Exploit catalog results

Showing 25 PoCs on this page

Metasploit

Palo Alto Networks readSessionVarsFromFile() Session Corruption

Metasploit exploitby Philip Pettersson <philip.pettersson@gmail com>Added to Metasploit 2018-05-05
Not analyzedCVE-2017-159441 file

exploit_linux/http/panos_readsessionvars · Ruby

Metasploit

GoAhead Web Server LD_PRELOAD Arbitrary Module Load

Metasploit exploitby Daniel Hodson <daniel@elttam.com.au>, plus 1 additional contributorAdded to Metasploit 2017-12-18
Not analyzedCVE-2017-175621 file

exploit_linux/http/goahead_ldpreload · Ruby

Metasploit

Samba is_known_pipename() Arbitrary Module Load

Metasploit exploitby bcoles <bcoles@gmail.com>, plus 1 additional contributorAdded to Metasploit 2017-05-25
Not analyzedCVE-2017-74941 file

exploit_linux/samba/is_known_pipename · Ruby

Metasploit

Intel AMT Digest Authentication Bypass Scanner

Metasploit auxiliary PoCAdded to Metasploit 2017-05-08
Not analyzedCVE-2017-56891 file

auxiliary_scanner/http/intel_amt_digest_bypass · Ruby

Metasploit

Ghostscript Type Confusion Arbitrary Command Execution

Metasploit exploitby Atlassian Security TeamAdded to Metasploit 2017-04-28
Not analyzedCVE-2017-82911 file

exploit_unix/fileformat/ghostscript_type_confusion · Ruby

Metasploit

NetBIOS Response "BadTunnel" Brute Force Spoof (NAT Tunnel)

Metasploit auxiliary PoCby tombkeeper, plus 1 additional contributorAdded to Metasploit 2016-06-19
Not analyzedCVE-2016-3213CVE-2016-32361 file

auxiliary_server/netbios_spoof_nat · Ruby

Metasploit

ImageMagick Delegate Arbitrary Command Execution

Metasploit exploitby Nikolay Ermishkin, plus 3 additional contributorsAdded to Metasploit 2016-05-05
Not analyzedCVE-2016-3714CVE-2016-79761 file

exploit_unix/fileformat/imagemagick_delegate · Ruby

Metasploit

Ruby on Rails Web Console (v2) Whitelist Bypass Code Execution

Metasploit exploitby Ben Murphy <benmmurphy@gmail.com>, plus 1 additional contributorAdded to Metasploit 2016-05-02
Not analyzedCVE-2015-32241 file

exploit_multi/http/rails_web_console_v2_code_exec · Ruby

Metasploit

Juniper SSH Backdoor Scanner

Metasploit auxiliary PoCby h00die <mike@stcyrsecurity.com>Added to Metasploit 2016-03-30
Not analyzedCVE-2015-77551 file

auxiliary_scanner/ssh/juniper_backdoor · Ruby

Metasploit

Advantech Switch Bash Environment Variable Code Injection (Shellshock)

Metasploit exploitAdded to Metasploit 2015-12-01
Not analyzedCVE-2014-62711 file

exploit_linux/http/advantech_switch_bash_env_exec · Ruby

Metasploit

Accellion FTA 'statecode' Cookie Arbitrary File Read

Metasploit auxiliary PoCAdded to Metasploit 2015-07-08
Not analyzedCVE-2015-2856CVE-2015-28571 file

auxiliary_scanner/http/accellion_fta_statecode_file_read · Ruby

Metasploit

Accellion FTA getStatus verify_oauth_token Command Execution

Metasploit exploitAdded to Metasploit 2015-07-08
Not analyzedCVE-2015-28571 file

exploit_linux/http/accellion_fta_getstatus_oauth · Ruby

Metasploit

Ceragon FibeAir IP-10 SSH Private Key Exposure

Metasploit exploitby todb <todb@metasploit.com>Added to Metasploit 2015-04-01
Not analyzedCVE-2015-09361 file

