Tag: Rapid7
Ted implant rides trojanized HAProxy builds in South Korea
Rapid7 finds a North Korea-linked toolkit hiding inside trojanized HAProxy builds at two South Korean firms.
Rapid7 urges emergency patching of Citrix NetScaler login bypass
Citrix fixed a CVSS 9.3 authentication bypass in NetScaler ADC and Gateway that attackers are expected to exploit quickly.
Forged JWT tokens put unpatched SharePoint servers in attacker hands
Attackers are exploiting a critical SharePoint authentication bypass days after Rapid7 shipped proof-of-concept code.
Critical Flaw in Gogs Code Collaboration Platform Allows Unauthorized Repository Access
The argument injection flaw affects default Gogs installations with open registration enabled, allowing any registered user to access private repositories…