#active exploitation

[therealistjuggernaut]

CISA Adds Actively Exploited Drupal Core SQL Injection Vulnerability to KEV Catalog

Threat Summary Category: CISA KEV Alert / Web Application Security / Active ExploitationFeatures: SQL injection, PostgreSQL-targeted exploit

[therealistjuggernaut]

ICS ALERT: Cybersecurity and Infrastructure Security Agency EXPANDS KNOWN EXPLOITED VULNERABILITIES CATALOG WITH FOUR ACTIVELY TARGETED FLAW

Threat Summary Category: Known Exploited Vulnerabilities / Active ExploitationFeatures: Path traversal, missing authorization, command injec

[therealistjuggernaut]

CISA FLAGS ACTIVELY EXPLOITED APACHE ACTIVEMQ VULNERABILITY IN LATEST KEV UPDATE

Threat Summary Category: Critical Infrastructure VulnerabilityFeatures: Improper Input Validation, Active Exploitation Confirmed, KEV Inclus

[therealistjuggernaut]

CISA FLAGS SEVEN ACTIVELY EXPLOITED VULNERABILITIES ACROSS MICROSOFT, ADOBE, AND FORTINET SYSTEMS

Threat Summary Category: Vulnerability Exploitation / Active Threats / Federal Risk AdvisoryFeatures: Remote Code Execution Paths, Deseriali

[therealistjuggernaut]

CISA ADDS LEGACY OFFICE RCE AND SHAREPOINT FLAW TO KEV AS ACTIVE EXPLOITATION CONTINUES

Threat Summary Category: Vulnerability Exploitation / Remote Code Execution / Enterprise Platform RiskFeatures: Document-Based RCE, Input Va

[therealistjuggernaut]

FORTINET EMS EXPOSURE — CISA ADDS ACTIVELY EXPLOITED ACCESS CONTROL VULNERABILITY TO KEV CATALOG AS ENTERPRISE ENDPOINT INFRASTRUCTURE TARGE

Threat Summary Category: Vulnerability Exploitation / Endpoint ManagementFeatures: Improper Access Control, Remote Exploitation Potential, E

[therealistjuggernaut]

TRUECONF CLIENT EXPLOITATION RISK — CISA FLAGS ACTIVE ATTACK VECTOR IN KEV CATALOG UPDATE

Threat Summary Category: Known Exploited Vulnerability / Software Integrity FailureFeatures: Code download without integrity verification, a

[therealistjuggernaut]

ACTIVE EXPLOITATION ALERT: GOOGLE DAWN USE-AFTER-FREE VULNERABILITY ENTERS FEDERAL PRIORITY INDEX

Threat Summary Category: Zero-Day / Memory Corruption ExploitFeatures: Use-After-Free (UAF), memory reuse hijacking, arbitrary code executio