#TelerikUI
ASEC reported two attacks exploiting CVE-2019-18935 on unpatched Telerik UI for ASP.NET AJAX servers: one deployed a reverse shell, privilege escalation, and a web shell; the other ran a Rust scanner via Telegram. #TelerikUI #Godzilla #Telegram
Vulnerability Attack Case: Installation Of A Web Shell And Execution Of A Scanner By Exploiting A Telerik UI Vulnerability
AhnLab SEcurity intelligence Center (ASEC) reported two attack cases abusing CVE-2019-18935 against unpatched Telerik UI for ASP.NET AJAX servers, where one intruder used a reverse shell, privilege escalation, and a Godzilla-style web shell. Another attacker used the same flaw to launch a Rust-based scanner that searched for exposed WordPress pages and...
www.hendryadrian.com
September 28, 2026 at 8:45 AM