Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Coverage Plus Context Equals Intelligent Exposure Management

Multiple Brother Devices: Multiple Vulnerabilities (FIXED)

BlackSuit Continues Social Engineering Attacks in Wake of Black Basta’s Internal Conflict

CVE-2025-48045, CVE-2025-48046, CVE-2025-48047: MICI NetFax Server Product Vulnerabilities (NOT FIXED)

Anna Katarina Quinn

NSIS Abuse and sRDI Shellcode: Anatomy of the Winos 4.0 Campaign

Anna Širokova, Ivan Feigl

Multiple vulnerabilities in Ingress NGINX Controller for Kubernetes

Xerox Versalink C7025 Multifunction Printer: Pass-Back Attack Vulnerabilities (FIXED)

Lorex 2K Indoor Wi-Fi Security Camera: Multiple Vulnerabilities (FIXED)

New “CleverSoar” Installer Targets Chinese and Vietnamese Users

Natalie Zargarov

Malware Campaign Lures Users With Fake W2 Form

Metasploit Weekly Wrap-Up 7/19/2024

Christophe De La Fuente

CVE-2024-4978: Backdoored Justice AV Solutions Viewer Software Used in Apparent Supply Chain Attack

CVE-2024-0394: Rapid7 Minerva Armor Privilege Escalation (FIXED)

Dani Kamanovsky

Backdoored XZ Utils (CVE-2024-3094)

How To Hunt For UEFI Malware Using Velociraptor

CVE-2023-47218: QNAP QTS and QuTS Hero Unauthenticated Command Injection (FIXED)

CVE-2023-49103 - Critical Information Disclosure in ownCloud Graph API

CVE-2023-5950 Rapid7 Velociraptor Reflected XSS

CVE-2023-47246: SysAid Zero-Day Vulnerability Exploited By Lace Tempest

Rapid7-Observed Exploitation of Atlassian Confluence CVE-2023-22518

Suspected Exploitation of Apache ActiveMQ CVE-2023-46604