{"uuid": "0258c93e-91e5-4491-bf67-50a5eaa3305f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-48788", "type": "exploited", "source": "https://t.me/KomunitiSiber/1798", "content": "Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign\nhttps://thehackernews.com/2024/04/hackers-exploit-fortinet-flaw-deploy.html\n\nCybersecurity researchers have discovered a new campaign that's exploiting a recently disclosed security flaw in Fortinet FortiClient EMS devices to deliver ScreenConnect and Metasploit Powerfun payloads.\nThe activity entails the exploitation of\u00a0CVE-2023-48788\u00a0(CVSS score: 9.3), a critical SQL injection flaw that could permit an unauthenticated attacker to execute unauthorized code or", "creation_timestamp": "2024-04-17T14:29:08.000000Z"}