Recent Advisories

Severity ID Title Vendor Product Date Type
NONE MSF:PAYLOAD-LINUX-

Linux Chmod_MSF:PAYLOAD-LINUX-RISCV32LE-CHMOD-

Runs chmod on the specified file with specified mode. Module Options msf use payload/linux/riscv32le/chmod msf payloadchmod show actions ...actions...

N/A N/A METASPLOIT
NONE MSF:AUXILIARY-SERVER-

Microsoft Windows SMB to MSSQL Relay_MSF:AUXILIARY-SERVER-RELAY-SMB_TO_MSSQL-

This module supports running an SMB server which validates credentials, and then attempts to execute a relay attack against an MSSQL server on the ...

N/A N/A METASPLOIT
CRITICAL 9.8 MSF:EXPLOIT-MULTI-

Flowise Custom MCP Remote Code Execution_MSF:EXPLOIT-MULTI-HTTP-FLOWISE_CUSTOMMCP_RCE-

This module exploits a remote code execution vulnerability in Flowise versions >= 2.2.7-patch.1 ...

N/A N/A METASPLOIT
CRITICAL 10 MSF:EXPLOIT-MULTI-

Flowise JS Injection RCE_MSF:EXPLOIT-MULTI-HTTP-FLOWISE_JS_RCE-

This module exploits a remote code execution vulnerability in Flowise versions >= 2.2.7-patch.1 ...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-WINDOWS-

Notepad++ Plugin Persistence_MSF:EXPLOIT-WINDOWS-PERSISTENCE-NOTEPADPP_PLUGIN_PERSISTENCE-

This module create persistence by adding a malicious plugin to Notepad++, as it blindly loads and executes...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-WINDOWS-

Windows WSL via Registry Persistence_MSF:EXPLOIT-WINDOWS-PERSISTENCE-WSL-REGISTRY-

This module will install a payload in WSL and execute it at user logon or system startup via the registry value in "CurrentVersion\R...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-WINDOWS-

Windows Persistent Service Installer_MSF:EXPLOIT-WINDOWS-PERSISTENCE-SERVICE-

This Module will generate and upload an executable to a remote host. It will create a new service which will start the payload whenever t...

N/A N/A METASPLOIT
NONE MSF:AUXILIARY-ADMIN-

Fortinet FortiWeb create new local admin_MSF:AUXILIARY-ADMIN-HTTP-FORTINET_FORTIWEB_CREATE_ADMIN-

This auxiliary module exploits an authentication bypass via path traversal vulnerability in the Fortinet FortiWeb management interface to...

N/A N/A METASPLOIT
CRITICAL 9.8 MSF:EXPLOIT-WINDOWS-

Windows Server Update Service Deserialization Remote Code Execution_MSF:EXPLOIT-WINDOWS-HTTP-WSUS_DESERIALIZATION_RCE-

This module exploits deserialization vulnerability...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-WINDOWS-

LINQPad Deserialization_MSF:EXPLOIT-WINDOWS-PERSISTENCE-LINQPAD_DESERIALIZATION-

This module exploits a bug in LIQPad up to version 5.48.00. The bug is only exploitable in paid version...

N/A N/A METASPLOIT