Research

Windows DNS Server Remote Code Execution Vulnerability (CVE-2020-1350): What You Need to Know

Rapid7 Analysis: CVE-2020-6287: Critical Vulnerability in SAP NetWeaver Application Server (AS) Java

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-2034 — PAN-OS: OS command injection vulnerability in GlobalProtect portal

Rapid7 Intelligence

Rapid7 Analysis: CVE-2020-5902 — TMUI RCE vulnerability

Rapid7 Intelligence

CVE-2020-2021 Authentication Bypass in PAN-OS Security Assertion Markup Language (SAML) Authentication Disclosed

Rapid7 Analysis: CVE-2020-2021 PAN-OS: Authentication Bypass in SAML Authentication

Rapid7 Intelligence

Building a Printed Circuit Board Probe Testing Jig

The Masked SYNger: Investigating a Traffic Phenomenon

matthew berninger

CVE-2020-12271: Sophos XG Firewall Pre-Auth SQL Injection Vulnerability Remediation Guidance and Exposure Overview

Meet AttackerKB

Phishing for SYSTEM on Microsoft Exchange (CVE-2020-0688)

CVE-2020-0796: Microsoft SMBv3 Remote Code Execution Vulnerability Analysis

DOUBLEPULSAR over RDP: Baselining Badness on the Internet

DOUBLEPULSAR RCE 2: An RDP Story

Active Exploitation of Citrix NetScaler (CVE-2019-19781): What You Need to Know

Oh, Behave! Who Made It to Rapid7 Labs' Naughty List(s) in 2019?

Cisco Self-Signed Certificate Expiration on Jan. 1, 2020: What You Need to Know

IoT Vuln Disclosure: Children's GPS Smart Watches (R7-2019-57)

R7-2019-32: Denial-of-Service Vulnerabilities in Beckhoff TwinCAT PLC Environment

Open-Source Command and Control of the DOUBLEPULSAR Implant

This One Time on a Pen Test: Your Mouse Is My Keyboard