Padding oracle attacks

Released exploit chain reaches code execution on Telerik installs hardened with a custom upload key

Progress fixed the chain on July 8, and TantoSec published the method plus a working tool on September 7, so the exposed installs are the ones where an administrator set the explicit upload encryption key Telerik recommends.