Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Widespread Exploitation of Zyxel Network Devices

CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability

Raptor Technologies Volunteer Management Client-Side Security Controls (FIXED)

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

Multiple Vulnerabilities in Rocket Software UniRPC server (Fixed)

CVE-2023-0391: MGT-COMMERCE CloudPanel Shared Certificate Vulnerability and Weak Installation Procedures

Microsoft Defender for Cloud Management Port Exposure Confusion

CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability

Multiple DMS XSS (CVE-2022-47412 through CVE-20222-47419)

CVE-2023-22374: F5 BIG-IP Format String Vulnerability

Exploitation of Control Web Panel CVE-2022-44877

CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability

Refreshing Rapid7's Coordinated Vulnerability Disclosure Policy

CVE-2022-41080, CVE-2022-41082: Rapid7 Observed Exploitation of `OWASSRF` in Exchange for RCE

Cengage LTI Session Management Leakage

CVE-2022-42475: Critical Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported

CVE-2022-4261: Rapid7 Nexpose Update Validation Issue (FIXED)

CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures

Rapid7’s Impact from OpenSSL Buffer Overflow Vulnerabilities (CVE-2022-3786 & CVE-2022-3602)

Rapid7’s Impact from Apache Commons Text Vulnerability (CVE-2022-42889)

CVE-2021-39144: VMware Cloud Foundation Unauthenticated Remote Code Execution