Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
The Joint Cybersecurity Advisory JCSA-20260826-01, released on August 26, 2026, details ongoing activities by the China-linked hacking group QTFY, attributed to Nanjing Xinjiuwei Network Technology Co. Active since 2018, QTFY employs platforms like QScan and QTRouter to exploit vulnerabilities in cr...
CVE-2021-44228, known as Log4Shell, is a critical remote code execution vulnerability in Apache Log4j 2, disclosed on December 10, 2021. This flaw allows attackers to execute arbitrary code by manipulating log messages, affecting a wide range of applications and services that utilize Log4j. Despite...
A proxyjacking campaign has compromised at least 143 devices across 34 countries, hijacking internet connections by installing Pawns.app, a legitimate bandwidth-sharing application, without user consent. The attackers exploited vulnerabilities in D-Link ShareCenter NAS (CVE-2024-3272, CVE-2024-3273)...
A new CVSS 10.0 vulnerability, CVE-2026-29000, was published on March 4, 2026, allowing attackers to bypass authentication in the pac4j-jwt library, enabling impersonation of any user, including administrators. This vulnerability poses a significant risk to applications using this library, as it req...
