Author

Glenn Thorpe

CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability

CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability

CVE-2022-41080, CVE-2022-41082: Rapid7 Observed Exploitation of `OWASSRF` in Exchange for RCE

CVE-2022-27518: Critical Fix Released for Exploited Citrix ADC, Gateway Vulnerability

CVE-2022-42475: Critical Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported

CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies

Active Exploitation of Atlassian’s Questions for Confluence App CVE-2022-26138

Active Exploitation of VMware Horizon Servers

Patch Now: SonicWall Fixes Multiple Vulnerabilities in SMA 100 Devices

Oh No, Zoho: Active Exploitation of CVE-2021-44077 Allowing Unauthenticated Remote Code Execution

Ongoing Exploitation of Windows Installer CVE-2021-41379

NPM Library (ua-parser-js) Hijacked: What You Need to Know

Critical vCenter Server File Upload Vulnerability (CVE-2021-22005)

Popular Attack Surfaces, August 2021: What You Need to Know