WTB: Remote Mac Exploitation Via Custom URL Schemes
anomali.com · Undated · Licence: TRAM repository license; underlying reports not cleared for redistribution
CVEs this report names
1 CVE- CVE-2018-11776Apache Struts Remote Code Execution VulnerabilityApache · StrutsKEVPublic exploitHigh · 8.1T1190Exploit Public-Facing ApplicationT1059Command and Scripting Interpreter+1 more · 1 report>99.9%Top 0.01%82.5priority
Where it names them
CVE-2018-11776 Original (opens in a new tab) ↗
The vulnerability, which is known as CVE-2018-11776, comes from an improper validation of namespace input data, and threat actors have already exploited this to install a CNRig cryptocurrency miner on machines.
Techniques drawn from this report
NoneNo passage in this report has been tied to an ATT&CK technique.