Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Exploiting a 64-bit browser with Flash CVE-2015-5119 (Part 2)

Exploiting a 64-bit browser with Flash CVE-2015-5119

What Exactly is Duqu 2.0?

Remote Coverage for MS15-034 HTTP.sys Vulnerability (CVE-2015-1635)

Breaking down the Logjam (vulnerability)

How Poisonous is VENOM (CVE-2015-3456) to your Virtual Environments?

R7-2015-02: Google Play Store X-Frame-Options (XFO) Gaps Enable Android Remote Code Execution (RCE)

GHOST in the Machine - Is CVE-2015-0235 another Heartbleed?

POODLE Jr.: The Revenge - How to scan for CVE-2014-8730

R7-2014-18: Hikvision DVR Devices - Multiple Vulnerabilities

R7-2014-15: GNU Wget FTP Symlink Arbitrary Filesystem Access

Block the POODLE's bite: How to scan for CVE-2014-3566

UserInsight Gets the All-Clear for ShellShock and Helps Detect Attackers on Your Network

Christian Kirsch

Bash the bash bug: Here's how to scan for CVE-2014-6271 (Shellshock)

R7-2014-12: More Amplification Vulnerabilities in NTP Allow Even More DRDoS Attacks

You have no SQL inj--... sorry, NoSQL injections in your application

Managing the Impact of the Ebay Breach on You and Your Company

R7-2014-01, R7-2014-02, R7-2014-03 Disclosures: Exposure of Critical Information Via SNMP Public Community String

Exploiting CSRF under NoScript Conditions

Metasploit's Brand New Heartbleed Scanner Module (CVE-2014-0160)

"Hack Away at the Unessential" with ExpLib2 in Metasploit