Lucene search
HiveForce LabsHIVEPRO:30E89F2287EA6C272E661C0EAB56C14DHistorySep 07, 2023 - 1:30 p.m.
DreamBus Botnet Exploiting A Critical Vulnerability in Apache RocketMQ
2023-09-0713:30:03
HiveForce Labs
www.hivepro.com
25
apache rocketmq
critical vulnerability
remote code execution
dreambus botnet
system updates
threat advisory
hiveforce labs
0.973 High
EPSS
Percentile
99.9%
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary A critical vulnerability (CVE-2023-33246) in Apache RocketMQ servers enables remote code execution, leading to a surge in attacks, including the deployment of the DreamBus malware. Timely system updates are crucial to defend against these threats. To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.
Related
prion
prion
Design/Logic Flaw
2023-05-24 15:15:00
Design/Logic Flaw
2023-07-12 10:15:00
cisa_kev
cisa_kev
Apache RocketMQ Command Execution Vulnerability
2023-09-06 00:00:00
hivepro
hivepro
Attacks, Vulnerabilities and Actors 4 September to 10 September 2023
2023-09-12 05:39:44
nvd
nvd
CVE-2023-33246
2023-05-24 15:15:09
CVE-2023-37582
2023-07-12 10:15:11
packetstorm
packetstorm
Apache RocketMQ 5.1.0 Arbitrary Code Injection
2023-07-07 00:00:00
metasploit
metasploit
Apache RocketMQ update config RCE
2023-07-05 16:38:51
Apache RocketMQ Version Scanner
2023-06-07 21:29:53
githubexploit
githubexploit
Exploit for Code Injection in Apache Rocketmq
2023-06-01 02:17:20
Exploit for Code Injection in Apache Rocketmq
2024-06-29 06:31:17
Exploit for Code Injection in Apache Rocketmq
2023-06-07 01:01:26
github
github
cvelist
cvelist
attackerkb
attackerkb
CVE-2023-33246
2023-05-24 00:00:00
osv
osv
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
2023-07-06 21:15:04
CVE-2023-33246
2023-05-24 15:15:09
RocketMQ NameServer component Code Injection vulnerability
2023-07-12 12:31:36
thn
thn
cnvd
cnvd
Apache RocketMQ Command Execution Vulnerability
2023-05-28 00:00:00
zdt
zdt
Apache RocketMQ 5.1.0 Arbitrary Code Injection Exploit
2023-07-10 00:00:00
cve
cve
CVE-2023-33246
2023-05-24 15:15:09
CVE-2023-37582
2023-07-12 10:15:11
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-07-07 19:26:23
veracode
veracode
Remote Code Execution (RCE)
2023-05-25 02:04:34
Arbitrary Code Injection
2023-07-21 10:22:11
ibm
ibm
nessus
nessus
Apache RocketMQ < 4.9.7 / 5.x < 5.1.2 RCE (CVE-2023-37582)
2023-11-10 00:00:00