Cybersecurity Insights From The Frontlines

Exploits | How To

Log4j: How to Exploit and Test this Critical Vulnerability on Penetration Tests
ByMark Puckett November 18, 2022June 16, 2025

Raxis demonstrates how to obtain a remote shell on a target system during penetration tests using a Log4j open-source exploit available to all. (CVE-2021-44228)

Read More Log4j: How to Exploit and Test this Critical Vulnerability on Penetration Tests
Exploits

RAXIS THREAT ALERT: VULNERABILITY IN OPENSSL v3.0.x
ByBrad Herring October 31, 2022

In the cyberworld, news of a critical vulnerability affecting OpenSSL versions 3.0 – 3.0.6 will likely be the scariest part of Halloween ’22.

Read More RAXIS THREAT ALERT: VULNERABILITY IN OPENSSL v3.0.x
Exploits

CVE-2022-35739: PRTG Network Monitor Cascading Style Sheets (CSS) Injection
ByRaxis Research Team October 21, 2022July 28, 2025

This CSS vulnerability, discovered by Raxis’ Matt Mathur, lies in a device’s properties and how they are verified and displayed within PRTG Network Monitor.

Read More CVE-2022-35739: PRTG Network Monitor Cascading Style Sheets (CSS) Injection
Exploits

CVE-2022-26653 & CVE-2022-26777: ManageEngine Remote Access Plus Guest User Insecure Direct Object References
ByRaxis Research Team July 21, 2022July 28, 2025

Raxis lead penetration tester Matt Dunn uncovers two more ManageEngine vulnerabilities (CVE-2022-26653 & CVE-2022-26777).

Read More CVE-2022-26653 & CVE-2022-26777: ManageEngine Remote Access Plus Guest User Insecure Direct Object References
Exploits

CVE-2022-25373: ManageEngine Support Center Plus Stored Cross-Site Scripting (XSS)
ByRaxis Research Team July 6, 2022July 28, 2025

Matt Dunn discovers another ManageEngine Cross-Site Scripting vulnerability, this one in the Support Center Plus application.

Read More CVE-2022-25373: ManageEngine Support Center Plus Stored Cross-Site Scripting (XSS)