Lucene search
+L
PacketstormRecent

50873 matches found

Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.160 views

Cisco Data Center Network Manager Unauthenticated File Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco Data Center Network Manager Unauthenticated File Download', 'Description' = %q DCNM exposes a servlet to download files on...

9.8CVSS7AI score0.82815EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.136 views

Microsoft RRAS InterfaceAdjustVLSPointers NULL Dereference

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft RRAS InterfaceAdjustVLSPointers NULL Dereference', 'Description' = %q This module triggers a NULL dereference in svchost.exe on all...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.172 views

Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoS', 'Description' = %q This module exploits a denial of service flaw in the...

10CVSS7.4AI score0.7572EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.181 views

IpSwitch WhatsUp Gold TFTP Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "IpSwitch WhatsUp Gold TFTP Directory Traversal", 'Description' = %q This modules exploits a directory traversal vulnerability in IpSwitch WhatsUp...

7.8CVSS7AI score0.57601EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.201 views

Wordpress MasterStudy Admin Account Creation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Wordpress MasterStudy Admin Account Creation', 'Description' = %q MasterStudy LMS, a WordPress plugin, prior to 2.7.6 is affected by a privilege...

9.8CVSS7.4AI score0.85334EPSS
SaveExploits9
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.142 views

UoW Pop2d Remote File Retrieval

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'UoW pop2d Remote File Retrieval Vulnerability', 'Description' = %q This module exploits a vulnerability in the FOLD command of the University of...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.166 views

Linksys WRT120N TmUnblock Stack Buffer Overflow

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linksys WRT120N tmUnblock Stack Buffer Overflow', 'Description' = %q This module exploits a stack-based buffer overflow vulnerability in the...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.167 views

Oracle DB SQL Injection Via SYS.DBMS_CDC_SUBSCRIBE.ACTIVATE_SUBSCRIPTION

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL Injection via SYS.DBMSCDCSUBSCRIBE.ACTIVATESUBSCRIPTION', 'Description' = %q This module will escalate an Oracle DB user to DBA by...

7.5CVSS7.1AI score0.4167EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.340 views

WordPress Plugin Automatic Config Change To Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'WordPress Plugin Automatic Config Change to RCE', 'Description' = %q This module exploits an unauthenticated arbitrary wordpress options change...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.181 views

Yokogawa BKBCopyD.exe Client

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Yokogawa BKBCopyD.exe Client', 'Description' = %q This module allows an unauthenticated user to interact with the Yokogawa CENTUM CS3000...

7.5CVSS7AI score0.22543EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.190 views

Oracle DB SQL Injection Via SYS.LT.COMPRESSWORKSPACE

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB SQL Injection via SYS.LT.COMPRESSWORKSPACE', 'Description' = %q This module exploits an sql injection flaw in the COMPRESSWORKSPACE...

5.5CVSS7AI score0.1143EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.166 views

SonicWALL SSL-VPN Format String

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SonicWALL SSL-VPN Format String Vulnerability', 'Description' = %q There is a format string vulnerability within the SonicWALL SSL-VPN Appliance ...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.155 views

Telpho10 Backup Credentials Dumper

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Telpho10 Backup Credentials Dumper', 'Description' = %q This module exploits a vulnerability present in all versions of Telpho10 telephone system...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.200 views

Mac OS X Safari file:// Redirection Sandbox Escape

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mac OS X Safari file:// Redirection Sandbox Escape', 'Description' = %q Versions of Safari before 8.0.6, 7.1.6, and 6.2.6 are vulnerable to a...

4.3CVSS7.4AI score0.10946EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.165 views

Huawei Datacard Information Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'base64' class MetasploitModule /./i, 'Serial Number' = /./i, 'IMEI' = /./i, 'IMSI' = /./i, 'ICCID' = /./i, 'Hardware Version' = /./i, 'Software Version' = /./i,...

