Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

Using Reflective DLL Injection to exploit IE Elevation Policies

Exploiting a 64-bit browser with Flash CVE-2015-5119 (Part 2)

Exploiting a 64-bit browser with Flash CVE-2015-5119

What Exactly is Duqu 2.0?

How to be a Combination King

Remote Coverage for MS15-034 HTTP.sys Vulnerability (CVE-2015-1635)

Breaking down the Logjam (vulnerability)

How Poisonous is VENOM (CVE-2015-3456) to your Virtual Environments?

R7-2015-02: Google Play Store X-Frame-Options (XFO) Gaps Enable Android Remote Code Execution (RCE)

GHOST in the Machine - Is CVE-2015-0235 another Heartbleed?

Google No Longer Provides Patches for WebView Jelly Bean and Prior

POODLE Jr.: The Revenge - How to scan for CVE-2014-8730

R7-2014-18: Hikvision DVR Devices - Multiple Vulnerabilities

R7-2014-15: GNU Wget FTP Symlink Arbitrary Filesystem Access

Block the POODLE's bite: How to scan for CVE-2014-3566

Sandworm aka CVE-2014-4114

UserInsight Gets the All-Clear for ShellShock and Helps Detect Attackers on Your Network

Christian Kirsch

Bash the bash bug: Here's how to scan for CVE-2014-6271 (Shellshock)

R7-2014-12: More Amplification Vulnerabilities in NTP Allow Even More DRDoS Attacks

More SNMP Information Leaks: CVE-2014-4862 and CVE-2014-4863

You have no SQL inj--... sorry, NoSQL injections in your application