Vulnerabilities and Exploits

Explore the latest Rapid7 articles and research about Vulnerabilities and Exploits.

Latest articles about Vulnerabilities and Exploits

May 2020 Cisco Remote Vulnerabilities Guidance

CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability Remediation Guidance and Exposure Overview

R7-2019-39 | CVE-2019-5648: LDAP Credential Exposure in Barracuda Load Balancer ADC (FIXED)

Rapid7 Analysis and Guidance: CDPwn (CVE-2020-3118)

IoT Vuln Disclosure: Children's GPS Smart Watches (R7-2019-57)

R7-2019-09 | CVE-2019-5617, CVE-2019-5643, CVE-2019-5644: C4G BLIS authentication and authorization vulnerabilities (FIXED)

August 2019 Microsoft Remote Desktop Services (RDP) Patches: What You Need to Know

BlueKeep Exploits May Be Coming: Our Observations and Recommendations

Zoom Video Snooping Security Flaw (CVE-2019-13450): What You Need to Know

R7-2018-43: Username Enumeration in Okta SSO Del Auth through Response Timing

Stack-Based Buffer Overflow Attacks: Explained and Examples

Brendan Watters

PHP Extension and Application Repository (PEAR) Compromise: What You Need to Know

How Cybercriminals Use Pinterest to Run Fraud Scams

5 Ways RASP Will Make Your Pentest Painless

Cross-Site Scripting (XSS) Can Steal Payment Information from Payment Processors

How to Automate Identifying and Take Down Malicious Social Media Profiles

R7-2018-15 | CVE-2018-5553: Crestron DGE-100 Console Command Injection (FIXED)

XSS Bug Reports Made Easy

Protecting Your Web Site from the Doubleclick XSS Vulnerability

R7-2017-25: Cambium ePMP and cnPilot Multiple Vulnerabilities

CVE-2017-16943: Exim BDAT Use-After-Free