CVE-2020-7384

概要

参考情報

• packetstormsecurity.com/files/160004/Rapid7-Metasploit-Framework-msfvenom-APK-Template-Command-Injection.html · Exploit
• packetstormsecurity.com/files/161200/Metasploit-Framework-6.0.11-Command-Injection.html · Exploit
• rapid7/metasploit-framework#14288 · Exploit

metasploit のその他の脆弱性

• CVE-2023-0599中 4.8Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request…
• CVE-2020-7385高 8.8By launching the drb_remote_codeexec exploit, a Metasploit Framework user will inadvertently expose Metasploit to the same deserialization i…
• CVE-2019-5645高 7.5By sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular…
• CVE-2020-7377高 7.5The Metasploit Framework module "auxiliary/admin/http/telpho10_credential_dump" module is affected by a relative path traversal vulnerabilit…
• CVE-2020-7376緊急 9.8The Metasploit Framework module "post/osx/gather/enum_osx module" is affected by a relative path traversal vulnerability in the get_keychain…