{"id":185199,"date":"2023-01-13T03:06:01","date_gmt":"2023-01-13T03:06:01","guid":{"rendered":"https:\/\/harchi90.com\/vulnerability-with-9-8-severity-in-control-web-panel-is-under-active-exploit\/"},"modified":"2023-01-13T03:06:01","modified_gmt":"2023-01-13T03:06:01","slug":"vulnerability-with-9-8-severity-in-control-web-panel-is-under-active-exploit","status":"publish","type":"post","link":"https:\/\/harchi90.com\/vulnerability-with-9-8-severity-in-control-web-panel-is-under-active-exploit\/","title":{"rendered":"Vulnerability with 9.8 severity in Control Web Panel is under active exploit"},"content":{"rendered":"<div itemprop=\"articleBody\">\n<figure class=\"intro-image intro-left\">\n  <figcaption class=\"caption\">\n<p>Getty Images<\/p>\n<\/figcaption><\/figure>\n<aside id=\"social-left\" class=\"social-left\" aria-label=\"Read the comments or share this article\">\n<\/aside>\n<p><!-- cache hit 71:single\/related:2d9b7bacdc5bb4b8182efbf01b677b32 --><!-- empty --><\/p>\n<p>Malicious hackers have begun exploiting a critical vulnerability in unpatched versions of the Control Web Panel, a widely used interface for web hosting.<\/p>\n<p>\u201cThis is an unauthenticated RCE,\u201d members of the Shadowserver group wrote on Twitter, using the abbreviation for remote code exploit.  \u201cExploitation is trivial and a PoC published.\u201d  PoC refers to a proof-of-concept code that exploits the vulnerability.<\/p>\n<p>The vulnerability is tracked as CVE-2022-44877.  It was discovered by Numan T\u00fcrle of Gais Cyber \u200b\u200bSecurity and patched in October in version 0.9.8.1147.  Advisories didn&#8217;t go public until earlier this month, however, making it likely some users still aren&#8217;t aware of the threat.<\/p>\n<p>Figures provided by Security firm GreyNoise show that attacks began on January 7 and have slowly ticked up since then, with the most recent round continuing through Wednesday.  The company said the exploits are coming from four separate IP addresses located in the US, Netherlands, and Thailand.<\/p>\n<aside class=\"ad_wrapper\" aria-label=\"In Content advertisement\">\n    <span class=\"ad_notice\">Advertisement <\/span>    <\/p>\n<\/aside>\n<p>Shadowserver shows that there are roughly 38,000 IP addresses running Control Web Panel, with the highest concentration in Europe, followed by North America, and Asia.<\/p>\n<p>The severity rating for CVE-2022-44877 is 9.8 out of a possible 10. \u201cBash commands can be run because double quotes are used to log incorrect entries to the system,\u201d the advisory for the vulnerability stated.  As a result, unauthenticated hackers can execute malicious commands during the login process.  The following video demonstrates the flow of the exploit.<\/p>\n<figure class=\"video\">\n<p><div class=\"ast-oembed-container\" style=\"height: 100%;\"><iframe loading=\"lazy\" title=\"Centos Web Panel 7 Unauthenticated Remote Code Execution - CVE-2022-44877\" width=\"500\" height=\"281\" src=\"https:\/\/www.youtube.com\/embed\/kiLfSvc1SYY?feature=oembed\" frameborder=\"0\" allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\" allowfullscreen><\/iframe><\/div>\n<figcaption class=\"caption\">\n<p>Centos Web Panel 7 Unauthenticated Remote Code Execution &#8211; CVE-2022-44877<\/p>\n<\/figcaption><\/figure>\n<p>The vulnerability resides in the \/login\/index.php component and resulted from CWP using a faulty structure when logging incorrect entries, according to the Daily Swig.  The structure is: <code>echo \"incorrect entry, IP address, HTTP_REQUEST_URI\" &gt;&gt; \/blabla\/wrong.log<\/code>.  \u201cSince the request URI comes from the user, and as you can see it is within double quotes, it is possible to run commands such as $(blabla), which is a bash feature,\u201d type told the publication.<\/p>\n<p>Given the ease and severity of exploitation and the availability of working exploit code, organizations using Control Web Panel should ensure they&#8217;re running version 0.9.8.1147 or higher.<\/p>\n<\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>Getty Images Malicious hackers have begun exploiting a critical vulnerability in unpatched versions of the Control Web Panel, a widely used interface for web hosting. \u201cThis is an unauthenticated RCE,\u201d members of the Shadowserver group wrote on Twitter, using the abbreviation for remote code exploit. \u201cExploitation is trivial and a PoC published.\u201d PoC refers to &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/harchi90.com\/vulnerability-with-9-8-severity-in-control-web-panel-is-under-active-exploit\/\"> <span class=\"screen-reader-text\">Vulnerability with 9.8 severity in Control Web Panel is under active exploit<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"default","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false,"jetpack_publicize_feature_enabled":true},"categories":[4],"tags":[],"jetpack_publicize_connections":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v19.10 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Vulnerability with 9.8 severity in Control Web Panel is under active exploit - harchi90<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Vulnerability with 9.8 severity in Control Web Panel is under active exploit - harchi90\" \/>\n<meta property=\"og:description\" content=\"Getty Images Malicious hackers have begun exploiting a critical vulnerability in unpatched versions of the Control Web Panel, a widely used interface for web hosting. \u201cThis is an unauthenticated RCE,\u201d members of the Shadowserver group wrote on Twitter, using the abbreviation for remote code exploit. \u201cExploitation is trivial and a PoC published.\u201d PoC refers to &hellip; Vulnerability with 9.8 severity in Control Web Panel is under active exploit Read More &raquo;\" \/>\n<meta property=\"og:url\" content=\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5\" \/>\n<meta property=\"og:site_name\" content=\"harchi90\" \/>\n<meta property=\"article:published_time\" content=\"2023-01-13T03:06:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/01\/exploit-760x380.jpg\" \/>\n<meta name=\"author\" content=\"islamlacoste58\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:image\" content=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/01\/exploit-760x380.jpg\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"islamlacoste58\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/harchi90.com\/vulnerability-with-9-8-severity-in-control-web-panel-is-under-active-exploit\/\",\"url\":\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5\",\"name\":\"Vulnerability with 9.8 severity in Control Web Panel is under active exploit - harchi90\",\"isPartOf\":{\"@id\":\"https:\/\/harchi90.com\/#website\"},\"datePublished\":\"2023-01-13T03:06:01+00:00\",\"dateModified\":\"2023-01-13T03:06:01+00:00\",\"author\":{\"@id\":\"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b\"},\"breadcrumb\":{\"@id\":\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/harchi90.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Vulnerability with 9.8 severity in Control Web Panel is under active exploit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/harchi90.com\/#website\",\"url\":\"https:\/\/harchi90.com\/\",\"name\":\"harchi90\",\"description\":\"Just another WordPress site\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/harchi90.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b\",\"name\":\"islamlacoste58\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/harchi90.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g\",\"caption\":\"islamlacoste58\"},\"sameAs\":[\"http:\/\/harchi90.com\"],\"url\":\"https:\/\/harchi90.com\/author\/islamlacoste58\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Vulnerability with 9.8 severity in Control Web Panel is under active exploit - harchi90","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5","og_locale":"en_US","og_type":"article","og_title":"Vulnerability with 9.8 severity in Control Web Panel is under active exploit - harchi90","og_description":"Getty Images Malicious hackers have begun exploiting a critical vulnerability in unpatched versions of the Control Web Panel, a widely used interface for web hosting. \u201cThis is an unauthenticated RCE,\u201d members of the Shadowserver group wrote on Twitter, using the abbreviation for remote code exploit. \u201cExploitation is trivial and a PoC published.\u201d PoC refers to &hellip; Vulnerability with 9.8 severity in Control Web Panel is under active exploit Read More &raquo;","og_url":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5","og_site_name":"harchi90","article_published_time":"2023-01-13T03:06:01+00:00","og_image":[{"url":"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/01\/exploit-760x380.jpg"}],"author":"islamlacoste58","twitter_card":"summary_large_image","twitter_image":"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/01\/exploit-760x380.jpg","twitter_misc":{"Written by":"islamlacoste58","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/harchi90.com\/vulnerability-with-9-8-severity-in-control-web-panel-is-under-active-exploit\/","url":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5","name":"Vulnerability with 9.8 severity in Control Web Panel is under active exploit - harchi90","isPartOf":{"@id":"https:\/\/harchi90.com\/#website"},"datePublished":"2023-01-13T03:06:01+00:00","dateModified":"2023-01-13T03:06:01+00:00","author":{"@id":"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b"},"breadcrumb":{"@id":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/news.google.com\/__i\/rss\/rd\/articles\/CBMihAFodHRwczovL2Fyc3RlY2huaWNhLmNvbS9pbmZvcm1hdGlvbi10ZWNobm9sb2d5LzIwMjMvMDEvdnVsbmVyYWJpbGl0eS13aXRoLTktOC1zZXZlcml0eS1pbi1jb250cm9sLXdlYi1wYW5lbC1pcy11bmRlci1hY3RpdmUtZXhwbG9pdC_SAYgBaHR0cHM6Ly9hcnN0ZWNobmljYS5jb20vaW5mb3JtYXRpb24tdGVjaG5vbG9neS8yMDIzLzAxL3Z1bG5lcmFiaWxpdHktd2l0aC05LTgtc2V2ZXJpdHktaW4tY29udHJvbC13ZWItcGFuZWwtaXMtdW5kZXItYWN0aXZlLWV4cGxvaXQvYW1wLw?oc=5#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/harchi90.com\/"},{"@type":"ListItem","position":2,"name":"Vulnerability with 9.8 severity in Control Web Panel is under active exploit"}]},{"@type":"WebSite","@id":"https:\/\/harchi90.com\/#website","url":"https:\/\/harchi90.com\/","name":"harchi90","description":"Just another WordPress site","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/harchi90.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/harchi90.com\/#\/schema\/person\/0689156e87fbe869f0e5efdeef200d5b","name":"islamlacoste58","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/harchi90.