Recent Advisories

Severity ID Title Vendor Product Date Type
NONE MSF:EXPLOIT-MULTI-

Obsidian Plugin Persistence_MSF:EXPLOIT-MULTI-PERSISTENCE-OBSIDIAN_PLUGIN-

This module searches for Obsidian vaults for a user, and uploads a malicious community plugin to the vault. The vaults must be opened wit...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-LINUX-

update-motd.d Persistence_MSF:EXPLOIT-LINUX-PERSISTENCE-MOTD-

This module will add a script in /etc/update-motd.d/ in order to persist a payload. The payload will be executed with root...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-MULTI-

at(1) Persistence_MSF:EXPLOIT-MULTI-PERSISTENCE-AT-

This module executes a metasploit payload utilizing at(1) to execute jobs at a specific time. It should work out of the box with any UNI...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-LINUX-

Autostart Desktop Item Persistence_MSF:EXPLOIT-LINUX-PERSISTENCE-AUTOSTART-

This module will create an autostart .desktop entry to execute a payload. The payload will be executed when the users logs in. ...

N/A N/A METASPLOIT
NONE MSF:EXPLOIT-LINUX-

APT Package Manager Persistence_MSF:EXPLOIT-LINUX-PERSISTENCE-APT_PACKAGE_MANAGER-

This module will run a payload when the APT package manager is used. This module creates a pre-invoke hook for APT in apt.conf.d. Write a...

N/A N/A METASPLOIT
HIGH 8.8 MSF:EXPLOIT-WINDOWS-

Sitecore XP CVE-2025-34511 Post-Authentication File Upload_MSF:EXPLOIT-WINDOWS-HTTP-SITECORE_XP_CVE_2025_34511-

This module exploits CVE-2025-34511, a file...

N/A N/A METASPLOIT
HIGH 8.8 MSF:EXPLOIT-WINDOWS-

Sitecore XP CVE-2025-34510 Post-Authentication Remote Code Execution_MSF:EXPLOIT-WINDOWS-HTTP-SITECORE_XP_CVE_2025_34510-

This module exploits CVE-2025-34510, path traversal...

N/A N/A METASPLOIT
CRITICAL 9.4 MSF:EXPLOIT-LINUX-

Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE (time param)_MSF:EXPLOIT-LINUX-HTTP-AITEMI_M300_TIME_RCE-

This module exploits an unauthenticated remote command injection vulnerability in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware...

N/A N/A METASPLOIT
CRITICAL 10 MSF:EXPLOIT-MULTI-

Template Injection Vulnerability in Sawtooth Software’s Lighthouse Studio (CVE-2025-34300)_MSF:EXPLOIT-MULTI-HTTP-LIGHTHOUSE_STUDIO_UNAUTH_RCE_CVE_2025_34300-

This module exploits a template injection vulnerability in the Sawtooth Software Lighthouse Studio's ciwweb.pl web application. ...

N/A N/A METASPLOIT
CRITICAL 9.3 MSF:EXPLOIT-LINUX-

Sudo Chroot 1.9.17 Privilege Escalation_MSF:EXPLOIT-LINUX-LOCAL-SUDO_CHROOT_CVE_2025_32463-

Sudo before version 1.19.17p1 allows user to use chroot option, when executing command. The option is intended to run a command with ...

N/A N/A METASPLOIT