Lucene search
+L

13865 matches found

Rapid7 Blog
Rapid7 Blog
added 2024/08/16 6:33 p.m.122 views

Metasploit Weekly Wrap-Up 08/16/2024

New module content 3 Apache HugeGraph Gremlin RCE Authors: 6right and jheysel-r7 Type: Exploit Pull request: 19348 contributed by jheysel-r7 Path: linux/http/apachehugegraphgremlinrce AttackerKB reference: CVE-2024-27348 Description: Adds an Apache HugeGraph Server exploit for GHSA-29rc-vq7f-x335...

9.8CVSS9AI score0.9921EPSS
SaveExploits20
Rapid7 Blog
Rapid7 Blog
added 2024/08/09 6:21 p.m.36 views

Metasploit Weekly Wrap-Up 08/09/2024

Black Hat & DEF CON Hopefully folks were able to catch our Rapid7 researchers @zeroSteiner & Jack Heysel show off the Metasploit 6.4's features, focusing on combinations that allow for new, streamlined attack workflows at Black Hat. If not they will also be demoing at DEF CON tomorrow in room W30...

9.8CVSS7.8AI score0.84116EPSS
SaveExploits8
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/08/07 12:09 p.m.10 views

Malicious code in tsc-aws-s3 (npm)

The package contains a postinstall script to download and execute an ELF Metasploit reverse shell...

7.1AI score
SaveExploits0
OSV
OSV
added 2024/08/07 12:09 p.m.13 views

MAL-2024-8009 Malicious code in tsc-aws-s3 (npm)

The package contains a postinstall script to download and execute an ELF Metasploit reverse shell...

7.2AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/08/06 7:49 a.m.491 views

Exploit for Improper Restriction of Excessive Authentication Attempts in Logsign Unified_Secops_Platform

Logsign SIEM RCE Exploit CVE-2024-5716 & CVE-2024-5717 This...

9.8CVSS9.6AI score0.02954EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2024/08/03 7:26 p.m.643 views

Exploit for CVE-2024-31211

It is an exploit module/toolkit targeting unspecified products/s...

5.5CVSS6.7AI score0.02763EPSS
SaveExploits1
GithubExploit
GithubExploit
added 2024/08/03 4:08 p.m.1796 views

Exploit for Server-Side Request Forgery in Apache Http_Server

It is an offensive tool for web applications. The repository app...

7.5CVSS6.9AI score0.6947EPSS
SaveExploits1
Rapid7 Blog
Rapid7 Blog
added 2024/08/02 6:36 p.m.50 views

Metasploit Weekly Wrap-Up 08/02/2024

Metasploit goes to Hacker Summer Camp Next week, Metasploit will have demos at both Black Hat and DEF CON where the latest functionality from this year will be presented. The Black Hat demo will be on Thursday the 8th from 10:10 to 11:25 and the DEF CON demo will be on Saturday the 10th from 12:0...

9.8CVSS9AI score0.57112EPSS
SaveExploits12
zdt
zdt
added 2024/07/31 12:00 a.m.311 views

OpenMediaVault rpc.php Authenticated Cron Remote Code Execution Exploit

OpenMediaVault allows an authenticated user to create cron jobs as root on the system. An attacker can abuse this by sending a POST request via rpc.php to schedule and execute a cron entry that runs arbitrary commands as root on the system. All OpenMediaVault versions including the latest release...

8.8CVSS8.9AI score0.57112EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2024/07/31 12:00 a.m.427 views

OpenMediaVault rpc.php Authenticated Cron Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OpenMediaVault rpc.php Authenticated Cron Remote Code Execution', 'Description' = %q OpenMediaVault allows an authenticated user to create cron...

9CVSS7.4AI score0.57112EPSS
SaveExploits8
Metasploit
Metasploit
added 2024/07/31 12:00 a.m.223 views

Calibre Python Code Injection (CVE-2024-6782)

This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.15.0. Once enabled disabled by default, it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any...

