Metasploit Wrap-Up 05/15/2026

Weaponizing a text editor for fun and profit Gather round, dear readers, because today, we by we, we mean @h00die dropped the ultimate persistence mechanism: Vim plugin persistence. And honestly, calling it "persistence" feels redundant — Vim is already the most persistent thing ever. Somewhere,...

Marvell QConvergeConsole Path Traversal (CVE-2025-6793)

This module exploits a path traversal vulnerability CVE-2025-6793 in Marvell QConvergeConsole use auxiliary/gather/qconvergeconsoletraversal msf auxiliaryqconvergeconsoletraversal show actions ...actions... msf auxiliaryqconvergeconsoletraversal set ACTION msf auxiliaryqconvergeconsoletraversal...

CVE-2020-17387

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Marvell QConvergeConsole 5.5.0.64. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the...

EUVD-2020-26962

Malware in sbrugna...

EUVD-2020-9341

Malware in sbrugna...

EUVD-2020-26960

Malware in sbrugna...

EUVD-2020-7628

Malware in sbrugna...

EUVD-2020-7630

Malware in sbrugna...

EUVD-2020-7627

Malware in sbrugna...

EUVD-2020-7632

Malware in sbrugna...

EUVD-2025-20250

Malicious code in bioql PyPI...

EUVD-2025-20253

Malicious code in bioql PyPI...

EUVD-2025-20251

Malicious code in bioql PyPI...

EUVD-2025-20243

Malicious code in bioql PyPI...

EUVD-2025-20235

Malicious code in bioql PyPI...

CVE-2025-8426

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...

CVE-2025-8426

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...

CVE-2025-8426 Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...

CVE-2025-8426

CVE-2025-8426 concerns Marvell QConvergeConsole. The issue is in the compressConfigFiles method where user-supplied paths are not properly validated before file operations, enabling a directory-traversal attack that can disclose sensitive information and trigger a denial-of-service condition. Exp...

CVE-2025-8426 Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerability. This vulnerability allows remote attackers to disclose sensitive information or to create a denial-of-service condition on affected installations of Marvell QConvergeConsol...