Active threats. Real guidance.
Updated 3× daily.

A critical privilege escalation vulnerability exists in Microsoft SharePoint Server, allowing an unauthenticated attacker to gain administrator privileges. This can be achieved by sending a specially crafted request to an affected SharePoint server, leading to full control.

A critical remote code execution vulnerability exists in Cisco ASA and FTD software when processing crafted HTTP/2 requests. This flaw could allow an unauthenticated attacker to execute arbitrary code.

A critical remote code execution vulnerability exists in PHP when running on Windows. This flaw allows unauthenticated attackers to execute arbitrary code by bypassing `mod_cgi` protections.

This authentication bypass vulnerability allows an unauthenticated attacker to gain administrative access to a ScreenConnect instance. It can be chained with other vulnerabilities for full system compromise.

A critical SQL injection vulnerability in MOVEit Transfer allows unauthenticated attackers to gain unauthorized access to the database. This flaw can lead to remote code execution and data exfiltration, widely exploited by ransomware groups like Clop.

A critical privilege escalation vulnerability in Atlassian Confluence Data Center and Server allows unauthenticated attackers to create new administrator accounts. This flaw grants full administrative control over the Confluence instance and is actively exploited.

A remote code execution vulnerability exists in Microsoft SharePoint Server. An authenticated attacker can exploit this by uploading a specially crafted file to the server, allowing arbitrary code execution.

This critical vulnerability in Apache ActiveMQ allows for remote code execution. It is being actively exploited by threat actors to compromise affected systems.

This unauthenticated remote code execution vulnerability affects Citrix NetScaler ADC and Gateway. It has been actively exploited in the wild, leading to full system compromise.

An authenticated attacker can make a specially crafted network call to a SharePoint Server, leading to remote code execution. This vulnerability has been observed in active exploitation campaigns.

A critical privilege escalation vulnerability in Microsoft Exchange Server allows NTLM relay attacks. This enables an unauthenticated attacker to escalate privileges to domain administrator.

A critical path traversal vulnerability in Apache Struts 2 allows for remote code execution. Attackers can manipulate file upload parameters to upload malicious files and execute arbitrary code.