CVE-2019-5624

概要

参考情報

• blog.doyensec.com/2019/04/24/rubyzip-bug.html · Exploit
• rapid7/metasploit-framework#11716 · Exploit
• help.rapid7.com/metasploit/release-notes/archive/2019/04 · Release Notes

metasploit のその他の脆弱性

• CVE-2023-0599中 4.8Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request…
• CVE-2020-7385高 8.8By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization i…
• CVE-2020-7384高 7.8Rapid7's Metasploit msfvenom framework handles APK files in a way that allows for a malicious user to craft and publish a file that would ex…
• CVE-2019-5645高 7.5By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular…
• CVE-2020-7377高 7.5The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerabilit…