Emacs Extension Persistence

This module adds a lisp based malicious extension to the emacs configuration file. When emacs is opened, the extension will be loaded and the payload will be executed. Tested against emacs 29.3 build 1 on Ubuntu Desktop 24.04. Module Options msf use exploit/linux/persistence/emacs/extension msf...

MiracleLinux 7 : emacs-24.3-23.el7.1 (AXSA:2023-5879:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5879:04 advisory. emacs: command injection vulnerability in htmlfontify.el CVE-2022-48339 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 8 : emacs-26.1-12.el8_10 (AXSA:2024-8850:02)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2024-8850:02 advisory. emacs: Gnus treats inline MIME contents as trusted CVE-2024-30203 emacs: Org mode considers contents of remote files to be trusted CVE-2024-30205...

MiracleLinux 8 : emacs-26.1-10.el8.2 (AXSA:2023-6141:08)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-6141:08 advisory. emacs: Regression of CVE-2023-28617 fixes in the Asianux Server CVE-2023-2491 Tenable has extracted the preceding description block directly from the...

MiracleLinux 7 : autotrace-0.31.1-38.el7, emacs-24.3-23.el7, ImageMagick-6.9.10.68-3.el7, inkscape-0.92.2-3.el7 (AXSA:2020-048:01)

The remote MiracleLinux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2020-048:01 advisory. ImageMagick: multiple security vulnerabilities CVE-2018-12599, CVE-2018-12600, CVE-2019-9956, CVE-2019-11597, CVE-2019-11598, CVE-2019-12974,...

MiracleLinux 8 : emacs-26.1-11.el8 (AXSA:2023-7128:10)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-7128:10 advisory. emacs: command execution via shell metacharacters CVE-2022-48337 emacs: command injection vulnerability in htmlfontify.el CVE-2022-48339 Tenable has...

MiracleLinux 9 : emacs-27.2-10.el9_4 (AXSA:2024-8807:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8807:01 advisory. emacs: org-link-expand-abbrev: Do not evaluate arbitrary unsafe Elisp code CVE-2024-39331 Tenable has extracted the preceding description block directly from...

MiracleLinux 7 : emacs-24.3-23.1.0.2.el7.AXS7 (AXSA:2024-8928:04)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8928:04 advisory. CVE-2022-45939: fix ctags local command injection vulnerability CVEs: CVE-2022-45939 GNU Emacs through 28.2 allows attackers to execute commands via shell...

MiracleLinux 9 : emacs-27.2-6.el9.1 (AXSA:2023-5326:02)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5326:02 advisory. emacs: command injection vulnerability in org-mode CVE-2023-28617 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 7 : emacs-24.3-23.0.1.el7.AXS7 (AXSA:2024-8912:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8912:03 advisory. CVE-2024-48337: fix etags local command injection vulnerability CVEs: CVE-2024-48337 RESERVED This candidate has been reserved by an organization or individu...

MiracleLinux 8 : emacs-26.1-7.el8.1 (AXSA:2023-5311:01)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5311:01 advisory. emacs: command injection vulnerability in org-mode CVE-2023-28617 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 9 : emacs-27.2-8.el9 (AXSA:2023-5619:03)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5619:03 advisory. emacs: ctags local command execution vulnerability CVE-2022-45939 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 8 : emacs-26.1-9.el8 (AXSA:2023-5965:05)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2023-5965:05 advisory. emacs: ctags local command execution vulnerability CVE-2022-45939 Tenable has extracted the preceding description block directly from the MiracleLinux securi...

MiracleLinux 7 : emacs-24.3-23.1.0.3.el7.AXS7 (AXSA:2024-8951:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2024-8951:05 advisory. CVE-2024-39331: do not expand link abbrevs that contain unsafe function CVEs: CVE-2024-39331 In Emacs before 29.4, org-link-expand-abbrev in lisp/ol.el expan...

MiracleLinux 9 : emacs-27.2-8.el9.1 (AXSA:2023-6067:07)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2023-6067:07 advisory. emacs: Regression of CVE-2023-28617 fixes in the MIRACLE LINUX CVE-2023-2491 emacs: command execution via shell metacharacters CVE-2022-48337 emacs:...

MiracleLinux 7 : emacs-24.3-20.el7 (AXSA:2017-2282:02)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2017-2282:02 advisory. A command injection flaw within the Emacs enriched mode handling has been discovered. By tricking an unsuspecting user into opening a specially crafted file...

MiracleLinux 8 : emacs-26.1-13.el8_10 (AXSA:2025-9716:02)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9716:02 advisory. emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme CVE-2025-1244 Tenable has extracted the preceding description block directly from...

MiracleLinux 9 : emacs-27.2-11.el9_5.1 (AXSA:2025-9715:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-9715:01 advisory. emacs: Shell Injection Vulnerability in GNU Emacs via Custom man URI Scheme CVE-2025-1244 Tenable has extracted the preceding description block directly from...

MiracleLinux 8 : emacs-26.1-15.el8_10 (AXSA:2025-10587:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10587:06 advisory. emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 Tenable has extracted the preceding description block directly from the MiracleLinux...

MiracleLinux 9 : emacs-27.2-14.el9_6.2 (AXSA:2025-10583:05)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10583:05 advisory. emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 Tenable has extracted the preceding description block directly from the MiracleLinux...