-
Sep 1, 2024 | 
packetstormsecurity.com | Metasploit Module |Will Caput |Trevor Hartman |Thaddeus Bogner
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient include Msf::Auxiliary::Report include Msf::Auxiliary::Scanner def initialize super( 'Name' => 'Atlassian Crowd XML Entity Expansion Remote File Access', 'Description' => %q{ This module simply attempts to read a remote file from the server using a vulnerability in the way...
-
Sep 1, 2024 | 
packetstormsecurity.com | Metasploit Module |Jay Turla
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient include Msf::Auxiliary::Report include Msf::Auxiliary::Scanner def initialize(info = {}) super(update_info(info, 'Name' => 'A10 Networks AX Loadbalancer Directory Traversal', 'Description' => %q{ This module exploits a directory traversal flaw found in A10 Networks (Soft) AX...
-
Aug 31, 2024 | 
packetstormsecurity.com | Bojan Zdrnja |Brandon Perry |Metasploit Module |Drazen Popovic
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##require 'nexpose'class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient include Msf::Auxiliary::Reportdef initialize(info = {}) super( update_info( info, 'Name' => 'Nexpose XXE Arbitrary File Read', 'Description' => %q{ Nexpose v5.7.2 and prior is vulnerable to a XML External Entity attack via a number of vectors.
-
Aug 31, 2024 | 
packetstormsecurity.com | Metasploit Module |Jay Turla |Pedro A. Ribeiro
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HTTP::Wordpress def initialize(info = {}) super( update_info( info, 'Name' => 'WordPress WP EasyCart Plugin Privilege Escalation', 'Description' => %q{ The WordPress WP EasyCart plugin from version 1.1.30 to 3.0.20 allows authenticated users of any user level to set any system option via...
-
Aug 31, 2024 | 
packetstormsecurity.com | Jan Rude |Metasploit Module |Jay Turla
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Auxiliary::Report include Msf::Exploit::Remote::HttpClientdef initialize(info = {}) super( update_info( info, 'Name' => 'Telpho10 Backup Credentials Dumper', 'Description' => %q{ This module exploits a vulnerability present in all versions of Telpho10 telephone system appliance.
-
Aug 31, 2024 | 
packetstormsecurity.com | Metasploit Module |Jay Turla
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient include Msf::Auxiliary::Report include Msf::Auxiliary::Scanner def initialize(info={}) super(update_info(info, 'Name' => "ManageEngine Support Center Plus Directory Traversal", 'Description' => %q{ This module exploits a directory traversal vulnerability found in ManageEngine...
-
Aug 31, 2024 | 
packetstormsecurity.com | Metasploit Module |Jay Turla
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpClient include Msf::Auxiliary::Report include Msf::Auxiliary::Scanner def initialize(info={}) super(update_info(info, 'Name' => "ManageEngine ServiceDesk Plus Path Traversal", 'Description' => %q{ This module exploits an unauthenticated path traversal vulnerability found in...
-
Aug 31, 2024 | 
packetstormsecurity.com | Metasploit Module |Jay Turla |Kris Katterjohn
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary prepend Msf::Exploit::Remote::AutoCheck include Msf::Exploit::Remote::HttpClient include Rex::Proto::Http::WebSocket include Msf::Auxiliary::Report include Msf::Exploit::SQLi def initialize(info = {}) super( update_info( info, 'Name' => 'Grandstream UCM62xx IP PBX WebSocket Blind SQL Injection Credential Dump',...
-
Aug 31, 2024 | 
packetstormsecurity.com | Charles Fol |Metasploit Module |'Count '
## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit-framework ## class MetasploitModule < Msf::Auxiliary include Msf::Auxiliary::Report include Msf::Exploit::Remote::HttpClient HttpFingerprint = { method: 'GET', uri: '/', pattern: [/vBulletin.version = '5.+'/] }.freeze def initialize(info = {}) super( update_info( info, 'Name' => 'vBulletin /ajax/api/content_infraction/getIndexableContent nodeid Parameter SQL Injection',...
-
Aug 31, 2024 | 
packetstormsecurity.com | Rafay Baloch |Metasploit Module |Jay Turla
### This module requires Metasploit: https://metasploit.com/download# Current source: https://github.com/rapid7/metasploit-framework##class MetasploitModule < Msf::Auxiliary include Msf::Exploit::Remote::HttpServer::HTML include Msf::Auxiliary::Reportdef initialize(info = {}) super(update_info(info, 'Name' => 'Android Browser RCE Through Google Play Store XFO', 'Description' => %q{ This module combines two vulnerabilities to achieve remote code execution on affected Android devices.
