Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

CVE-2020-7387..7390: Multiple Sage X3 Vulnerabilities

CVE-2021-20025: SonicWall Email Security Appliance Backdoor Credential

Metasploit Wrap-Up: 6/11/21

Spencer McIntyre

Multiple Unauthenticated Remote Code Control and Execution Vulnerabilities in Multiple Cisco Products

State-Sponsored Threat Actors Target Security Researchers

SolarWinds SUNBURST Backdoor Supply Chain Attack: What You Need to Know

CVE-2020-7378: OpenCRX Unverified Password Change (FIXED)

Oracle WebLogic Unauthenticated Complete Takeover (CVE-2020-14882/CVE-2020-14750): What You Need to Know

There Goes The Neighborhood: Dealing With CVE-2020-16898 (and CVE-2020-1656) (aka"Bad Neighbor")

HP Device Manager Cavalcade of Critical CVEs (CVE-2020-6925:6927): What You Need to Know

CVE-2020-1472 "Zerologon" Critical Privilege Escalation: What You Need To Know

Remote Code Execution Risks in Secomea, Moxa, and HMS eWon ICS VPN Vulnerabilities: What You Need to Know

CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability: What You Need to Know

CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java

CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed

May 2020 Cisco Remote Vulnerabilities Guidance

CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability Remediation Guidance and Exposure Overview

R7-2019-39 | CVE-2019-5648: LDAP Credential Exposure in Barracuda Load Balancer ADC (FIXED)

Rapid7 Analysis and Guidance: CDPwn (CVE-2020-3118)

IoT Vuln Disclosure: Children's GPS Smart Watches (R7-2019-57)

R7-2019-09 | CVE-2019-5617, CVE-2019-5643, CVE-2019-5644: C4G BLIS authentication and authorization vulnerabilities (FIXED)