The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report “An attack in which cybercriminals utilize trial-and-error tactics to ...

Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.

This module can be used to help capture or relay the LM/NTLM credentials of the account running the remote SQL Server service. The module will use the supplied credentials to connect to the target SQL ...

What are Deception Technology Tools? Deception technology aims to deceive attackers by distributing a collection of traps and decoys across a system's infrastructure to imitate genuine assets. If an ...

This module exploits CVE-2017-13156 in Android to install a payload into another application. The payload APK will have the same signature and can be installed as an update, preserving the existing ...

Angreifer verknüpfen Schwachstellen, die in der Cloud, im Netzwerk und in Anwendungen vorhanden sind. In diesem Netz von Risiken sollten Sie das Erreichbare priorisieren. Wenn Sie darüber nachdenken, ...

This module exploits a path traversal and a local file inclusion vulnerability on WordPress versions 5.0.0 and <= 4.9.8. The crop-image function allows a user, with at least author privileges, to ...

Rapid7 is a global leader in AI-powered managed cybersecurity operations, trusted to advance organizations’ cyber resilience. Open and extensible, the Rapid7 Command Platform integrates security data, ...

This module can be used to leverage the extension functionality added since Redis 4.0.0 to execute arbitrary code. To transmit the given extension it makes use of the feature of Redis which called ...

Use after free in DNS Server allows an unauthorized attacker to execute code over a network.

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When the filename field is manipulated with ...