Research

Rapid7 Analysis: K03009991: iControl REST unauthenticated remote command execution vulnerability CVE-2021-22986

Rapid7 Intelligence

Introducing the 2020 Vulnerability Intelligence Report: 50 CVEs that Made Headlines in 2020

Rapid7 Analysis: CVE-2021-24085

Rapid7 Intelligence

Rapid7 Analysis: VMware vSphere Client Unauth Remote Code Execution Vulnerability — CVE-2021-21972

Rapid7 Intelligence

Rapid7 Analysis: SolarWinds Orion Platform Unauthenticated RCE (CVE-2021-25274)

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of HTTP and HTTPS

Rapid7 Analysis: CVE-2021-3007

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-28188

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-7961

Rapid7 Intelligence

Rapid7 Analysis: CVE-2021-3156 "Baron Samedit"

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of NTP

Rapid7 Analysis: CVE-2020-17132

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of DNS-over-TLS

Rapid7 Analysis: CVE-2020-29583 Zyxel USG Hard-Coded Admin Creds

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-15505

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of DNS

HaXmas Hardware Hacking

Rapid7 Analysis: CVE-2020-10148 SolarWinds Orion API authentication bypass and RCE

Rapid7 Intelligence

Rapid7 Labs’ 2020 Naughty List Summary Report to Santa

UPnP With a Holiday Cheer

NICER Protocol Deep Dive: Internet Exposure of Microsoft SQL Server (MS SQL) (UDP/1434)