9.8CVSS8.5AI score0.84116EPSS
SaveExploits8
Rapid7 Blog
Rapid7 Blog
added 2024/07/26 6:07 p.m.50 views

Metasploit Weekly Wrap-Up 07/26/2024

New module content 3 Magento XXE Unserialize Arbitrary File Read Authors: Heyder and Sergey Temnikov Type: Auxiliary Pull request: 19304 contributed by heyder Path: gather/magentoxxecve202434102 AttackerKB reference: CVE-2024-34102 Description: This adds an auxiliary module for an XXE which resul...

9.8CVSS8.3AI score0.99994EPSS
SaveExploits35
Packet Storm
Packet Storm
added 2024/07/22 12:00 a.m.261 views

Softing Secure Integration Server 1.22 Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'zip' require 'metasploit/framework/loginscanner/softingsis' class MetasploitModule 'Softing Secure Integration Server v1.22 Remote Code Execution', 'Description...

7.2CVSS7.4AI score0.12802EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2024/07/22 12:00 a.m.380 views

Ghostscript Command Execution / Format String

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ghostscript Command Execution via Format String', 'Description' = %q This module exploits a format string vulnerability in Ghostscript versions...

6.3CVSS7.4AI score0.27992EPSS
SaveExploits6
Rapid7 Blog
Rapid7 Blog
added 2024/07/19 4:46 p.m.40 views

Metasploit Weekly Wrap-Up 7/19/2024

GeoServer Unauthenticated RCE This week, contributor h00die-gr3y added an interesting exploit module that targets the GeoServer open-source application. This software is used to view, edit, and share geospatial data. Versions prior to 2.23.6, versions between 2.24.0 and 2.24.3 and versions betwee...

9.8CVSS8.2AI score0.99813EPSS
SaveExploits26
Metasploit
Metasploit
added 2024/07/19 12:00 a.m.739 views

ProjectSend r1295 - r1605 Unauthenticated Remote Code Execution

This module exploits an improper authorization vulnerability in ProjectSend versions r1295 through r1605. The vulnerability allows an unauthenticated attacker to obtain remote code execution by enabling user registration, disabling the whitelist of allowed file extensions, and uploading a malicio...

9.8CVSS9.7AI score0.91697EPSS
SaveExploits4
Rapid7 Blog
Rapid7 Blog
added 2024/07/12 2:33 p.m.51 views

Metasploit Weekly Wrap-Up 07/12/2024

The Usual Suspects This release features two new exploits targeting old friends: Confluence and Ivanti. CVE-2024-21683 is a very easy vulnerability to exploit, but as pointed out in the AttackerKB Review, it requires authentication as a ‘Confluence Administrator.’ On the other hand, CVE-2024-2982...

8.8CVSS8.6AI score0.99951EPSS
SaveExploits14
Packet Storm
Packet Storm
added 2024/07/11 12:00 a.m.373 views

Atlassian Confluence Administrator Code Macro Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Atlassian Confluence Administrator Code Macro Remote Code Execution', 'Description' = %q This module exploits an authenticated administrator-leve...

8.8CVSS7AI score0.88267EPSS
SaveExploits9
zdt
zdt
added 2024/07/09 12:00 a.m.207 views

Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution Exploit

Ivanti Endpoint Manager EPM 2022 SU5 and prior versions are susceptible to an unauthenticated SQL injection vulnerability which can be leveraged to achieve unauthenticated remote code execution. This module requires Metasploit: https://metasploit.com/download Current source:...

8.8CVSS9.4AI score0.99951EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2024/07/09 12:00 a.m.319 views

Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ivanti EPM RecordGoodApp SQLi RCE', 'Description' = %q Ivanti Endpoint Manager EPM 2022 SU5 and prior are vulnerable to unauthenticated SQL...

9.6CVSS7.4AI score0.99951EPSS
SaveExploits5
Rows per page
Query Builder