analyzed exploitation of CVE-2026-24423, a CVSS 9.8 unauthenticated remote code execution flaw in SmarterTools SmarterMail (CWE-306). CISA added it to the KEV catalog on February 2, 2026 and notes it has been used in ransomware campaigns. Despite public write-ups, F5 sensors saw only one IP, 193.24.123.58 (ASN 200593, Russian ISP …

CVE-2026-24423 CVE-2026-20128 CVE-2017-9841
f5.com · exploit público medium

Scanner from HOSTGLOBAL.PLUS (UK) probes 130 URLs for exposed .env files using 12,000+ rotating User-Agents; August 2025 CVE trends

F5 Labs, with Efflux sensor telemetry, profiled a persistent information-disclosure scanner operating from 78.153.140.203 in a netblock of AS202306 (HOSTGLOBAL.PLUS LTD), a UK ISP. The IP was first seen on 10 January 2025, vanished on 10 April, and returned on 11 July 2025. It scans 130 unique URLs: 80.23% are variations of /.env, 11.45% …

CVE-2017-9841 CVE-2023-1389 CVE-2019-9082
f5.com · exploit público high

F5 Labs: SparkRAT C2 scanning from DigitalOcean and April 2025 CVE exploitation trends, including Fortinet SSL-VPN and SAP NetWeaver

F5 Labs, using Efflux sensor telemetry, reports on the most exploited CVEs of April 2025 and on internet-wide scanning for SparkRAT command-and-control servers. A single actor, using three IPs in DigitalOcean ASN 14061, sent identical HTTP POST requests to the SparkRAT in-place update endpoint, each IP scanning for about 13 hours and reac…

CVE-2017-9841 CVE-2019-9082 CVE-2022-24847 Patchwork BianLian