Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

POODLE Jr.: The Revenge - How to scan for CVE-2014-8730

R7-2014-18: Hikvision DVR Devices - Multiple Vulnerabilities

R7-2014-15: GNU Wget FTP Symlink Arbitrary Filesystem Access

Block the POODLE's bite: How to scan for CVE-2014-3566

Sandworm aka CVE-2014-4114

UserInsight Gets the All-Clear for ShellShock and Helps Detect Attackers on Your Network

Christian Kirsch

Bash the bash bug: Here's how to scan for CVE-2014-6271 (Shellshock)

R7-2014-12: More Amplification Vulnerabilities in NTP Allow Even More DRDoS Attacks

More SNMP Information Leaks: CVE-2014-4862 and CVE-2014-4863

You have no SQL inj--... sorry, NoSQL injections in your application

Managing the Impact of the Ebay Breach on You and Your Company

R7-2014-01, R7-2014-02, R7-2014-03 Disclosures: Exposure of Critical Information Via SNMP Public Community String

Exploiting CSRF under NoScript Conditions

Metasploit's Brand New Heartbleed Scanner Module (CVE-2014-0160)

"Hack Away at the Unessential" with ExpLib2 in Metasploit

Metasploit Weekly Update: Video Chat, Meterpreter Building, and a Fresh MediaWiki Exploit

Weekly Metasploit Update: Feb. 13, 2014

Exploitable vulnerabilities #1 (MS08-067)

Bypassing Adobe Reader Sandbox with Methods Used In The Wild

Exploiting the Supermicro Onboard IPMI Controller

Change the Theme, Get a Shell: Remote Code Execution with MS13-071