exploit_linux/ssh/ceragon_fibeair_known_privkey · Ruby

Metasploit

WordPress W3 Total Cache PHP Code Execution

Metasploit exploitby Christian Mehlmauer <FireFart@gmail.com>, plus 2 additional contributorsAdded to Metasploit 2015-03-23
Not analyzedCVE-2013-20101 file

exploit_unix/webapp/wp_total_cache_exec · Ruby

Metasploit

WordPress cache_lastpostdate Arbitrary Code Execution

Metasploit exploitby str0ke <str0ke@milw0rm.com>Added to Metasploit 2015-03-23
Not analyzedCVE-2005-26121 file

exploit_unix/webapp/wp_lastpost_exec · Ruby

Metasploit

Microsoft Windows Shell LNK Code Execution

Metasploit exploitby B_H, plus 1 additional contributorAdded to Metasploit 2015-03-12
Not analyzedCVE-2010-25681 file

exploit_windows/smb/ms10_046_shortcut_icon_dllloader · Ruby

Metasploit

GNU Wget FTP Symlink Arbitrary Filesystem Access

Metasploit auxiliary PoCAdded to Metasploit 2014-10-28
Not analyzedCVE-2014-48771 file

auxiliary_server/wget_symlink_file_write · Ruby

Metasploit

OpenSSL Heartbeat (Heartbleed) Client Memory Exposure

Metasploit auxiliary PoCby Antti, plus 3 additional contributorsAdded to Metasploit 2014-04-09
Not analyzedCVE-2014-01601 file

auxiliary_server/openssl_heartbeat_client_memory · Ruby

Metasploit

Supermicro Onboard IPMI close_window.cgi Buffer Overflow

Metasploit exploitby juan vazquez <juan.vazquez@metasploit.com>Added to Metasploit 2013-11-07
Not analyzedCVE-2013-36231 file

exploit_linux/http/smt_ipmi_close_window_bof · Ruby

Metasploit

Supermicro Onboard IPMI Static SSL Certificate Scanner

Metasploit auxiliary PoCby juanAdded to Metasploit 2013-11-06
Not analyzedCVE-2013-36191 file

auxiliary_scanner/http/smt_ipmi_static_cert_scanner · Ruby

Metasploit

Supermicro Onboard IPMI CGI Vulnerability Scanner

Metasploit auxiliary PoCby juan vazquez <juan.vazquez@metasploit.com>Added to Metasploit 2013-11-06
Not analyzedCVE-2013-3621CVE-2013-36231 file

auxiliary_scanner/http/smt_ipmi_cgi_scanner · Ruby

Metasploit

Supermicro Onboard IPMI url_redirect.cgi Authenticated Directory Traversal

Metasploit auxiliary PoCby juan vazquez <juan.vazquez@metasploit.com>Added to Metasploit 2013-11-06
Not analyzedCVE-2013-67851 file

auxiliary_scanner/http/smt_ipmi_url_redirect_traversal · Ruby

Metasploit

NETGEAR ReadyNAS Perl Code Evaluation

Metasploit exploitby Craig Young, plus 1 additional contributorAdded to Metasploit 2013-10-24
Not analyzedCVE-2013-27511 file

exploit_linux/http/netgear_readynas_exec · Ruby

Metasploit

IPMI 2.0 Cipher Zero Authentication Bypass Scanner

Metasploit auxiliary PoCby Dan Farmer <zen@fish2.com>Added to Metasploit 2013-06-30
Not analyzedCVE-2013-47821 file

auxiliary_scanner/ipmi/ipmi_cipher_zero · Ruby

Metasploit

IPMI 2.0 RAKP Remote SHA1 Password Hash Retrieval

Metasploit auxiliary PoCby Dan Farmer <zen@fish2.com>Added to Metasploit 2013-06-23
Not analyzedCVE-2013-47861 file

auxiliary_scanner/ipmi/ipmi_dumphashes · Ruby