Tag
Multiple Vulnerabilities in Progress Software MOVEit Transfer
4 TTPsMultiple vulnerabilities in Progress Software MOVEit Transfer allow attackers to bypass security measures, achieve elevated privileges, and manipulate or disclose sensitive data, including the ability to perform Cross-Site-Scripting (XSS) attacks.
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Vulnerability Allows Privilege Escalation and RCE
3 TTPs 4 CVEsA critical insecure direct object reference (IDOR) vulnerability, CVE-2026-28302, in SolarWinds Serv-U allows authenticated group administrators to achieve privilege escalation and remote code execution as root.
electerm Path Traversal Vulnerability in Zmodem and Trzsz Download Handling (CVE-2026-49253)
3 TTPsA path traversal vulnerability exists in electerm's Zmodem and Trzsz file download handlers (CVE-2026-49253), allowing a malicious SSH server to send specially crafted filenames (e.g., `../escaped.txt`) that, when accepted by the user, can cause files to be written to arbitrary locations on the user's filesystem, potentially overwriting sensitive files or introducing malicious content.
Potential File Transfer via Curl for Windows
2 rules 3 TTPsAdversaries may abuse Curl for Windows to download files or upload data to a remote URL for command and control or exfiltration purposes.
Ingress Transfer via Windows BITS
2 rules 2 TTPsAdversaries leverage the Windows Background Intelligent Transfer Service (BITS) to download executable and archive files, potentially delivering malicious payloads while evading traditional security measures.