Posts tagged Research

Threat Research
Rapid7 Analysis: CVE-2020-10148 SolarWinds Orion API authentication bypass and RCE
Rapid7 Labs

Exposure Management
Rapid7 Labs’ 2020 Naughty List Summary Report to Santa
boB Rudis

Exposure Management
UPnP With a Holiday Cheer
Deral Heiland

Threat Research
NICER Protocol Deep Dive: Internet Exposure of memcached
Tod Beardsley

Threat Research
NICER Protocol Deep Dive: Internet Exposure of Microsoft SQL Server (MS SQL) (UDP/1434)
Tod Beardsley

Exposure Management
Behind the Scenes: Under the Hoodie 2020 Video Series
Bri Hand

Threat Research
Don’t Put It on the Internet: Tesla Backup Gateway Edition
Derek Abdine

Threat Research
NICER Protocol Deep Dive: Internet Exposure of MySQL
Tod Beardsley

Threat Research
Rapid7 Analysis: CVE-2020-3992 — ESXi OpenSLP remote code execution vulnerability
Rapid7 Labs

Threat Research
SaltStack Pre-Authenticated Remote Root (CVE-2020-16846 and CVE-2020-25592): What You Need to Know
boB Rudis

Threat Research
Rapid7 Analysis: CVE-2020-16846 — SaltStack Unauthenticated Shell Injection
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-25592 — SaltStack Authentication Bypass and Salt SSH Command Execution
Rapid7 Labs

Threat Research
This One Time on a Pen Test: How I Hacked a Self-Driving Car
Jonathan Stines

Threat Research
Rapid7 Analysis: CVE-2020-14871
Rapid7 Labs

Threat Research
NICER Protocol Deep Dive: Internet Exposure of Citrix ADC/NetScaler
Tod Beardsley

Exposure Management
The Story Behind Security Breaches
Laurel Marotta

Threat Research
Rapid7 Analysis: CVE-2020-17087 Windows Kernel local privilege escalation 0day
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-14882 — Unauthenticated RCE in Console component of Oracle WebLogic Server
Rapid7 Labs

Threat Research
NICER Protocol Deep Dive: Internet Exposure of Remote Desktop (RDP)
Tod Beardsley

Threat Research
Rapid7 Analysis: CVE-2020-15999 Chrome Freetype 0day
Rapid7 Labs

Threat Research
Rapid7 Analysis: CVE-2020-5135
Rapid7 Labs