Author

Tod Beardsley

Director of Research at Rapid7, contributing author of several Rapid7 research papers, CVE Board member, and Metasploit collaborator. https://infosec.exchange/@todb

CVE-2023-0391: MGT-COMMERCE CloudPanel Shared Certificate Vulnerability and Weak Installation Procedures

Microsoft Defender for Cloud Management Port Exposure Confusion

A Deep Dive into Reversing CODESYS

Multiple DMS XSS (CVE-2022-47412 through CVE-20222-47419)

Refreshing Rapid7's Coordinated Vulnerability Disclosure Policy

Cengage LTI Session Management Leakage

CVE-2022-4261: Rapid7 Nexpose Update Validation Issue (FIXED)

New Research: We’re Still Terrible at Passwords; Making it Easy for Attackers

25 Years of Nmap: Happy Scan-iversary!

Primary Arms PII Disclosure via IDOR (FIXED)

CVE-2021-3779: Ruby-MySQL Gem Client File Read (FIXED)

The Hidden Harm of Silent Patches

CVE-2022-1026: Kyocera Net View Address Book Exposure

CVE-2021-3546[78]: Akkadian Console Server Vulnerabilities (FIXED)

CVE-2021-3927[67]: Fortress S03 WiFi Home Security System Vulnerabilities

Fortinet FortiWeb OS Command Injection

CVE-2020-7387..7390: Multiple Sage X3 Vulnerabilities

CVE-2021-20025: SonicWall Email Security Appliance Backdoor Credential

Akkadian Provisioning Manager Multiple Vulnerabilities Disclosure (Fixed)

CVE-2021-3198 and CVE-2021-3540: MobileIron Shell Escape Privilege Escalation Vulnerabilities

Rapid7's 2021 ICER Takeaways: Vulnerability Disclosure Programs Among the Fortune 500