4.3CVSS7AI score0.06129EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.175 views

Ubee DDW3611b Cable Modem Wifi Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ubee DDW3611b Cable Modem Wifi Enumeration', 'Description' = %q This module will extract WEP keys and WPA preshared keys from certain Ubee cable...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.189 views

HP Web JetAdmin 6.5 Server Arbitrary Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Web JetAdmin 6.5 Server Arbitrary Command Execution', 'Description' = %q This module abuses a command execution vulnerability within the web...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.151 views

Chromecast Factory Reset Denial Of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chromecast Factory Reset DoS', 'Description' = %q This module performs a factory reset on a Chromecast, causing a denial of service DoS. No user...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.181 views

D-Link DIR 645 Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'D-Link DIR 645 Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in DIR 645 'OSVDB', '90733' ,...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.182 views

Cisco IOS HTTP GET /%% Request Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco IOS HTTP GET /%% Request Denial of Service', 'Description' = %q This module triggers a Denial of Service condition in the Cisco IOS HTTP...

7.1CVSS7AI score0.35005EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.183 views

Sielco Sistemi Winlog Remote File Access

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Sielco Sistemi Winlog Remote File Access', 'Description' = %q This module exploits a directory traversal in Sielco Sistemi Winlog. The...

4.3CVSS7AI score0.27488EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.213 views

vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'vBulletin /ajax/api/contentinfraction/getIndexableContent nodeid Parameter SQL Injection', 'Description' = %q This module exploits a SQL injectio...

9.8CVSS7AI score0.88948EPSS
SaveExploits13
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.175 views

ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'ManageEngine Eventlog Analyzer Managed Hosts Administrator Credential Disclosure', 'Description' = %q ManageEngine...

7.5CVSS7AI score0.72757EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.165 views

Oracle DB 11g R1/R2 DBMS_JVM_EXP_PERMS OS Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle DB 11g R1/R2 DBMSJVMEXPPERMS OS Code Execution', 'Description' = %q This module exploits a flaw 0 day in DBMSJVMEXPPERMS package that allo...

6.5CVSS6.6AI score0.1125EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.165 views

Cerberus Helpdesk User Hash Disclosure

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cerberus Helpdesk User Hash Disclosure', 'Description' = %q This module extracts usernames and password hashes from the Cerberus Helpdesk through...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.158 views

Netopia 3347 Cable Modem Wifi Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netopia 3347 Cable Modem Wifi Enumeration', 'Description' = %q This module extracts WEP keys and WPA preshared keys from certain Netopia cable...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.187 views

HP Intelligent Management SOM Account Creation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Intelligent Management SOM Account Creation', 'Description' = %q This module exploits a lack of authentication and access control in HP...

7.5CVSS7AI score0.23927EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.170 views

Xerox WorkCentre User Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Xerox WorkCentre User Enumeration SNMP', 'Description' = %q This module will do user enumeration based on the Xerox WorkCentre present on the...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.205 views

NTP NAK To The Future

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'NTP "NAK to the Future"', 'Description' = %q Crypto-NAK packets can be used to cause ntpd to accept time from unauthenticated ephemeral symmetric...

9.8CVSS7AI score0.81762EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.154 views

FortiOS Path Traversal Credential Gatherer

frozenstringliteral: true This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'FortiOS Path Traversal Credential Gatherer', 'Description' = %q Fortinet FortiOS versions 5.4.6 to 5.4.12, 5.6.3 to 5.6...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.163 views

Motorola WR850G 4.03 Credentials

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Motorola WR850G v4.03 Credentials', 'Description' = %q Login credentials to the Motorola WR850G router with firmware v4.03 can be obtained via a...

7.5CVSS7.1AI score0.18614EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.179 views

Solaris LPD Arbitrary File Delete

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Solaris LPD Arbitrary File Delete', 'Description' = %q This module uses a vulnerability in the Solaris line printer daemon to delete arbitrary...

5CVSS7AI score0.29182EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.179 views

RuggedCom Telnet Password Generator

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'RuggedCom Telnet Password Generator', 'Description' = %q This module will calculate the password for the hard-coded hidden username "factory" in...

8.5CVSS7AI score0.49395EPSS
SaveExploits8
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.163 views

HTTP Client LAN IP Address Gather

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HTTP Client LAN IP Address Gather', 'Description' = %q This module retrieves a browser's network interface IP addresses using WebRTC. , 'License'...

4.3CVSS7AI score0.30144EPSS
SaveExploits7
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.149 views

URGENT/11 Scanner, Based On Detection Tool By Armis

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'URGENT/11 Scanner, Based on Detection Tool by Armis', 'Description' = %q This module detects VxWorks and the IPnet IP stack, along with devices...

7.5CVSS7AI score0.23354EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.240 views

Chargen Probe Utility

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chargen Probe Utility', 'Description' = %q Chargen is a debugging and measurement tool and a character generator service. A character generator...

7AI score0.1463EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.167 views

vBulletin Password Collector via nodeid SQL Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'vBulletin Password Collector via nodeid SQL Injection', 'Description' = %q This module exploits a SQL injection vulnerability found in vBulletin ...

6.5CVSS7AI score0.27084EPSS
SaveExploits10
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.156 views

Gather Quake Server Information

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Gather Quake Server Information', 'Description' = %q This module uses the getstatus or getinfo request to obtain information from a Quakeserver. ...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.155 views

Ulterius Server File Download

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Ulterius Server File Download Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability in Ulterius Server 'Ric...

7.5CVSS7AI score0.91496EPSS
SaveExploits6
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.228 views

IBM Lotus Notes Sametime User Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'enumerable' class MetasploitModule 'IBM Lotus Notes Sametime User Enumeration', 'Description' = %q This module extracts usernames using the IBM Lotus Notes...

5CVSS7.4AI score0.13151EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.168 views

Gather Kademlia Server Information

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Gather Kademlia Server Information', 'Description' = %q This module uses the Kademlia BOOTSTRAP and PING messages to identify and extract...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.159 views

F5 BigIP Access Policy Manager Session Exhaustion Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'F5 BigIP Access Policy Manager Session Exhaustion Denial of Service', 'Description' = %q This module exploits a resource exhaustion denial of...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.293 views

HP ProCurve SNAC Domain Controller Credential Dumper

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'HP ProCurve SNAC Domain Controller Credential Dumper', 'Description' = %q This module will extract Domain Controller...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.215 views

Arris DG950A Cable Modem Wifi Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Arris DG950A Cable Modem Wifi Enumeration', 'Description' = %q This module will extract WEP keys and WPA preshared keys from Arris DG950A cable...

5CVSS7AI score0.17133EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.188 views

Oracle Secure Backup Exec_qr() Command Injection

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Secure Backup execqr Command Injection Vulnerability', 'Description' = %q This module exploits a command injection vulnerability in Oracle...

10CVSS7AI score0.3857EPSS
SaveExploits9
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.229 views

Netgear Unauthenticated SOAP Password Extractor

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Netgear Unauthenticated SOAP Password Extractor', 'Description' = %q This module exploits an authentication bypass vulnerability in different...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.212 views

VxWorks WDB Agent Remote Reboot

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VxWorks WDB Agent Remote Reboot', 'Description' = %q This module provides the ability to reboot a VxWorks target through WDBRPC , 'Author' = 'hdm...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.246 views

Apple OSX/iOS/Windows Safari Non-HTTPOnly Cookie Theft

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Apple OSX/iOS/Windows Safari Non-HTTPOnly Cookie Theft', 'Description' = %q A vulnerability exists in versions of OSX, iOS, and Windows Safari...

4.3CVSS7AI score0.09895EPSS
SaveExploits2
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.335 views

Cisco IOX XE Unauthenticated OS Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cisco IOX XE unauthenticated OS command execution', 'Description' = %q This module leverages both CVE-2023-20198 and CVE-2023-20273 against...

10CVSS7.4AI score0.99571EPSS
SaveExploits28
Packet Storm
Packet Storm
added 2024/08/31 12:0 a.m.511 views

Microsoft Exchange ProxyLogon Collector

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework begin auxiliary class class MetasploitModule 'Microsoft Exchange ProxyLogon Collector', 'Description' = %q This module exploit a vulnerability on Microsoft Exchange Serv...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits65
Total number of security vulnerabilities50873