Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Cisco Enable / Privileged Exec Support

R7-2016-28: Multiple Eview EV-07S GPS Tracker Vulnerabilities

R7-2017-01: Multiple Vulnerabilities in Double Robotics Telepresence Robot

The Cloudflare (Cloudbleed) Proxy Service Vulnerability Explained

Nexpose Dimensional Data Warehouse and Reporting Data Model: What's the Difference?

Michael Huffman

R7-2016-24, OpenNMS Stored XSS via SNMP (CVE-2016-6555, CVE-2016-6556)

R7-2016-07: Multiple Vulnerabilities in Animas OneTouch Ping Insulin Pump

Multiple Disclosures for Multiple Network Management Systems, Part 2

NIST 800-53 Control Mappings in SQL Query Export

R7-2016-06: Remote Code Execution via Swagger Parameter Injection (CVE-2016-5641)

On Badlock for Samba (CVE-2016-2118) and Windows (CVE-2016-0128)

R7-2016-01: Null Credential on Moxa NPort (CVE-2016-1529)

CVE-2015-7547: Revenge of Glibc Resolvers

R7-2015-26: Advantech EKI Dropbear Authentication Bypass (CVE-2015-7938)

CVE-2015-7755: Juniper ScreenOS Authentication Backdoor

Multiple Disclosures for Multiple Network Management Systems

R7-2015-22: ManageEngine Desktop Central 9 FileUploadServlet connectionId Vulnerability (CVE-2015-8249)

What is SQL Injection?

8 Reasons Why SQL Injection Vulnerabilities Still Exist

Multiple Insecure Installation and Update Procedures for RStudio (R7-2015-10) (FIXED)

Using Reflective DLL Injection to exploit IE Elevation Policies