Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

On Badlock for Samba (CVE-2016-2118) and Windows (CVE-2016-0128)

R7-2016-01: Null Credential on Moxa NPort (CVE-2016-1529)

CVE-2015-7547: Revenge of Glibc Resolvers

R7-2015-26: Advantech EKI Dropbear Authentication Bypass (CVE-2015-7938)

CVE-2015-7755: Juniper ScreenOS Authentication Backdoor

Multiple Disclosures for Multiple Network Management Systems

R7-2015-22: ManageEngine Desktop Central 9 FileUploadServlet connectionId Vulnerability (CVE-2015-8249)

What is SQL Injection?

8 Reasons Why SQL Injection Vulnerabilities Still Exist

Multiple Insecure Installation and Update Procedures for RStudio (R7-2015-10) (FIXED)

Using Reflective DLL Injection to exploit IE Elevation Policies

Exploiting a 64-bit browser with Flash CVE-2015-5119 (Part 2)

Exploiting a 64-bit browser with Flash CVE-2015-5119

What Exactly is Duqu 2.0?

How to be a Combination King

Remote Coverage for MS15-034 HTTP.sys Vulnerability (CVE-2015-1635)

Breaking down the Logjam (vulnerability)

How Poisonous is VENOM (CVE-2015-3456) to your Virtual Environments?

R7-2015-02: Google Play Store X-Frame-Options (XFO) Gaps Enable Android Remote Code Execution (RCE)

GHOST in the Machine - Is CVE-2015-0235 another Heartbleed?

Google No Longer Provides Patches for WebView Jelly Bean and Prior