CVE-2016-9091

This Metasploit module exploits an authenticated OS command injection vulnerability in BlueCoat CAS/ASG via the Report Email functionality. It allows execution of arbitrary commands with tomcat privileges by injecting payloads into the report URL parameter.

This Metasploit module exploits a privilege escalation vulnerability in BlueCoat CAS/ASG by abusing sudo access to the mvtroubleshooting.sh script, allowing a tomcat user to escalate to root. It replaces the nscd init script with a malicious payload and executes it via flush_dns.sh.