Rapid7 Named a Visionary in 2022 Magic Quadrant™ for Application Security Testing Second Year in a Row

For the second year in a row, Rapid7 has been named a Visionary in the Gartner® 2022 Magic Quadrant for Application Security Testing. We believe we accomplished this by combining an industry-leading dynamic application security testing DAST solution with container and cloud security, security...

Oracle Application Testing Suite (Apr 2022 CPU)

The version of Oracle Application Testing Suite installed on the remote host is affected by a vulnerability as referenced in the April 2022 CPU advisory. - Vulnerability in the Oracle Application Testing Suite product of Oracle Enterprise Manager component: Load Testing for Web Apps Apache log4ne...

testing-native-go-fuzzing:parser_fuzzer: Null-dereference READ with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=5693012748926976 Project: testing-native-go-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasantesting-native-go-fuzzing Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash Stat...

Exploit for Expression Language Injection in Apache Struts

Struts2S2-062CVE-2021-31805 Apache Struts2 S2-062 remote c...

Microsoft HTTP Protocol Stack Denial Of Service

!/usr/bin/env python3 -- coding: utf-8 -- Exploit developed by the polakow from the past @ltdominikow This exploit was made for testing own networks and patch affected systems. I'm not responsible if you do another thing with this exploit. As a drunk wise man said: "Please, don't be a 'culiao'!"...

Penetration testing and red teaming: The differences and reasons why both are important to your business

Penetration testing, also known as ethical hacking, white-hat hacking, or pen testing, is one important form of security assessment that tests people, process, and technology to find security vulnerabilities that a potential attacker could exploit. Red teaming is a more targeted approach that...

Microsoft Security Update Validation Report April 2022

Microsoft’s April 2022 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing software...

7 Rapid Questions: Meet Adrian Stewart, Aspiring Pilot Turned Product Manager

Welcome back to 7 Rapid Questions, our blog series where we ask passionate leaders at Rapid7 how they’re challenging convention and making an impact. In this installment, we talk to Adrian Stewart, a product manager working on InsightAppSec, Rapid7’s dynamic application security testing DAST tool...

The vulnerability of component 2D of the Oracle GraalVM Enterprise Edition, which allows a hacker to trigger a service failure

The vulnerability of the 2D component of the Oracle GraalVM Enterprise Edition exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the ImageIO component in the Oracle GraalVM Enterprise Edition virtual machine allows a hacker to trigger a service failure.

The vulnerability of the ImageIO component in the Oracle GraalVM Enterprise Edition virtual machine exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

CVE-2020-27375

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars...

CVE-2020-27376

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication...

Authentication flaw

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication...

CVE-2020-27374

CVE-2020-27374 affects Dr Trust USA iCheck Connect BP Monitor BP Testing 118 (firmware 1.2.1). The available connected documents describe a replay-attack vulnerability against the BP monitoring function. Concrete technical details beyond the vulnerability label (e.g., root cause, affected subsyst...

CVE-2020-27375

CVE-2020-27375 affects the Dr Trust USA iCheck Connect BP Monitor BP Testing 118, version 1.2.1. The vulnerability is described as exposure to Transmitting Write Requests and Chars. The connected sources do not provide root cause details or a confirmed exploit, and no remediation/fix is specified...

CVE-2020-27376

The connected sources identify CVE-2020-27376 as an access-control vulnerability in Dr Trust USA iCheck Connect BP Monitor BP Testing 118, version 1.2.1, described as Missing Authentication. Affected product and version are stated; CVSS indicates HIGH severity (AVG 8.3–8.8 depending on metric set...

CVE-2020-27376

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication...

CVE-2020-27376: Missing Authentication for Critical Function

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Missing Authentication...

CVE-2020-27375: Server-Side Request Forgery (SSRF)

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 version 1.2.1 is vulnerable to Transmitting Write Requests and Chars...

CVE-2020-27373: Improper Neutralization of Special Elements used in an OS Command

Dr Trust USA iCheck Connect BP Monitor BP Testing 118 1.2.1 is vulnerable to Plain text command over BLE...