Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware

April 22, 2025

Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware

Threat actors are exploiting bulletproof hosting service Proton66 for malicious activities, including campaigns from SuperBlack ransomware operators, Android malware distribution via hacked WordPress, …

Published Date:
Apr 22, 2025 (1 hour, 6 minutes ago)

Vulnerabilities has been mentioned in this article.

CVE-2025-0108

CVE-2024-10914

CVE-2024-41713

Source: Read More

Previous ArticleDOGE Big Balls Ransomware Outlook

Next Article PoC exploit for critical Erlang/OTP SSH bug is public (CVE-2025-32433)

Highlights

CVE-2025-23170 – Versa Networks Shell-In-A-Box Python Command Injection Vulnerability

June 18, 2025

CVE ID : CVE-2025-23170

Published : June 19, 2025, 12:15 a.m. | 1 hour, 47 minutes ago

Description : The Versa Director SD-WAN orchestration platform includes functionality to initiate SSH sessions to remote CPEs and the Director shell via Shell-In-A-Box. The underlying Python script, shell-connect.py, is vulnerable to command injection through the user argument. This allows an attacker to execute arbitrary commands on the system.

Exploitation Status:

Versa Networks is not aware of any reported instance where this vulnerability was exploited. Proof of concept for this vulnerability has been disclosed by third party security researchers.

Workarounds or Mitigation:

There are no workarounds to disable the GUI option. Versa recommends that Director be upgraded to one of the remediated software versions.

Severity: 6.7 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

CodeSOD: A Unique Way to Primary Key

BrowserStack launches Figma plugin for detecting accessibility issues in design phase

Parasoft brings agentic AI to service virtualization in latest release

Node.js vs. Python for Backend: 7 Reasons C-Level Leaders Choose Node.js Talent

The best CRM software with email marketing in 2025: Expert tested and reviewed

This multi-port car charger can power 4 gadgets at once – and it’s surprisingly cheap

I’m a wearables editor and here are the 7 Pixel Watch 4 rumors I’m most curious about

8 ways I quickly leveled up my Linux skills – and you can too

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

The Intersection of Agile and Accessibility – A Series on Designing for Everyone

Zero Trust & Cybersecurity Mesh: Your Org’s Survival Guide

Execute Ping Commands and Get Back Structured Data in PHP

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

A Tomb Raider composer has been jailed — His legacy overshadowed by $75k+ in loan fraud

“I don’t think I changed his mind” — NVIDIA CEO comments on H20 AI GPU sales resuming in China following a meeting with President Trump

Galaxy Z Fold 7 review: Six years later — Samsung finally cracks the foldable code

Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware

Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware

CVE-2025-44658 – Netgear RAX30 PHP-FPM Misconfigured Extension Bypass Vulnerability

CVE-2025-7393 – Drupal Mail Login Authentication Bypass

Trello adds 4 major project management features I didn’t know I needed – and they’re free

Clothing Retailer Todd Snyder Penalized $345,178 Over Consumer Privacy Failures

CVE-2025-6483 – “Simple Pizza Ordering System SQL Injection Vulnerability”

CVE-2025-3742 – WordPress Responsive Lightbox & Gallery Stored Cross-Site Scripting Vulnerability

CVE-2025-23170 – Versa Networks Shell-In-A-Box Python Command Injection Vulnerability

CVE-2025-47688 – Saad Iqbal Advanced File Manager Missing Authorization Vulnerability

CVE-2025-37093 – HPE StoreOnce Authentication Bypass Vulnerability

CVE-2025-29662 – LandChat Remote Code Execution (RCE)

Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware

Russian Host Proton66 Tied to SuperBlack and WeaXor Ransomware

Related Posts