Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies

Rapid7 Discovered Vulnerabilities in Cisco ASA, ASDM, and FirePOWER Services Software

CVE-2022-30526 (Fixed): Zyxel Firewall Local Privilege Escalation

CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection

CVE-2022-0847: Arbitrary File Overwrite Vulnerability in Linux Kernel

Metasploit Weekly Wrap-Up: Mar. 4, 2022

Russia/Ukraine Conflict: What Is Rapid7 Doing to Protect My Organization?

Staying Secure in a Global Cyber Conflict

Active Exploitation of VMware Horizon Servers

The Everyperson’s Guide to Log4Shell (CVE-2021-44228)

Using InsightVM to Find Apache Log4j CVE-2021-44228

Driver-Based Attacks: Past and Present

Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs

New NPM library hijacks (coa and rc)

Trojan Source CVE-2021-42572: No Panic Necessary

NPM Library (ua-parser-js) Hijacked: What You Need to Know

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

Fortinet FortiWeb OS Command Injection

Microsoft SAM File Readability CVE-2021-36934: What You Need to Know

Managed Service Providers Used in Coordinated, Mass Ransomware Attack Impacting Hundreds of Companies

SolarWinds Serv-U FTP and Managed File Transfer CVE-2021-35211: What You Need to Know