GeoServer jsonArrayContains SQL Injection Zero-Day: Mass Probes Hours After Disclosure, RCE...
GeoServer jsonArrayContains SQL Injection Zero-Day: Mass Probes Hours After Disclosure, RCE Possible Depending on Configuration
1. Basic Information
Severity: Critical
Article Title: Hackers Exploiting Unpatched GeoServer Zero-Day
Publisher: SecurityWeek
Unpatched GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE
Hackers Exploiting Unpatched GeoServer Zero-Day
Metabase SQL Zero-Day Attacks Could Have Wide Blast Radius
Metabase Patches Vulnerability Exploited as Zero-Day
Critical GitLab Zero-Click Flaw Poses Mitigation Challenges
Metabase SQLi exploit grants attackers total access
Unpatched GeoServer zero-day SQL injection is seeing active exploitation attempts hours after disclosure and can lead to remote…
The exploitation of an unpatched GeoServer zero-day leading to remote code execution started within hours of public disclosure.
The max-severity vuln, which still has no CVE, allows malicious, remote administrator access to the business-analytics platform…
Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this…
Metabase Unauthenticated SQL Injection: From Admin Privilege Heist to Connected DB Data...
A critical-severity SQL injection vulnerability in Metabase has been exploited as a zero-day to gain administrative privileges.
