GeoServer

Search everything

Mentions · 7d0
Mentions · 30d1
All mentions4
First seenAug 15, 2026
Last mentioned17d ago

Timeline

4 articles · newest first

The Week in Vulnerabilities: Toptech, Lantronix, Langflow, and CISA Malcolm Flaws

Cyble sensors logged exploitation attempts against about 20 flaws as CISA issued 14 ICS advisories.

CybleOct 14, 13:36 UTC · 17d agoExploit / PoCExploitedCVE-2026-63030 CVE-2026-60137 CVE-2026-44825+223

GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

A CVSS 9.8 SQL injection zero-day in GeoServer's PostGIS datastore enables RCE and drew active exploitation; fixes shipped in versions 3.0.1, 2.28.5, 2.27.6.

The Hacker NewsAug 17, 17:05 UTC · Aug 17, 2026Exploit / PoCExploitedCVE-2024-36401 CVE-2023-25158 CVE-2023-251576 · 4 reads

Fake CVE-2023

A fake PoC for WinRAR RCE CVE-2023-40477 posted on GitHub actually deploys VenomRAT through a multi-step infection chain targeting researchers.

Palo Alto Unit 42Aug 17, 10:57 UTC · Aug 17, 2026MalwareCVE-2023-40477 CVE-2023-251574 · 1 read

GeoServer Zero-Day Is Already Being Probed. That’s the Problem

Unpatched GeoServer zero-day enabling SQL injection and possible RCE is being actively probed across exposed systems.

Security AffairsAug 15, 07:18 UTC · Aug 15, 2026Exploit / PoCExploitedCVE-2024-364018 · 2 reads

Related CVEs

by mentions

CVE-2024-36401100%9.8
Unauthenticated RCE in OSGeo GeoServer via GeoTools XPath Injection
published Jul 1, 2024OSGeo GeoServerKEVPoC ×3
CVE-2023-2515785%9.8
GeoServer: GeoServer includes support for the OGC Filter expression language and the OGC Common Query Language (CQL) as part of the Web…
published Feb 21, 2023osgeo geoserver
CVE-2025-3248100%9.8
Unauthenticated RCE in Langflow /api/v1/validate/code
published Apr 7, 2025LangflowKEVRansomwarePoC ×4
CVE-2018-10562100%9.8
Unauthenticated RCE in Dasan GPON Routers (CVE-2018-10562)
published May 4, 2018Dasan Gigabit Passive Optical Network (GPON) routersKEVRansomwarePoC ×2
CVE-2019-0708100%9.8
Unauthenticated RCE in Microsoft Remote Desktop Services (BlueKeep)
published May 16, 2019Microsoft Remote Desktop ServicesKEVRansomwarePoC ×4
CVE-2018-1056193%9.8
Authentication Bypass in Dasan GPON Home Routers (CVE-2018-10561)
published May 4, 2018Dasan Networks GPON home router firmware (Dasan Gigabit Passive Optical Network Routers)KEVPoC ×2
CVE-2017-0147100%7.5
Information Disclosure in Microsoft Windows SMBv1 Server (CVE-2017-0147)
published Mar 17, 2017microsoft Windows VistaKEVRansomwarePoC ×5
CVE-2019-1225575%9.8
Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4)
published Aug 9, 2019windriver vxworksPoC
CVE-2019-1226023%9.8
Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the TCP component (issue 2 of 4)
published Aug 9, 2019windriver vxworks
CVE-2025-465651%6.0
Vite: 6.2.7, 6.1.6, 5.4.19, and 4.5.14, the contents of files in the project root that are denied by a file matching pattern can be…
published May 1, 2025vitejs vitePoC

Appears with

GeoServervendor · 3
watchTowrorganization · 2
CISAorganization · 2
Lantronixvendor · 1
WordPressproduct · 1
WinRARvendor · 1
WinRARproduct · 1
CoinMinermalware · 1
QNAPvendor · 1
Zero Day Initiativeorganization · 1
IRCBotmalware · 1
Microsoftvendor · 1
watchTowrvendor · 1
IBMvendor · 1
Broadcom/Symantecorganization · 1
Cyber Threat Allianceorganization · 1

Entities are extracted by the model from each article. First seen Aug 15, 2026, last mentioned 17d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.