Recent Advisories

Severity ID Title Vendor Product Date Type
NONE MSF:AUXILIARY-ADMIN-

Get NAA Credentials_MSF:AUXILIARY-ADMIN-SCCM-GET_NAA_CREDENTIALS-

This module attempts to retrieve the Network Access Account(s), if configured, from the SCCM server. ...

N/A N/A METASPLOIT
CRITICAL 10 MSF:AUXILIARY-SCANNER-

NetAlertX File Read Vulnerability_MSF:AUXILIARY-SCANNER-HTTP-NETALERTX_FILE_READ-

This module exploits improper authentication in logs.php endpoint. An unathenticated attacker can request log...

N/A N/A METASPLOIT
CRITICAL 9.9 B0D24486-E6E0-

Exploit for CVE-2025-49113_B0D24486-E6E0-54D9-8A68-9FAE3D0C0F9E

Python Script for CVE-2025-49113 Usage: python exploit.py https://ubuntu.com/security/CVE-2025-49113...

N/A N/A GITHUBEXPLOIT
CRITICAL 9.1 MSF:AUXILIARY-SCANNER-

SimpleHelp Path Traversal Vulnerability CVE-2024-57727_MSF:AUXILIARY-SCANNER-HTTP-SIMPLEHELP_TOOLBOX_PATH_TRAVERSAL-

There exists a path traversal vulnerability in the /toolbox-resource endpoint that enables unauthenticated ...

N/A N/A METASPLOIT
NONE MSF:AUXILIARY-SCANNER-

SonicWall HTTP Login Scanner_MSF:AUXILIARY-SCANNER-SONICWALL-SONICWALL_LOGIN-

This module adds HTTP Login scanning for SonicWall NSv. It allows scanning both admin and user accounts. Module Options msf > use auxiliary/scan...

N/A N/A METASPLOIT
NONE MSF:AUXILIARY-SERVER-

Microsoft Windows SMB to LDAP Relay_MSF:AUXILIARY-SERVER-RELAY-SMB_TO_LDAP-

This module supports running an SMB server which validates credentials, and then attempts to execute a relay attack against an LDAP serve...

N/A N/A METASPLOIT
CRITICAL 9.8 MSF:EXPLOIT-LINUX-

Appsmith RCE_MSF:EXPLOIT-LINUX-HTTP-APPSMITH_RCE_CVE_2024_55964-

An incorrectly configured PostgreSQL instance in the Appsmith image leads to remote command execution inside the Appsmith Docker container. Module ...

N/A N/A METASPLOIT
CRITICAL 9.8 MSF:EXPLOIT-LINUX-

InvoiceShelf unauthenticated PHP Deserialization Vulnerability_MSF:EXPLOIT-LINUX-HTTP-INVOICESHELF_UNAUTH_RCE_CVE_2024_55556-

InvoiceShelf is an open-source web & mobile app that helps you track expenses, payments, create professional invoices & estimates...

N/A N/A METASPLOIT
CRITICAL 9.8 MSF:EXPLOIT-LINUX-

BentoML RCE_MSF:EXPLOIT-LINUX-HTTP-BENTOML_RCE_CVE_2025_27520-

A Remote Code Execution (RCE) vulnerability caused by insecure deserialization has been identified in v1.4.2 of BentoML. ...

N/A N/A METASPLOIT
HIGH 8.8 MSF:EXPLOIT-LINUX-

Eramba (up to 3.19.1) Authenticated Remote Code Execution Module_MSF:EXPLOIT-LINUX-HTTP-ERAMBA_RCE-

This module exploits a remote code execution vulnerability in Eramba. An authenticated user can execute arbitrary commands on the server ...

N/A N/A METASPLOIT