CVE
CVE-2021-32305
WebSVN before 2.6.1 allows remote attackers to execute arbitrary commands via shell metacharacters in the search parameter.
Exploitation IoCs 9
Domain claude-pro[.]com
Domain gouvvbo[.]top
Domain license[.]claude-pro[.]com
Domain sylverixstrategy[.]com
Domain update-crowdstrike[.]com
Domain update-sentinelone[.]com
Domain update-trellix[.]com
Domain vertextrust-advisors[.]com
IP 43[.]106[.]71[.]28
MITRE ATT&CK TTPs 9
T1027 T1048 T1053.005 T1055 T1070.004 T1071.001 T1082 T1204.002 T1566
Obfuscated Files or Information
Defense Evasion
Exfiltration Over Alternative Protocol
Exfiltration
Scheduled Task
Execution
Process Injection
Defense Evasion
File Deletion
Defense Evasion
Web Protocols
Command And Control
System Information Discovery
Discovery
Malicious File
Execution
Phishing
Initial Access