Vendor Dictionary: Rapid7

Rapid7

Short Name:	Rapid7
Previous Names:	[None Entered]
URL:	http://www.rapid7.com/ [visit link]
Email:	inforapid7.com
Security URL:	[None Entered]
Security Email:	securityresponserapid7.com
Knowledge Base:	[None Entered]
Notes:	This address should be used for all Rapid7 products, including NeXpose and the commercial versions of Metasploit.

Vulnerabilities by Vendor Product

Rapid7

Rapid7

Nexpose Console: 5.5.1; OSVDB ID: 88922 Nexpose Console nexposeCCSessionID Session Hijacking Weakness; OSVDB ID: 88923 Nexpose Console /data/site/delete Scan Data Deletion CSRF; 5.5.1

Metasploit: 4.3; OSVDB ID: 86822 Metasploit pcap_log Plugin Temporary File Symlink Arbitrary File Overwrite

Metasploit Framework on Windows: 3.5.1; OSVDB ID: 70857 Metasploit Framework on Windows Insecure Filesystem Permissions Local Privilege Escalation

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.