Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

CVE-2022-42475: Critical Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported

CVE-2022-4261: Rapid7 Nexpose Update Validation Issue (FIXED)

CVE-2022-41622 and CVE-2022-41800 (FIXED): F5 BIG-IP and iControl REST Vulnerabilities and Exposures

Rapid7’s Impact from OpenSSL Buffer Overflow Vulnerabilities (CVE-2022-3786 & CVE-2022-3602)

Rapid7’s Impact from Apache Commons Text Vulnerability (CVE-2022-42889)

CVE-2021-39144: VMware Cloud Foundation Unauthenticated Remote Code Execution

CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies

Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER Services Software

CVE-2022-30526 (Fixed): Zyxel Firewall Local Privilege Escalation

CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

CVE-2022-0847: Arbitrary File Overwrite Vulnerability in Linux Kernel

Metasploit Weekly Wrap-Up: Mar. 4, 2022

Russia/Ukraine Conflict: What Is Rapid7 Doing to Protect My Organization?

Staying Secure in a Global Cyber Conflict

Active Exploitation of VMware Horizon Servers

The Everyperson’s Guide to Log4Shell (CVE-2021-44228)

Using InsightVM to Find Apache Log4j CVE-2021-44228

Driver-Based Attacks: Past and Present

Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs

New NPM library hijacks (coa and rc)

Trojan Source CVE-2021-42572: No Panic Necessary