CVE-2023-25157 2

Vulnerability (CVE)

Geo Server Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

A zero-day SQL injection flaw in GeoServer's jsonArrayContains function, disclosed August 12, 2026 by researcher @q1uf3ng, drew exploitation attempts within hours, with watchTowr reporting hundreds of attempts from a small pool of IP addresses. The...

Vulnerabilities & Patching

Fake CVE-2023-40477 Proof of Concept Leads to VenomRAT

Cyber Risks Unit 42 Palo Alto Networks

An actor using the alias whalersplonk committed a fake proof-of-concept script for the WinRAR RCE tracked as CVE-2023-40477 to GitHub on Aug. 21, 2023, four days after the vulnerability was publicly reported on Aug. 17. The script does not exploit WinRAR;...

Vulnerabilities & Patching