References https://www.anquanke.com/post/id/291576 https://www.ithome.com.tw/news/162579 https://avd.aliyun.com/detail?id=AVD-2023-48365 https://www.yijinglab.com/industry/20231204082628 https://www.163.com/dy/article/IKTA7EJS0511A5GF.html https://www.cyclonis.com/zh-hant/cactus-ransomware-abuses-vulnerabilities/ https://cn.t00ls.com/articles-70811.html https://jingyizy.cn/newsinfo/6617435.html https://www.sentinelone.com/vulnerability-database/cve-2023-41265/ https://vulners.com/nuclei/NUCLEI:CVE-2023-41265 https://vi.loginsoft.com/cve/CVE-2023-41265 https://radar.offseq.com/threat/cve-2023-41265-na-29d4cd23 https://firecompass.com/critical-cves-and-active-threats-owncloud-apache-solawinds-qliksense/ https://tuxcare.com/blog/cactus-ransomware/ https://arcticwolf.com/resources/blog/cve-2023-41265-cve-2023-41266-cve-2023-48365/ https://community.qlik.com/t5/Official-Support-Articles/Critical-Security-fixes-for-Qlik-Sense-Enterprise-for-Windows/ta-p/2120325 https://www.praetorian.com/blog/doubleqlik-bypassing-the-original-fix-for-cve-2023-41265/ https://nvd.nist.gov/vuln/detail/cve-2023-41265 https://www.praetorian.com/blog/qlik-sense-technical-exploit/ https://www.rapid7.com/db/vulnerabilities/qlik-sense-enterprise-cve-2023-41265/ https://vulners.com/cve/CVE-2023-41265 https://www.tenable.com/cve/CVE-2023-41265 https://app.opencve.io/cve/?vendor=qlik
Related VulnerabilitiesPoCpfsense-default-login: pfSense - Default Admin CredentialsPoCCVE-2020-23015: OPNsense <=20.1.5 - Open RedirectPoCCVE-2021-41282: pfSense - Arbitrary File WritePoCCVE-2022-2034: WordPress Sensei LMS <4.5.0 - Information DisclosurePoCCVE-2022-31814: pfSense pfBlockerNG <=2.1..4_26 - OS Command InjectionPoCCVE-2022-40624: pfSense pfBlockerNG - OS Command InjectionPoCCVE-2023-39002: OPNsense - Cross-Site ScriptingPoCCVE-2023-39007: OPNsense - Cross-Site Scripting to RCEPoCCVE-2023-41265: Qlik Sense Enterprise - HTTP Request SmugglingPoCCVE-2023-41266: Qlik Sense Enterprise - Path TraversalPoCCVE-2024-7786: Sensei LMS < 4.24.2 - Email Template LeakPoCsmartsense-default-login: HortonWorks SmartSense Default Login