Vulnerability Disclosure

IoT Vuln Disclosure: Children's GPS Smart Watches (R7-2019-57)

R7-2019-32: Denial-of-Service Vulnerabilities in Beckhoff TwinCAT PLC Environment

R7-2019-09 | CVE-2019-5617, CVE-2019-5643, CVE-2019-5644: C4G BLIS authentication and authorization vulnerabilities (FIXED)

August 2019 Microsoft Remote Desktop Services (RDP) Patches: What You Need to Know

Zoom Video Snooping Security Flaw (CVE-2019-13450): What You Need to Know

Microsoft Windows RDP Network Level Authentication Bypass (CVE-2019-9510)

R7-2018-43: Username Enumeration in Okta SSO Del Auth through Response Timing

Understanding Ubiquiti Discovery Service Exposures

R7-2018-15 | CVE-2018-5553: Crestron DGE-100 Console Command Injection (FIXED)

R7-2017-25: Cambium ePMP and cnPilot Multiple Vulnerabilities

CVE-2017-16943: Exim BDAT Use-After-Free

R7-2017-08: BPC SmartVista SQL Injection Vulnerability

Vulnerabilities Affecting Four Rapid7 Products (FIXED)

Multiple vulnerabilities in Wink and Insteon smart home systems

Cisco Smart Install Exposure

R7-2017-16 | CVE-2017-5244: Lack of CSRF protection for stopping tasks in Metasploit Pro, Express, and Community editions (FIXED)

R7-2017-13 | CVE-2017-5243: Nexpose Hardware Appliance SSH Enabled Obsolete Algorithms

R7-2016-23, R7-2016-26, R7-2016-27: Multiple Home Security Vulnerabilities

On the lookout for Intel AMT CVE-2017-5689

R7-2017-02: Hyundai Blue Link Potential Info Disclosure (FIXED)

R7-2016-28: Multiple Eview EV-07S GPS Tracker Vulnerabilities