I found the missing link to give my home media server remote access and it only took a few minutes to set it up.
However, because people tend to leave their servers running without updating, hackers are still using Plex2Shell to break ...
In simple terms, the exploit chain combines four bugs that work together, allowing the attacker to trick the Plex server into handing over the owner’s admin token. A harmful file is then planted that ...
TL;DR: Attackers are exploiting a chain of Plex Media Server vulnerabilities to install unauthorised cryptocurrency miners ...
Attackers exploit Plex2Shell flaws to install crypto miners and proxy software. Admins should update their Plex Media Server.
Attackers exploit four Plex Media Server flaws chained as Plex2Shell to deploy XMRig miners and reverse proxy software after PoC release.
Remote code execution is now available on non-updated Plex servers.
Recently fixed vulnerabilities in the Plex Media Server are under active exploitation in attacks that, when successful, install malware, including cryptominers and residential proxy apps, a researcher ...