Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

CVE-2023-4966: Exploitation of Citrix NetScaler Information Disclosure Vulnerability

CVE-2023-20198: Active Exploitation of Cisco IOS XE Zero-Day Vulnerability

Multiple Vulnerabilities in South River Technologies Titan MFT and Titan SFTP [FIXED]

CVE-2023-22515: Zero-Day Privilege Escalation in Confluence Server and Data Center

CVE-2023-4528: Java Deserialization Vulnerability in JSCAPE MFT (Fixed)

Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities

Widespread Exploitation of Zyxel Network Devices

CVE-2023-27350: Ongoing Exploitation of PaperCut Remote Code Execution Vulnerability

Raptor Technologies Volunteer Management Client-Side Security Controls (FIXED)

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

Multiple Vulnerabilities in Rocket Software UniRPC server (Fixed)

CVE-2023-0391: MGT-COMMERCE CloudPanel Shared Certificate Vulnerability and Weak Installation Procedures

Microsoft Defender for Cloud Management Port Exposure Confusion

CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability

Multiple DMS XSS (CVE-2022-47412 through CVE-20222-47419)

CVE-2023-22374: F5 BIG-IP Format String Vulnerability

Exploitation of Control Web Panel CVE-2022-44877

CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability

Refreshing Rapid7's Coordinated Vulnerability Disclosure Policy

CVE-2022-41080, CVE-2022-41082: Rapid7 Observed Exploitation of `OWASSRF` in Exchange for RCE

Cengage LTI Session Management Leakage