New PoC Exploit for Apache ActiveMQ Flaw Could Let Attackers Fly Under the Radar

November 16, 2023 | Cybernews

A critical security flaw in Apache ActiveMQ, known as CVE-202346604, allows for arbitrary code execution in memory, enabling threat actors to remotely run arbitrary shell commands and deploy ransomware strains like TellYouThePass and a remote access trojan called SparkRAT.