BTC $68279.0927
ETH $3629.5433
BNB $418.8260
SOL $133.0943
XRP $0.6497
stETH $3620.7348
ADA $0.7707
DOGE $0.1827
AVAX $43.0376
DOT $9.8988
wstETH $4204.4051
TRX $0.1402
LINK $20.4333
WETH $3627.8562
MATIC $1.1461
WBTC $68015.7231
UNI $12.3628
BCH $469.5171
LTC $88.8112
IMX $3.1360
ICP $13.3800
CAKE $3.3523
ETC $35.9657
FIL $10.0244
LEO $4.8744
ATOM $12.4782
TON $2.7811
HBAR $0.1174
RNDR $7.3750
KAS $0.1614
INJ $40.6866
DAI $0.9990
OKB $56.8390
VET $0.0495
PEPE $0.0000
XLM $0.1458
FDUSD $0.9965
STX $3.0333
XMR $148.4317
WEMIX $2.7041
LDO $3.2821
NEAR $4.3354
GRT $0.3080
ARB $1.9787
THETA $2.3471
APEX $2.6824
BSV $115.5449
BTC $68279.0927
ETH $3629.5433
BNB $418.8260
SOL $133.0943
XRP $0.6497
stETH $3620.7348
ADA $0.7707
DOGE $0.1827
AVAX $43.0376
DOT $9.8988
wstETH $4204.4051
TRX $0.1402
LINK $20.4333
WETH $3627.8562
MATIC $1.1461
WBTC $68015.7231
UNI $12.3628
BCH $469.5171
LTC $88.8112
IMX $3.1360
ICP $13.3800
CAKE $3.3523
ETC $35.9657
FIL $10.0244
LEO $4.8744
ATOM $12.4782
TON $2.7811
HBAR $0.1174
RNDR $7.3750
KAS $0.1614
INJ $40.6866
DAI $0.9990
OKB $56.8390
VET $0.0495
PEPE $0.0000
XLM $0.1458
FDUSD $0.9965
STX $3.0333
XMR $148.4317
WEMIX $2.7041
LDO $3.2821
NEAR $4.3354
GRT $0.3080
ARB $1.9787
THETA $2.3471
APEX $2.6824
BSV $115.5449
  • Catalog
  • Blog
  • Tor Relay
  • Jabber
  • One-Time notes
  • Temp Email
  • What is TOR?
  • We are in tor
  • Attackers are actively exploiting a critical vulnerability in CWP


    The security flaw allows privilege escalation and arbitrary code execution.

    The security flaw is tracked as CVE-2022-44877 and has a CVSS score of 9.8. The bug affects all CWP versions up to 0.9.8.1147 and was fixed by the developers on October 25, 2022.

    Control Web Panel (formerly known as CentOS Web Panel) is a popular server administration tool for corporate Linux systems.

    "The login/index.php file in CWP versions prior to 0.9.8.1147 allows remote attackers to execute arbitrary commands using metacharacters in login parameters," according to NIST.

    The vulnerability was discovered by Gais Security specialist Newman Turl, and its active exploitation began on January 6, 2023, immediately after the PoC hit the network.

     Hackers are trying to exploit a recently patched critical vulnerability in Control Web Panel (CWP) that allows privilege escalation and arbitrary code execution on affected servers.

    GreyNoise reported that it was able to fix four unique IP addresses trying to use CVE-2022-44877. Two of them are in the US and one each in the Netherlands and Thailand.

    Author DeepWeb
    0-day vulnerability affected SugarCRM servers
    25% of US Interior Ministry passwords are cracked in 90 minutes

    Comments 0

    Add comment