CVE-2017-5235

Rapid7 Metasploit Pro installers prior to version 4.13.0-2017022101 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5228

The CVE-2017-5228 entry details a directory-traversal in Meterpreter stdapi Dir.download() affecting Rapid7 Metasploit prior to version 4.13.0-2017020701. An attacker could craft Meterpreter payloads to write to arbitrary directories on the Metasploit console with the permissions of the running i...

CVE-2017-5232

All editions of Rapid7 Nexpose installers prior to version 6.4.24 contain a DLL preloading vulnerability, wherein it is possible for the installer to load a malicious DLL located in the current working directory of the installer...

CVE-2017-5234

CVE-2017-5234 affects Rapid7 Insight Collector installers prior to version 1.0.16, which ship with a DLL preloading vulnerability . An attacker could trick a user into placing a malicious DLL in the installer’s current working directory, enabling the DLL to be loaded during installation. Rapid7 n...

Rapid7 Metasploit Pro DLL Loading Remote Code Execution Vulnerability

Metasploit Pro is a powerful guided penetration testing platform. A DLL loading remote code execution vulnerability exists in Rapid7 Metasploit Pro prior version 4.13.0-2017022101, which can be exploited by a remote attacker to execute arbitrary code in the context of an affected application...

Rapid7 Insight Collector DLL Loading Remote Code Execution Vulnerability

Rapid7 is the world's leading security risk information solution for vulnerability management, vulnerability scanning, vulnerability assessment and penetration testing. The Rapid7 Insight Collector DLL is loaded with a remote code execution vulnerability that can be exploited by a remote attacker...

Under the Hoodie: Actionable Research from Penetration Testing Engagements

Today, we're excited to release Rapid7's latest research paper, Under the Hoodie: Actionable Research from Penetration Testing Engagements, by Bob Rudis, Andrew Whitaker, Tod Beardsley, with loads of input and help from the entire Rapid7 pentesting team. This paper covers the often occult art of...

Rapid7 Nexpose Create Tags Page Cross-Site Scripting Vulnerability

Rapid7 Nexpose is a suite of vulnerability management software from Rapid7 USA that can synthesize different scans to deeply probe a network. The software proactively scans configuration environments for errors, vulnerabilities, malware and provides guidance to reduce risk. A cross-site scripting...

CVE-2016-9757

In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated user who has the capability to create tags can inject cross-site scripting XSS elements in the tag name field. Once this tag is viewed in the Tag Detail page of the Rapid7 Nexpose 6.4.12 UI by another...

Cross site scripting

In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated user who has the capability to create tags can inject cross-site scripting XSS elements in the tag name field. Once this tag is viewed in the Tag Detail page of the Rapid7 Nexpose 6.4.12 UI by another...

CVE-2016-9757

In the Create Tags page of the Rapid7 Nexpose version 6.4.12 user interface, any authenticated user who has the capability to create tags can inject cross-site scripting XSS elements in the tag name field. Once this tag is viewed in the Tag Detail page of the Rapid7 Nexpose 6.4.12 UI by another...

CVE-2016-9757

CVE-2016-9757 affects Rapid7 Nexpose 6.4.12 UI, where an authenticated user with tag-creation rights can inject cross-site scripting into the tag name field. When another authenticated user views the tag in the Tag Detail page, the script executes in their browser context. Public references indic...

iTrack Easy contains multiple vulnerabilities

Overview iTrack Easy contains multiple vulnerabilities including sensitive information exposure and missing authentication. Description CWE-200: Information Exposure - CVE-2016-6542The iTrack device tracking ID number is the device's BLE MAC address. It can be obtained by being in range of the...

Popular Android App Leaks Microsoft Exchange User Credentials

A popular Android app used to access corporate email, calendar and contacts via Microsoft Exchange servers is vulnerable to leaking user credentials to attackers. The application called Nine, according to researchers at Rapid7, could allow an attacker to launch a man-in-the-middle attack, allowin...

Metasploit Web UI Static secret_key_base Value

This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class MetasploitModule NullSerializer @serializer = options:serializer || Marshal end def encryptandsignvalue...

Critical Flaws Found in Network Management Systems

Eleven critical vulnerabilities have been patched in network management systems NMS from four leading manufacturers: Cloudview, Netikus, Paessler and Opmantek. The flaws enable remote cross-site scripting and command-injection attacks. Public disclosure of the vulnerabilities coincided with a...

Rapid7 AppSpider 6.12 - Local Privilege Escalation

Rapid7 AppSpider 6.12 - Local Privilege Escalation Rapid7 AppSpider 6.12 Web Application Vulnerability Scanner Elevation Of Privilege Vendor: Rapid7, Inc. Product web page: https://www.rapid7.com Affected version: 6.12.10.1 Summary: While today's malicious attackers pursue a variety of goals,...

Rapid7 AppSpider 6.12 - Local Privilege Escalation

Rapid7 AppSpider 6.12 Web Application Vulnerability Scanner Elevation Of Privilege Vendor: Rapid7, Inc. Product web page: https://www.rapid7.com Affected version: 6.12.10.1 Summary: While today's malicious attackers pursue a variety of goals, they share a preferred channel of attack - the...

Rapid7 AppSpider 6.12 Privilege Escalation

i? Rapid7 AppSpider 6.12 Web Application Vulnerability Scanner Elevation Of Privilege Vendor: Rapid7, Inc. Product web page: https://www.rapid7.com Affected version: 6.12.10.1 Summary: While today's malicious attackers pursue a variety of goals, they share a preferred channel of attack - the...

Rapid7 AppSpider 6.12 Web Application Vulnerability Scanner Elevation Of Privilege

Summary While today's malicious attackers pursue a variety of goals, they share a preferred channel of attack - the millions of custom web, mobile, and cloud applications companies deploy to serve their customers. AppSpider dynamically scans these applications for vulnerabilities across all moder...