Dossier
Qinglong task scheduling tool
Coverage of Qinglong task scheduling tool in the Nexus archive.
- Hackers exploit RCE flaws in Qinglong task scheduler for cryptomining
Hackers are exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy cryptominers on developers' servers. The vulnerabilities allow unauthorized access, enabling malicious actors to execute remote code and mine cryptocurrency.