29 matches found
linux-exploit-suggester-2
No d...
Metasploit 2025 Annual Wrap-Up
Hard to believe it's that time again, and that Metasploit Framework will see the dawn of another Annual Wrap-Up and a New Year. All of the metrics and modules you see here would in large part not be possible without the dedicated community members who care about the Framework and its mission on a...
Metasploit Wrap-Up 10/24/2025
Let us suggest persistence… This week's edition brings the new persistence suggester from h00die. Similar to the exploit variant, this module will list the available persistence mechanisms for your selected target. The module requires a session to target the machine, so it can run check methods...
Linux Distros Unpatched Vulnerability : CVE-2021-22135
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and...
Exploit for Race Condition in Canonical Ubuntu_Linux
Linux Exploit Suggester 2 ========================= Next-generation exploit suggester based on LinuxExploitSuggester Key Improvements Include: More exploits! Option to download exploit code directly from Exploit DB Accurate wildcard matching. This expands the scope of searchable exploits. Output...
MAL-2025-5488 Malicious code in airbnb-location-suggester (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737604ff441534b7aeae22ee55636471142cccc2d6e2bbd4895a8f640c30aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in airbnb-location-suggester (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2737604ff441534b7aeae22ee55636471142cccc2d6e2bbd4895a8f640c30aa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in code-suggester (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e28ce2ce1f759945a6b42ebe9f6f224869ab1f91b85212853e83a20d43a390bd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...
MAL-2025-909 Malicious code in code-suggester (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 e28ce2ce1f759945a6b42ebe9f6f224869ab1f91b85212853e83a20d43a390bd During installation, the package collects quite extensive information about the host and has no other purpose. To avoid detection, the real code is put in a ZI...
BIT-ELASTICSEARCH-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
SUSE CVE-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
elasticsearch: Document disclosure flaw in the Elasticsearch suggester
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
CVE-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
GHSA-62WW-4P3P-7FHJ API information disclosure flaw in Elasticsearch
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
CVE-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
UBUNTU-CVE-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
CVE-2021-22135
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
Design/Logic Flaw
Elasticsearch versions before 7.11.2 and 6.8.15 contain a document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. The suggester and profile API are normally disabled for an index when document level security is enabled ...
PT-2021-14863 · Elastic · Elasticsearch
Name of the Vulnerable Software and Affected Versions: Elasticsearch versions prior to 7.11.2 Elasticsearch versions prior to 6.8.15 Description: A document disclosure flaw was found in the Elasticsearch suggester and profile API when Document and Field Level Security are enabled. Normally, the...
Elasticsearch 信息泄露漏洞
Elasticsearch is a set of Dutch Elasticsearch company built on Lucene open source distributed RESTful search engine . The product is mainly used in cloud computing and supports data indexing using JSON over HTTP. Elasticsearch There is an information disclosure vulnerability that can be exploited...