Metasploit Weekly Wrap-Up 08/16/2024

New module content 3 Apache HugeGraph Gremlin RCE Authors: 6right and jheysel-r7 Type: Exploit Pull request: 19348 contributed by jheysel-r7 Path: linux/http/apachehugegraphgremlinrce AttackerKB reference: CVE-2024-27348 Description: Adds an Apache HugeGraph Server exploit for GHSA-29rc-vq7f-x335...

LG Simple Editor Command Injection (CVE-2023-40504)

Unauthenticated Command Injection in LG Simple Editor use exploit/windows/http/lgsimpleeditorrceuploadvideo msf exploitlgsimpleeditorrceuploadvideo show targets ...targets... msf exploitlgsimpleeditorrceuploadvideo set TARGET msf exploitlgsimpleeditorrceuploadvideo show options ...show and set...

CVE-2023-40504

creationtimestamp| type| source ---|---|--- 2024-08-14 14:42:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/lgsimpleeditorrceuploadvideo.rb 2025-02-06 03:13:46+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:56+00:0...

CVE-2023-40504

LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG Simple Editor. Authentication is not required to exploit this vulnerability. The specific flaw exists within t...