Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

NPM Library (ua-parser-js) Hijacked: What You Need to Know

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

Fortinet FortiWeb OS Command Injection

Microsoft SAM File Readability CVE-2021-36934: What You Need to Know

Managed Service Providers Used in Coordinated, Mass Ransomware Attack Impacting Hundreds of Companies

SolarWinds Serv-U FTP and Managed File Transfer CVE-2021-35211: What You Need to Know

CVE-2020-7387..7390: Multiple Sage X3 Vulnerabilities

CVE-2021-20025: SonicWall Email Security Appliance Backdoor Credential

Metasploit Wrap-Up: 6/11/21

Spencer McIntyre

Multiple Unauthenticated Remote Code Control and Execution Vulnerabilities in Multiple Cisco Products

State-Sponsored Threat Actors Target Security Researchers

SolarWinds SUNBURST Backdoor Supply Chain Attack: What You Need to Know

CVE-2020-7378: OpenCRX Unverified Password Change (FIXED)

Oracle WebLogic Unauthenticated Complete Takeover (CVE-2020-14882/CVE-2020-14750): What You Need to Know

There Goes The Neighborhood: Dealing With CVE-2020-16898 (and CVE-2020-1656) (aka"Bad Neighbor")

HP Device Manager Cavalcade of Critical CVEs (CVE-2020-6925:6927): What You Need to Know

CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know

Remote Code Execution Risks in Secomea, Moxa, and HMS eWon ICS VPN Vulnerabilities: What You Need to Know

CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability: What You Need to Know

CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java

CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed