ID | Votes | Profile Description |
---|---|---|
Proxynotshell | 6 | ProxyNotShell is a software vulnerability, specifically a flaw in the design or implementation of Microsoft Exchange Server. It was first identified and exploited through CVE-2022-41082, as reported by Palo Alto Networks' Unit 42. The ProxyNotShell exploit method leveraged an AutoDiscover endpoint t |
ID | Type | Votes | Profile Description |
---|---|---|---|
Proxyshell | Unspecified | 3 | ProxyShell is a series of vulnerabilities affecting Microsoft Exchange email servers. These flaws in software design or implementation have been exploited by threat actors to gain unauthorized access and control over targeted systems. The ProxyShell vulnerability, officially tracked as CVE-2021-3447 |
CVE-2022-41082 | Unspecified | 3 | CVE-2022-41082 is a critical software vulnerability discovered in Microsoft Exchange Servers, which allows for Remote Code Execution (RCE). This flaw is one of two zero-day vulnerabilities found, the other being CVE-2022-41040. The RCE vulnerability presents a significant threat as it enables attack |
Proxynotshell Cve-2022-41040 | Unspecified | 2 | None |
CVE-2018-13379 | Unspecified | 2 | CVE-2018-13379 is a critical vulnerability that affects FortiOS and Fortiguard, presenting a flaw in their software design or implementation. This specific vulnerability, which can expose sensitive credentials, has been frequently exploited, making the top 15 most routinely exploited list in both 20 |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
CERT-EU | 9 months ago | Emerging Threat: What to Know About the Play Ransomware Group | |
CERT-EU | 7 months ago | Sensor Intel Series: Top CVEs in December 2023 | |
BankInfoSecurity | 9 months ago | Breach Roundup: MongoDB Blames Phishing Email for Breach | |
CISA | 9 months ago | #StopRansomware: Play Ransomware | CISA | |
CERT-EU | 9 months ago | Play Ransomware: SafeBreach Coverage for US-CERT Alert (AA23-352A) | |
CERT-EU | 9 months ago | Sensor Intel Series: Top CVEs in October 2023 | |
CrowdStrike | 10 months ago | Patch Tuesday Turns 20: The Impact of Microsoft’s Vulnerability Problem | |
CERT-EU | a year ago | Sensor Intel Series: Top CVEs in August 2023 | F5 Labs | |
CERT-EU | a year ago | My Tea's not cold : an overview of China's cyber threat – Global Security Mag Online | |
DARKReading | a year ago | 'Play' Ransomware Group Targeting MSPs Worldwide in New Campaign | |
CERT-EU | a year ago | Unmasking the top exploited vulnerabilities of 2022 – GIXtools | |
Securityaffairs | a year ago | In 2022, more than 40% of zero-day exploits used in the wild were variations of previous issues | |
CERT-EU | a year ago | The attack via Progress MOVEit Transfer | |
CERT-EU | a year ago | View the latest outbreak alerts on cyber-attacks | FortiGuard Labs | |
Unit42 | a year ago | Manic Menagerie 2.0: The Evolution of a Highly Motivated Threat Actor | |
CERT-EU | a year ago | Anomali Cyber Watch: Cadet Blizzard - New GRU APT, ChamelDoH Hard-to-Detect Linux RAT, Stealthy DoubleFinger Targets Cryptocurrency | |
CERT-EU | a year ago | Sensor Intel Series: Top CVEs in May 2023 | |
CERT-EU | a year ago | New Russia’s GRU-affiliated APT group linked to destructive wiper attacks on Ukraine | |
Unit42 | 2 years ago | Threat Brief: OWASSRF Vulnerability Exploitation | |
Securelist | 2 years ago | CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange |