Tag: active exploitation
Citrix has no fix yet as attackers hit NetScaler zero-days
watchTowr says two unpatched NetScaler RCE flaws are being exploited and Citrix has published no fix.
Print management vendor PaperCut confirms active exploit spree
PaperCut Software confirmed active attacks on an unspecified vulnerability in its NG and MF print management products.
Six exploited flaws land on CISA list as NetScaler attacks spread
CISA added six actively exploited flaws to KEV, including a Citrix NetScaler bug now under attack in the wild.
Zimbra mail servers under fire as SNMP bug gets exploited
Poland's CERT warns attackers are exploiting a patched Zimbra command-injection flaw in the wild.
Four exploited flaws land on CISA urgent patch list
CISA adds four actively exploited flaws covering macOS, SharePoint, vCenter, and Microsoft IKE to its urgent patch catalog.
SAP Commerce Cloud flaw under attack three days after patch
SAP Commerce Cloud's CVSS 10 flaw is under attack just three days after the patch shipped.
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.
Attackers weaponize Cisco FMC static credentials before Cisco released hotfix
CISA adds actively exploited Cisco FMC static credentials flaw to its known vulnerabilities catalog.