Vulnerability Disclosure

On the lookout for Intel AMT CVE-2017-5689

R7-2017-02: Hyundai Blue Link Potential Info Disclosure (FIXED)

R7-2016-28: Multiple Eview EV-07S GPS Tracker Vulnerabilities

Apache Struts Vulnerability (CVE-2017-5638) Protection: Scanning with Nexpose

Ciaran McCrisken

R7-2017-01: Multiple Vulnerabilities in Double Robotics Telepresence Robot

The Cloudflare (Cloudbleed) Proxy Service Vulnerability Explained

R7-2016-24, OpenNMS Stored XSS via SNMP (CVE-2016-6555, CVE-2016-6556)

Multiple Bluetooth Low Energy (BLE) Tracker Vulnerabilities

R7-2016-07: Multiple Vulnerabilities in Animas OneTouch Ping Insulin Pump

Multiple Disclosures for Multiple Network Management Systems, Part 2

R7-2016-10: Multiple OSRAM SYLVANIA Osram Lightify Vulnerabilities (CVE-2016-5051 through 5059)

R7-2016-06: Remote Code Execution via Swagger Parameter Injection (CVE-2016-5641)

R7-2016-01: Null Credential on Moxa NPort (CVE-2016-1529)

CVE-2015-7547: Revenge of Glibc Resolvers

R7-2015-26: Advantech EKI Dropbear Authentication Bypass (CVE-2015-7938)

CVE-2015-7755: Juniper ScreenOS Authentication Backdoor

Multiple Disclosures for Multiple Network Management Systems

R7-2015-22: ManageEngine Desktop Central 9 FileUploadServlet connectionId Vulnerability (CVE-2015-8249)

Multiple Insecure Installation and Update Procedures for RStudio (R7-2015-10) (FIXED)

Using Reflective DLL Injection to exploit IE Elevation Policies

Exploiting a 64-bit browser with Flash CVE-2015-5119 (Part 2)