SaltStack Salt REST API Arbitrary Command Execution Exploit

This Metasploit module exploits an authentication bypass and command injection in SaltStack Salt's REST API to execute commands as the root user. The following versions have received a patch: 2015.8.10, 2015.8.13, 2016.3.4, 2016.3.6, 2016.3.8, 2016.11.3, 2016.11.6, 2016.11.10, 2017.7.4, 2017.7.8,...

CVE-2020-4649

creationtimestamp| type| source ---|---|--- 2020-11-03 16:40:21+00:00| seen| https://t.me/cibsecurity/15805...

CVE-2020-15973

creationtimestamp| type| source ---|---|--- 2020-11-03 07:39:57+00:00| seen| https://t.me/cibsecurity/15796...

CVE-2020-16001

creationtimestamp| type| source ---|---|--- 2020-11-03 07:39:56+00:00| seen| https://t.me/cibsecurity/15795...

CVE-2020-7758

creationtimestamp| type| source ---|---|--- 2020-11-03 00:45:09+00:00| seen| https://t.me/cibsecurity/15788...

CVE-2020-27982

creationtimestamp| type| source ---|---|--- 2020-11-03 00:39:07+00:00| seen| https://t.me/cibsecurity/15787...

[ASA-202011-2] chromium: multiple issues

Arch Linux Security Advisory ASA-202011-2 ========================================= Severity: Critical Date : 2020-11-03 CVE-ID : CVE-2020-16004 CVE-2020-16005 CVE-2020-16006 CVE-2020-16007 CVE-2020-16008 CVE-2020-16009 Package : chromium Type : multiple issues Remote : Yes Link :...