22200 matches found
Metasploit Wrap-Up 01/23/2026
Oracle E-Business Suite Unauth RCE This week, we are pleased to announce the addition of a module that exploits CVE-2025-61882, a pre-authentication remote code execution vulnerability in Oracle E-Business Suite versions 12.2.3 through 12.2.14. The exploit chains multiple flaws—including SSRF, pa...
📄 Splunk Enterprise 9.1.5 / 9.2.2 Remote Code Execution
This Metasploit module exploits a remote code execution vulnerability in Splunk Enterprise splunkarchiver application. The flaw is rooted in the unsafe use of a Splunk lookup function. The affected versions include any release prior to 9.0.10, as well as versions 9.1.2 through 9.1.5 and 9.2.0...
📄 Splunk Enterprise 8.2.9 / 9.0.2 Remote Code Execution
This Metasploit module exploits a remote code execution vulnerability in Splunk Enterprise. An attacker can inject arbitrary Python code into style parameters, such as the fillColor or lineColor of a sparkline element within a Splunk SimpleXML dashboard. The malicious code is executed when a user...
CVE-2021-33845
The Splunk Enterprise REST API allows enumeration of usernames via the lockout error message. The potential vulnerability impacts Splunk Enterprise instances before 8.1.7 when configured to repress verbose login errors...
CVE-2022-26070
When handling a mismatched pre-authentication cookie, the application leaks the internal error message in the response, which contains the Splunk Enterprise local system path. The vulnerability impacts Splunk Enterprise versions before 8.1.0...
CVE-2021-31559
A crafted request bypasses S2S TCP Token authentication writing arbitrary events to an index in Splunk Enterprise Indexer 8.1 versions before 8.1.5 and 8.2 versions before 8.2.1. The vulnerability impacts Indexers configured to use TCPTokens. It does not impact Universal Forwarders...
CVE-2013-6870
Cross-site scripting XSS vulnerability in Splunk Web in Splunk before 5.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2013-6773
Splunk 5.0.3 has an Unquoted Service Path in Windows for Universal Forwarder which can allow an attacker to escalate privileges...
CVE-2013-6772
Splunk before 5.0.4 lacks X-Frame-Options which can allow Clickjacking...
CVE-2025-4656 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
CVE-2025-6037 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-6C5R-4WFC-3MCX vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-MWGR-84FV-3JH9 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-QGJ7-FMQ2-6CC4 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-VP5W-XCFC-73WF vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
CVE-2025-6014 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-6H4P-M86H-HHGH vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GHSA-7RX2-769V-HRWF vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...