Proof-of-Concept Exploit Code to be Released for Critical Zoho RCE Bug

Later this week, proof-of-concept exploit code will be made available for a serious vulnerability in multiple VMware products that permits remote code execution (RCE) without authentication. This pre-auth RCE security hole, identified as CVE-2022-47966, is brought on by the usage of the insecure and out-of-date third-party dependency Apache Santuario. Successful exploitation of the bug enables […]

The post Proof-of-Concept Exploit Code to be Released for Critical Zoho RCE Bug appeared first on Heimdal Security Blog.

apache apache santuario auth authentication bug code code execution concept critical cve cve-2022-47966 cybersecurity news dependency exploit exploitation exploit code insecure party products proof-of-concept rce remote code remote code execution security serious third third-party vmware vulnerability zoho