Attackers are chaining two AhsayCBS bugs to plant webshells and mine cryptocurrency on exposed systems, with no vendor fix yet.