Lucene search
K

10 matches found

RedhatCVE
RedhatCVE
added 2026/04/04 4:59 a.m.1 views

CVE-2026-5463

Command injection vulnerability in console.runmodulewithoutput in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended...

9.3CVSS6.2AI score0.00321EPSS
Exploits0References1
Github Security Blog
Github Security Blog
added 2026/04/03 6:31 a.m.3 views

pymetasploit3 vulnerable to command injection in console.run_module_with_output()

Command injection vulnerability in console.runmodulewithoutput in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended...

9.8CVSS6.2AI score0.00321EPSS
Exploits0References3Affected Software1
EUVD
EUVD
added 2026/04/03 6:31 a.m.1 views

EUVD-2026-18601

Command injection vulnerability in console.runmodulewithoutput in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended...

9.3CVSS6.2AI score0.00321EPSS
Exploits0References3
OSV
OSV
added 2026/04/03 6:31 a.m.2 views

GHSA-QPC3-8VQG-8G6W pymetasploit3 vulnerable to command injection in console.run_module_with_output()

Command injection vulnerability in console.runmodulewithoutput in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended...

9.3CVSS6.2AI score0.00321EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2026/04/03 4:32 a.m.1 views

CVE-2026-5463

Command injection vulnerability in console.runmodulewithoutput in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended...

9.3CVSS6.2AI score0.00321EPSS
Exploits0References2
CVE
CVE
added 2026/04/03 4:32 a.m.8 views

CVE-2026-5463

The vulnerability CVE-2026-5463 affects the pymetasploit3 project (through version 1.0.6) where console.run_module_with_output() accepts newline characters in module options (e.g., RHOSTS). This can break the intended command structure and cause the Metasploit console to execute additional uninte...

9.8CVSS6.2AI score0.00321EPSS
Exploits0References2Affected Software1
Gitee
Gitee
added 2020/04/23 5:10 p.m.2 views

metasploit-framework

This is a Metasploit Framework repository. The framework is a penetration testing tool that allows users to create and execute exploits against various targets. The repository contains a wide range of modules, including exploits, payloads, and auxiliary tools. The framework is written in Ruby and...

7.8AI score
Exploits0
Gitee
Gitee
added 2020/02/21 5:1 p.m.2 views

metasploit-framework

This is the Metasploit Framework repository, a widely used penetration testing tool. It is an offensive tool for penetration testing and vulnerability assessment. The primary target of this tool is the Metasploit Framework itself, which is a Ruby-based framework for developing and executing...

8.5AI score
Exploits0
Gitee
Gitee
added 2017/03/24 4:7 p.m.3 views

metasploit-framework

This is the Metasploit Framework repository, a comprehensive collection of exploit modules and tools for penetration testing and vulnerability assessment. The framework is written in Ruby and is widely used by security professionals and researchers. The repository contains a large number of...

6.9AI score
Exploits0
CNVD
CNVD
added 2017/03/03 12:0 a.m.1 views

Rapid7 Metasploit Directory Traversal Vulnerability

Metasploit Pro is a guided penetration testing platform. A directory traversal vulnerability exists in the Meterpreter extapi Clipboard.parsedump function in versions prior to Rapid7 Metasploit 4.13.0-2017020701. An attacker can exploit the vulnerability to write arbitrary files on the Metasploit...

7.1CVSS7AI score0.00299EPSS
Exploits0References1
Rows per page
Query Builder