The Rapid7 Blog:
Your Signal in the Security Noise

Insights, stories, and guidance from our global security and research teams.

Weekly security updates — no spam. Privacy Policy.

R7-2018-15 | CVE-2018-5553: Crestron DGE-100 Console Command Injection (FIXED)

Vulnerabilities and Exploits

R7-2018-15 | CVE-2018-5553: Crestron DGE-100 Console Command Injection (FIXED)

Sam Huckins's avatar

Sam Huckins

Shoring Up the Defenses Together: 2018Q1 Wrap-Up

Vulnerabilities and Exploits

Shoring Up the Defenses Together: 2018Q1 Wrap-Up

Sam Huckins's avatar

Sam Huckins

R7-2018-01 (CVE-2018-5551, CVE-2018-5552): DocuTrac Office Therapy Installer Hard-Coded Credentials and Cryptographic Salt

Vulnerabilities and Exploits

R7-2018-01 (CVE-2018-5551, CVE-2018-5552): DocuTrac Office Therapy Installer Hard-Coded Credentials and Cryptographic Salt

Tod Beardsley's avatar

Tod Beardsley

NIST Cyber Framework Updated With Coordinated Vuln Disclosure Processes

Vulnerabilities and Exploits

NIST Cyber Framework Updated With Coordinated Vuln Disclosure Processes

Harley Geiger's avatar

Harley Geiger

R7-2017-25: Cambium ePMP and cnPilot Multiple Vulnerabilities

Vulnerabilities and Exploits

R7-2017-25: Cambium ePMP and cnPilot Multiple Vulnerabilities

Tod Beardsley's avatar

Tod Beardsley

The BadRabbit Ransomware Attack: What You Need To Know

Vulnerabilities and Exploits

The BadRabbit Ransomware Attack: What You Need To Know

boB Rudis's avatar

boB Rudis

R7-2017-08: BPC SmartVista SQL Injection Vulnerability

Vulnerabilities and Exploits

R7-2017-08: BPC SmartVista SQL Injection Vulnerability

Sam Huckins's avatar

Sam Huckins

No-Priority, Post-Auth Vulnerabilities

Vulnerabilities and Exploits

No-Priority, Post-Auth Vulnerabilities

Tod Beardsley's avatar

Tod Beardsley

Vulnerabilities Affecting Four Rapid7 Products (FIXED)

Vulnerabilities and Exploits

Vulnerabilities Affecting Four Rapid7 Products (FIXED)

Sam Huckins's avatar

Sam Huckins

Multiple vulnerabilities in Wink and Insteon smart home systems

Vulnerabilities and Exploits

Multiple vulnerabilities in Wink and Insteon smart home systems

Sam Huckins's avatar

Sam Huckins

Cisco Smart Install Exposure

Vulnerabilities and Exploits

Cisco Smart Install Exposure

Jon Hart's avatar

Jon Hart

R7-2017-07: Multiple Fuze TPN Handset Portal vulnerabilities (FIXED)

Vulnerabilities and Exploits

R7-2017-07: Multiple Fuze TPN Handset Portal vulnerabilities (FIXED)

Sam Huckins's avatar

Sam Huckins

R7-2017-06 | CVE-2017-5241: Biscom SFT XSS (FIXED)

Vulnerabilities and Exploits

R7-2017-06 | CVE-2017-5241: Biscom SFT XSS (FIXED)

Tod Beardsley's avatar

Tod Beardsley

R7-2017-16 | CVE-2017-5244: Lack of CSRF protection for stopping tasks in Metasploit Pro, Express, and Community editions (FIXED)

Vulnerabilities and Exploits

R7-2017-16 | CVE-2017-5244: Lack of CSRF protection for stopping tasks in Metasploit Pro, Express, and Community editions (FIXED)

Sam Huckins's avatar

Sam Huckins

R7-2017-13 | CVE-2017-5243: Nexpose Hardware Appliance SSH Enabled Obsolete Algorithms

Vulnerabilities and Exploits

R7-2017-13 | CVE-2017-5243: Nexpose Hardware Appliance SSH Enabled Obsolete Algorithms

Sam Huckins's avatar

Sam Huckins

R7-2017-05 | CVE-2017-3211: Centire Yopify Information Disclosure

Vulnerabilities and Exploits

R7-2017-05 | CVE-2017-3211: Centire Yopify Information Disclosure

Sam Huckins's avatar

Sam Huckins

Patching CVE-2017-7494 in Samba: It's the Circle of Life

Vulnerabilities and Exploits

Patching CVE-2017-7494 in Samba: It's the Circle of Life

Jen Ellis's avatar

Jen Ellis

R7-2016-23, R7-2016-26, R7-2016-27: Multiple Home Security Vulnerabilities

Vulnerabilities and Exploits

R7-2016-23, R7-2016-26, R7-2016-27: Multiple Home Security Vulnerabilities

Tod Beardsley's avatar

Tod Beardsley

On the lookout for Intel AMT CVE-2017-5689

Vulnerabilities and Exploits

On the lookout for Intel AMT CVE-2017-5689

Alex Hin's avatar

Alex Hin

R7-2017-02: Hyundai Blue Link Potential Info Disclosure (FIXED)

Vulnerabilities and Exploits

R7-2017-02: Hyundai Blue Link Potential Info Disclosure (FIXED)

Tod Beardsley's avatar

Tod Beardsley

Rapid7 urges NIST and NTIA to promote coordinated disclosure processes

Vulnerabilities and Exploits

Rapid7 urges NIST and NTIA to promote coordinated disclosure processes

Harley Geiger's avatar

Harley Geiger