Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Metasploit Weekly Wrap-Up: Mar. 4, 2022

Russia/Ukraine Conflict: What Is Rapid7 Doing to Protect My Organization?

Staying Secure in a Global Cyber Conflict

Active Exploitation of VMware Horizon Servers

The Everyperson’s Guide to Log4Shell (CVE-2021-44228)

Using InsightVM to Find Apache Log4j CVE-2021-44228

Driver-Based Attacks: Past and Present

Opportunistic Exploitation of Zoho ManageEngine and Sitecore CVEs

New NPM library hijacks (coa and rc)

Trojan Source CVE-2021-42572: No Panic Necessary

NPM Library (ua-parser-js) Hijacked: What You Need to Know

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

Fortinet FortiWeb OS Command Injection

Microsoft SAM File Readability CVE-2021-36934: What You Need to Know

Managed Service Providers Used in Coordinated, Mass Ransomware Attack Impacting Hundreds of Companies

SolarWinds Serv-U FTP and Managed File Transfer CVE-2021-35211: What You Need to Know

CVE-2020-7387..7390: Multiple Sage X3 Vulnerabilities

CVE-2021-20025: SonicWall Email Security Appliance Backdoor Credential

Metasploit Wrap-Up: 6/11/21

Spencer McIntyre

Multiple Unauthenticated Remote Code Control and Execution Vulnerabilities in Multiple Cisco Products

State-Sponsored Threat Actors Target Security Researchers