Vulnerability Attack Case: Installation of a Web Shell and Execution of a Scanner by Exploiting a Telerik UI Vulnerability

Vulnerability Attack Case: Installation of a Web Shell and Execution of a Scanner by Exploiting a Telerik UI Vulnerability

The AhnLab SEcurity intelligence Center (ASEC) has identified two vulnerability attack cases that exploited a remote code execution vulnerability (CVE-2019-18935) targeting unpatched Telerik UI for ASP.NET AJAX servers. In the first incident, after exploiting the vulnerability, the attacker executed a reverse shell, attempted to perform privilege escalation, and installed a

Telerik Report Server Security Update Advisory (CVE-2024-8015)

Overview   An update has been released to address vulnerabilities in Telerik Report Server. Users...

Telerik Report Server Product Security Update Advisory (CVE-2024-6327)

Overview Telerik Report Server has released an update to address a vulnerability in their product....