808 matches found
October 11, 2022-KB5018541 Cumulative Update for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 22H2
None None...
Mobile Mouse RCE
This module utilizes the Mobile Mouse Server by RPA Technologies, Inc protocol to deploy a payload and run it from the server. This module will only deploy a payload if the server is set without a password default. Tested against 3.6.0.4, current at the time of module writing Module Options msf u...
Mobile Mouse 3.6.0.4 Remote Code Execution Exploit
This Metasploit module utilizes the Mobile Mouse Server by RPA Technologies, Inc protocol to deploy a payload and run it from the server. This module will only deploy a payload if the server is set without a password default. Tested against 3.6.0.4, the current version at the time of module...
WiFi Mouse 1.8.3.4 Remote Code Execution Exploit
The WiFi Mouse Mouse Server from Necta LLC contains an authentication bypass as the authentication is completely implemented entirely on the client side. By utilizing this vulnerability, is possible to open a program on the server cmd.exe in our case and type commands that will be executed as the...
Unified Remote Auth Bypass to RCE
This module utilizes the Unified Remote remote control protocol to type out and deploy a payload. The remote control protocol can be configured to have no passwords, a group password, or individual user accounts. If the web page is accessible, the access control is set to no password for...
Palo Alto Networks Authenticated Remote Code Execution
An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS versions use exploit/linux/http/panosopcmdexec msf exploitpanosopcmdexec show targets ...targets... ms...
SuiteCRM authenticated SQL injection in export functionality
This module exploits an authenticated SQL injection in SuiteCRM in versions before 7.12.6. The vulnerability allows an authenticated attacker to send specially crafted requests to the export entry point of the application in order to retrieve all the usernames and their associated password from t...
September 13, 2022-KB5017035 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
September 13, 2022-KB5017498 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10, version 20H2
None None...
Planning Go 1.20 Cryptography Work
As you might know, I left Google in spring to try and make the concept of a professional Open Source maintainer a thing. Im staying on as a maintainer of the Go cryptography standard library, and I am going to seek funding from companies that rely on it, want to ensure its security and reliabilit...
BACnet Scanner
Discover BACnet devices by broadcasting Who-is message, then poll discovered devices for properties including model name, software version, firmware revision and description. Module Options msf use auxiliary/scanner/scada/bacnetl3 msf auxiliarybacnetl3 show actions ...actions... msf...
August 26, 2022-KB5016592 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2
None None...
August 25, 2022-KB5016594 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11
None None...
August 16, 2022-KB5016595 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Microsoft server operating system version 21H2
None None...
August 9, 2022-KB5015732 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 11
None None...
August 9, 2022-KB5015730 Cumulative Update Preview for .NET Framework 3.5 and 4.8 for Windows 10, version 20H2, Windows Server, version 20H2, Windows 10 Version 21H1, and Windows 10 Version 21H2
None None...
August 9, 2022-KB5016373 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016
None None...
Zoho Password Manager Pro XML-RPC Java Deserialization Exploit
This Metasploit module exploits a Java deserialization vulnerability in Zoho ManageEngine Pro before 12101 and PAM360 before 5510. Unauthenticated attackers can send a crafted XML-RPC request containing malicious serialized data to /xmlrpc to gain remote command execution as the SYSTEM user. This...
Imperva Reaches New Heights as it Opens PoPs in Cape Town and Rio
Imperva is reaching new heights as we expand our global network of data centers with new points of presence PoPs in Rio de Janeiro, Brazil and Cape Town, South Africa. The two cities, often compared to each other for their many similarities including their breathtaking coastlines, white sandy...