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5bf7491076e3822b8e0de7b1f9364d75?s=96&d=mm&r=g","caption":"islamlacoste58"},"sameAs":["http:\/\/harchi90.com"],"url":"https:\/\/harchi90.com\/author\/islamlacoste58\/"}]}},"jetpack_featured_media_url":"","jetpack-related-posts":[{"id":188908,"url":"https:\/\/harchi90.com\/researchers-to-release-poc-exploit-for-critical-zoho-rce-bug-patch-now\/","url_meta":{"origin":185199,"position":0},"title":"Researchers to release PoC exploit for critical Zoho RCE bug, patch now","date":"January 17, 2023","format":false,"excerpt":"Proof-of-concept exploit code will be released later this week for a critical vulnerability allowing remote code execution (RCE) without authentication in several VMware products. Tracked as CVE-2022-47966, this pre-auth RCE security flaw is due to using an outdated and vulnerable third-party dependency, Apache Santuario. Successful exploitation enables unauthenticated threat actors\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"Zoho","src":"https:\/\/i0.wp.com\/www.bleepstatic.com\/content\/hl-images\/2023\/01\/16\/ZOHO_headpic.jpeg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":188308,"url":"https:\/\/harchi90.com\/hackers-exploit-cacti-critical-bug-to-install-malware-open-reverse-shells\/","url_meta":{"origin":185199,"position":1},"title":"Hackers exploit Cacti critical bug to install malware, open reverse shells","date":"January 16, 2023","format":false,"excerpt":"More than 1,600 instances of the Cacti device monitoring tool reachable over the internet are vulnerable to a critical security issue that hackers have already started to exploit. Cacti is an operational and fault management monitoring solution for network devices that also provides graphical visualization. There are thousands of instances\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"Hackers exploit Cacti critical bug to open reverse shells","src":"https:\/\/i0.wp.com\/www.bleepstatic.com\/content\/hl-images\/2022\/09\/15\/cyber-smiley.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]},{"id":62432,"url":"https:\/\/harchi90.com\/microsoft-finds-tiktok-vulnerability-that-allowed-one-click-account-compromises\/","url_meta":{"origin":185199,"position":2},"title":"Microsoft finds TikTok vulnerability that allowed one-click account compromises","date":"September 1, 2022","format":false,"excerpt":"Getty Images Microsoft said on Wednesday that it recently identified a vulnerability in TikTok's Android app that could allow attackers to hijack accounts when users did nothing more than click on a single errant link. The software maker said it notified TikTok of the vulnerability in February and that the\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":189914,"url":"https:\/\/harchi90.com\/more-than-4400-sophos-firewall-servers-remain-vulnerable-to-critical-exploits\/","url_meta":{"origin":185199,"position":3},"title":"More than 4,400 Sophos firewall servers remain vulnerable to critical exploits","date":"January 18, 2023","format":false,"excerpt":"Getty Images More than 4,400 Internet-exposed servers are running versions of the Sophos Firewall that's vulnerable to a critical exploit that allows hackers to execute malicious code, a researcher has warned. CVE-2022-3236 is a code injection vulnerability allowing remote code execution in the User Portal and Webadmin of Sophos Firewalls.\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":122410,"url":"https:\/\/harchi90.com\/patches-for-6-zero-days-under-active-exploit-are-now-available-from-microsoft\/","url_meta":{"origin":185199,"position":4},"title":"Patches for 6 zero-days under active exploit are now available from Microsoft","date":"November 9, 2022","format":false,"excerpt":"It's the second Tuesday of the month, and that means it's Update Tuesday, the monthly release of security patches available for nearly all software Microsoft supports. This time around, the software maker has fixed six zero-days under active exploit in the wild, along with a wide range of other vulnerabilities\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":168621,"url":"https:\/\/harchi90.com\/enlbufferpwn-critical-vulnerability-disclosed-in-3ds-wii-u-and-switch-games\/","url_meta":{"origin":185199,"position":5},"title":"ENLBufferPwn: Critical vulnerability disclosed in 3DS, Wii U, and Switch games","date":"December 26, 2022","format":false,"excerpt":"Nintendo hacker PabloMK7 has released ENLBufferPwn, an exploit including proof of concept code, which demonstrates a critical vulnerability in multiple Nintendo first party games. Demo videos of the exploit show that it is possible to take full control of a target's console, simply by having them join a multiplayer game.\u2026","rel":"","context":"In &quot;Technology&quot;","img":{"alt_text":"","src":"https:\/\/i0.wp.com\/wololo.net\/wagic\/wp-content\/uploads\/2022\/12\/ENLBufferPwn-1024x603.jpg?resize=350%2C200&ssl=1","width":350,"height":200},"classes":[]}],"fifu_image_url":"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2023\/01\/exploit-760x380.jpg","_links":{"self":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/185199"}],"collection":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/comments?post=185199"}],"version-history":[{"count":0,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/posts\/185199\/revisions"}],"wp:attachment":[{"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/media?parent=185199"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/categories?post=185199"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/harchi90.com\/wp-json\/wp\/v2\/tags?post=185199"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}