1940 matches found
The vulnerability of the pfifo_tail_enqueue() function (net/sched/sch_fifo.c) in the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the pfifotailenqueue function net/sched/schfifo.c in the Linux operating system is related to a discrepancy in functionality according to the specifications. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility ...
Independent Analyst Firm: Qualys Recognized as a Leader in Attack Surface Management
As the modern attack surface continues to grow in complexity, the need for simplified asset discovery and risk assessment has never been more acute. In 2021, Qualys introduced CyberSecurity Asset Management CSAM, a visionary ASM offering designed to bolster the customer’s coverage of the attack...
Why MDR In 2025 Is About Scaling With Purpose
Forrester recently released “The Forrester Wave™: Managed Detection and Response MDR Services, Q1 2025,", highlighting the top 10 MDR providers out of more than 600 worldwide. While we’re honored to be recognized in such a competitive market, Rapid7’s designation underscores a fundamental...
Command Platform Innovations Eliminate Data Blind Spots Through Complete Visibility and Context-Driven Risk Prioritization
Rapid7 provides unmatched attack surface visibility through the Command Platform, helping security teams identify, prioritize, and remediate risk across hybrid environments. Surface Command is the only solution available that combines native external and internal scanning into a single unified vi...
Exploit for CVE-2025-26794
CVE-2025-26794: Blind SQL injection in Exim 4.98 SQLite DBM...
CISO's Expert Guide To CTEM And Why It Matters
Cyber threats evolve—has your defense strategy kept up? A new free guide available here explains why Continuous Threat Exposure Management CTEM is the smart approach for proactive cybersecurity. This concise report makes a clear business case for why CTEM's comprehensive approach is the best...
CVE-2025-21194
Microsoft Surface Security Feature Bypass Vulnerability...
CVE-2025-21194
Microsoft Surface Security Feature Bypass Vulnerability...
CVE-2025-21194 Microsoft Surface Security Feature Bypass Vulnerability
...
CVE-2025-21194
CVE-2025-21194 is a Microsoft Surface Security Feature Bypass vulnerability affecting Surface devices. The connected Rapid7 Patch Tuesday coverage describes exploitation as a potential container escape from a UEFI host, leading to hypervisor compromise. Updates are delivered via Windows Update ac...
CVE-2025-21194 Microsoft Surface Security Feature Bypass Vulnerability
...
Microsoft Surface Security Feature Bypass Vulnerability
...
CVE-2025-21194: Improper Input Validation
Microsoft Surface Security Feature Bypass Vulnerability...
Microsoft Surface 输入验证错误漏洞
Microsoft Surface is a tablet computer from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Surface. An attacker exploiting this vulnerability could bypass certain features. The following products and versions are affected:Surface Laptop 4 with Intel...
PT-2025-6294
Name of the Vulnerable Software and Affected Versions Microsoft Surface affected versions not specified Description The issue concerns a security feature bypass. No specific details about technical exploitation or affected devices are provided. Recommendations At the moment, there is no informati...
Vector Command Opportunistic Phishing Blog
Gone Phishing with Vector Command During one of our customer engagements, our red team will continuously attack your network to see if we can exploit a vulnerability. One of the tactics, techniques and proceduresTTPs we use is “Opportunistic Phishing”. First, let’s share a quick reminder about...
Managed Network Cloud Firewall: Comprehensive Protection for Network Attack Surface
...
4 Reasons Why MSPs & MSSPs Need to Enhance Attack Surface Management
In today’s rapidly evolving digital landscape, Managed Service Providers MSPs and Managed Security Service Providers MSSPs face increasing challenges. As businesses expand their digital footprints, MSPs and MSSPs are under pressure to deliver comprehensive security services while managing costs,...
CVE-2022-2037
Excessive Attack Surface in GitHub repository tooljet/tooljet prior to v1.16.0...
Take Command | Rapid7’s 2025 Cybersecurity Summit: Own Your Attack Surface on April 9
Save the date:April 9, 2025 Take Command is back. After a hugely successful event last year, Rapid7’s cybersecurity summit returns with another stellar lineup to equip security teams with the latest threat intelligence, expert insights, and real-world strategies to take control of an evolving...