Reportedly, a zero-day exploit targeting VMware ESXi Shell Service is available for purchase. The exploit enables an authentication bypass, allowing remote file uploads by the vpxuser into the /scratch directory. The package includes an auto-exploitation Python script designed to generate and deliver malicious packets. The asking price for this exploit is $1,500,000 payable via Monero. To execute the exploit successfully, the ESXi shell service must be enabled on the target host, IPv4 must be set as primary (IPv6 is not supported), and the target system must be running vSphere ESXi 7.x/8.x.
Zero-Day VMware ESXi Shell Service Exploit Emerges for Sale at $1.5 Million
Related Posts
Popular Stories
-
SudamericaData Breach Exposes Over 1TB of Argentine Records
-
Threat Actor Claims Sale of Dell Database Containing 49 Million Customer Records
-
SUUMO, CHINTAI, At Home, HOME’S Suffer Data Breach
-
Financial Tech Giant SilverLake Axis Allegedly Breached – 423GB of Data for Sale
-
Telekom Serbia Investigates Leak of 160,000 Customer Records
