Vulnerability Disclosure

How Poisonous is VENOM (CVE-2015-3456) to your Virtual Environments?

R7-2015-02: Google Play Store X-Frame-Options (XFO) Gaps Enable Android Remote Code Execution (RCE)

GHOST in the Machine - Is CVE-2015-0235 another Heartbleed?

Google No Longer Provides Patches for WebView Jelly Bean and Prior

POODLE Jr.: The Revenge - How to scan for CVE-2014-8730

Patch CVE-2014-6324 To Avoid A Complete Domain Rebuild When UserInsight Detects Its Exploit

R7-2014-15: GNU Wget FTP Symlink Arbitrary Filesystem Access

Block the POODLE's bite: How to scan for CVE-2014-3566

UserInsight Gets the All-Clear for ShellShock and Helps Detect Attackers on Your Network

Christian Kirsch

Bash the bash bug: Here's how to scan for CVE-2014-6271 (Shellshock)

R7-2014-12: More Amplification Vulnerabilities in NTP Allow Even More DRDoS Attacks

More SNMP Information Leaks: CVE-2014-4862 and CVE-2014-4863

R7-2014-01, R7-2014-02, R7-2014-03 Disclosures: Exposure of Critical Information Via SNMP Public Community String

Supermicro IPMI Firmware Vulnerabilities

Good Exploits Never Die: Return of CVE-2012-1823

From the Wild to Metasploit: Exploit for MoinMoin Wiki (CVE-2012-6081)

Exploiting Ruby on Rails with Metasploit (CVE-2013-0156)

Serialization Mischief in Ruby Land (CVE-2013-0156)

Free Scanner for MySQL Authentication Bypass CVE-2012-2122

Christian Kirsch

New Critical Microsoft IE Zero-Day Exploits in Metasploit

CVE-2012-2122: A Tragically Comedic Security Flaw in MySQL