All Articles

CVE-2020-7378: OpenCRX Unverified Password Change (FIXED)

NICER Protocol Deep Dive: Internet Exposure of Microsoft SQL Server (MS SQL) (UDP/1434)

Metasploit Wrap-Up: 11/20/20

This One Time on a Pen Test: CSRF to Password Reset Phishing

Don’t Put It on the Internet: Tesla Backup Gateway Edition

Metasploit Wrap-Up: 11/13/20

NICER Protocol Deep Dive: Internet Exposure of MySQL

VMware ESXi OpenSLP Remote Code Execution Vulnerability (CVE-2020-3992 and CVE-2019-5544): What You Need To Know

Rapid7 Analysis: CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability

SaltStack Pre-Authenticated Remote Root (CVE-2020-16846 and CVE-2020-25592): What You Need to Know

Visualizing Network Traffic Data to Drive Action

Darragh Delaney

Rapid7 Analysis: CVE-2020-16846 — SaltStack Unauthenticated Shell Injection

Rapid7 Analysis: CVE-2020-25592 — SaltStack Authentication Bypass and Salt SSH Command Execution

Metasploit Wrap-Up: Nov. 6, 2020

This One Time on a Pen Test: How I Hacked a Self-Driving Car

Jonathan Stines

Rapid7 Analysis: CVE-2020-14871

NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler

The Story Behind Security Breaches

Rapid7 Analysis: CVE-2020-17087 Windows Kernel local privilege escalation 0day

Oracle WebLogic Unauthenticated Complete Takeover (CVE-2020-14882/CVE-2020-14750): What You Need to Know

Rapid7 Analysis: CVE-2020-14882 — Unauthenticated RCE in Console component of Oracle WebLogic Server