Emergent Threat Response

Backdoored 3CXDesktopApp Installer Used in Active Threat Campaign

Active Exploitation of IBM Aspera Faspex CVE-2022-47986

Rapid7-Observed Exploitation of Adobe ColdFusion

Clayton Zechman

Active Exploitation of ZK Framework CVE-2022-36537

CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability

CVE-2023-22501: Critical Broken Authentication Flaw in Jira Service Management Products

Ransomware Campaign Compromising VMware ESXi Servers

Exploitation of GoAnywhere MFT zero-day vulnerability

Exploitation of Control Web Panel CVE-2022-44877

CVE-2022-47966: Rapid7 Observed Exploitation of Critical ManageEngine Vulnerability

CVE-2022-41080, CVE-2022-41082: Rapid7 Observed Exploitation of `OWASSRF` in Exchange for RCE

CVE-2022-27518: Critical Fix Released for Exploited Citrix ADC, Gateway Vulnerability

CVE-2022-42475: Critical Unauthenticated Remote Code Execution Vulnerability in FortiOS; Exploitation Reported

CVE-2022-27510: Critical Citrix ADC and Gateway Remote Authentication Bypass Vulnerabilities

Rapid7’s Impact from OpenSSL Buffer Overflow Vulnerabilities (CVE-2022-3786 & CVE-2022-3602)

Rapid7’s Impact from Apache Commons Text Vulnerability (CVE-2022-42889)

CVE-2022-3786 and CVE-2022-3602: Two High-Severity Buffer Overflow Vulnerabilities in OpenSSL Fixed

CVE-2021-39144: VMware Cloud Foundation Unauthenticated Remote Code Execution

CVE-2022-42889: Keep Calm and Stop Saying "Text4Shell"

CVE-2022-40684: Remote Authentication Bypass Vulnerability in Fortinet Firewalls, Web Proxies

Exploitation of Unpatched Zero-Day Remote Code Execution Vulnerability in Zimbra Collaboration Suite (CVE-2022-41352)