Research

Don’t Put It on the Internet: Tesla Backup Gateway Edition

NICER Protocol Deep Dive: Internet Exposure of MySQL

Rapid7 Analysis: CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability

Rapid7 Intelligence

SaltStack Pre-Authenticated Remote Root (CVE-2020-16846 and CVE-2020-25592): What You Need to Know

Rapid7 Analysis: CVE-2020-16846 — SaltStack Unauthenticated Shell Injection

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-25592 — SaltStack Authentication Bypass and Salt SSH Command Execution

Rapid7 Intelligence

This One Time on a Pen Test: How I Hacked a Self-Driving Car

Jonathan Stines

Rapid7 Analysis: CVE-2020-14871

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler

The Story Behind Security Breaches

Rapid7 Analysis: CVE-2020-17087 Windows Kernel local privilege escalation 0day

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-14882 — Unauthenticated RCE in Console component of Oracle WebLogic Server

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of Remote Desktop (RDP)

Rapid7 Analysis: CVE-2020-15999 Chrome Freetype 0day

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-5135

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-16898 aka Bad Neighbor / Ping of Death Redux

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-16952 — Microsoft SharePoint Remote Code Execution Vulnerabilities

Rapid7 Intelligence

This One Time on a Pen Test: Doing Well With XML

NICER Protocol Deep Dive: Internet Exposure of SMTP

Exploitability Analysis: Smash the Ref Bug Class

Spencer McIntyre

Microsoft Exchange 2010 End of Support and Overall Patching Study