Research

This One Time on a Pen Test: Doing Well With XML

NICER Protocol Deep Dive: Internet Exposure of SMTP

Exploitability Analysis: Smash the Ref Bug Class

Spencer McIntyre

Microsoft Exchange 2010 End of Support and Overall Patching Study

NICER Protocol Deep Dive: Internet Exposure of rsync

NICER Protocol Deep Dive: Internet Exposure of SMB

This One Time on a Pen Test: How I Outwitted the Vexing VPN

Rapid7 Analysis: CVE-2020-1472 aka Zerologon

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-16875

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-3430

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-3495

Rapid7 Intelligence

NICER Protocol Deep Dive: Internet Exposure of FTP

Rapid7 Analysis: CVE-2020-3566 - Denial of service vulnerability in Cisco IOS XR

Rapid7 Intelligence

NICER Protocol Deep Dive: Secure Shell (SSH)

NICER Protocol Deep Dive: Internet Exposure of Telnet Services

Rapid7 Analysis: Multiple vulnerabilities in Citrix XenMobile Server

Rapid7 Intelligence

Rapid7 Analysis: Remote Code Execution Vulnerabilities in Secomea, Moxa, and HMS eWon VPNs

Rapid7 Intelligence

Remote Code Execution Risks in Secomea, Moxa, and HMS eWon ICS VPN Vulnerabilities: What You Need to Know

CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability: What You Need to Know

Rapid7 Analysis: CVE-2020-3452 Cisco ASA / Firepower Read-Only Path Traversal Vulnerability

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-1350 Windows DNS Server Remote Code Execution (SigRed)

Rapid7 Intelligence