(May 2026) TL;DR: an email address like atouch${IFS}/tmp/[email protected] gave any registered user code execution on its backend. From there, we made our account a superuser, impersonated Bash’s maintainer, and confirmed we could add an SSH key with push access to the upstream Bash repository. An unpatched kernel gave us root... Weiterlesen: Securing Internet-Critical Software: How We Could Have Backdoored Bash
Intelligence View
⚡ tsecurity.de Intelligence
Securing Internet-Critical Software: How We Could Have Backdoored Bash
(May 2026) TL;DR: an email address like atouch${IFS}/tmp/[email protected] gave any registered user code execution on its backend. From there,…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
🔍 CTI & Forensik
2
Cyber Threat Intelligence & Forensik
ATT&CK-Navigator · IoC-Radar · Exploit-Belege
MITRE ATT&CK Matrix Navigator
T1190TA0001 · Initial Access
Exploit Public-Facing Application
Mitigation: M1042 Network Segmentation & WAF Rule Enforcement
Quelle: Kontext-Klassifikation des Artikeltextes
Initial Access
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
Powered by tsecurity.de
tsecurity.de Hub
Zeka Digest - ücretsiz Günlük en önemli güvenlik haberi · herhangi bir zamanda alınabilir
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Hiçbir okuyucu henüz yorum yok
Bu sayfa yararlı mıydı?
0
Powered by tsecurity.de
tsecurity.de Hub
İlgili Story Cluster & Kaynaklar (vector AI)
30 Kaynaklar
CVE-2024-13362 | Post SMTP Plugin on WordPress Parameter url cross site scripting
29 diğer kaynaklar
VVulDB Updatesvor 2 Std.CVE-2024-13362 | Lightbox & Modal Popup Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | XT Floating Cart for WooCommerce Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Internal Link Juicer Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Knowledge Base Documentation & Wiki Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Independent Analytics Plugin on WordPress Parameter url cross site scripting VVulDB Updatesvor 2 Std.CVE-2024-13362 | Optimized Minify Plugin on WordPress Parameter url cross site scripting
+23
12 Kaynaklar
CVE-2026-53317 | Linux Kernel up to 6.12.90/6.18.32/7.0.9 wifi denial of service
11 diğer kaynaklar
VVulDB Updatesvor 3 Std.CVE-2026-53258 | Linux Kernel up to 6.18.35/7.0.12 wifi cfg80211_scan int_scan_req memory leak VVulDB Updatesvor 6 Std.CVE-2026-43042 | Linux Kernel up to 6.19.11 mpls platform_label out-of-bounds VVulDB Updatesvor 6 Std.CVE-2026-43185 | Linux Kernel up to 6.18.15/6.19.5 smb_direct_prepare_negotiation buffer overflow VVulDB Updatesvor 5 Std.CVE-2026-43244 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 kcm_write_msgs null pointer dereference VVulDB Updatesvor 5 Std.CVE-2026-43271 | Linux Kernel up to 6.6.127/6.12.74/6.18.15/6.19.5 process_metadata_update null pointer dereference VVulDB Updatesvor 5 Std.CVE-2026-43250 | Linux Kernel up to 6.12.74/6.18.15/6.19.5 ChipIdea UDC Driver _ep_nuke memory corruption
+5
8 Kaynaklar
GitHub - HappyHackingSpace/claude-code-backdoor-check: Read-only scanner for the backdoored Claude Code 2.1.313 extension (Cursor marketplace, Oct 2026): SSH key, persistence, reverse tunnel. macOS + Linux.
7 diğer kaynaklar
IIT Security Newsvor 2 Std.Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor GGBHackers Securityvor 2 Std.Hackers Distribute Malicious Claude Code Extension on Cursor Marketplace to Install Persistent SSH Backdoor DDEV Communityvor 2 Std.Claude Code for VS Code 2.1.313 backdoor: how to check your machine and clean up GGoogle Alertvor 3 Std.Claude-Code-Erweiterung im Cursor-Marktplatz mit Malware infiziert | heise online KKitPloitvor 5 Std.claude-code-backdoor-check CCyber Security Newsvor 5 Std.Microsoft Warns of Trojanized Claude Code Extension Planting Persistent SSH Backdoor
+1
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/tr/4310779/linux-ipular-ve-sertletirme/securing-internet-critical-software-how-we-could-have-backdoored-bash/