[Snyk] Fix for 5 vulnerabilities - #53

Open

busterb wants to merge 5294 commits into

snyk-fix-a79b3f564c718af5c42710a4f11c46a9

This pull request is big! We're only showing the most recent 250 commits

Commits on May 14, 2026

automatic module_metadata_base.json update
jenkins-metasploit
committed
987af73
Merge pull request #21459 from adfoster-r7/fix-frozen-string-crash
smcintyre-r7
authored
fe768b4

Commits on May 15, 2026

Add exploit for cPanel/WHM auth bypass RCE (CVE-2026-41940)
Crypto-Cat
committed
6b82053
Fixed some consistency issues, added comments to some parts of the code that may require
Crypto-Cat
committed
020c880
Address review feedback: DefangedMode, retry_until_truthy, store_valid_credential, TMP_PASSWORD option
Crypto-Cat
committed
43514c9
Fix CheckCode semantics in check method: Unknown -> Detected
Crypto-Cat
committed
8510855
Update documentation: DefangedMode replaces ALLOW_PASSWORD_CHANGE
Crypto-Cat
committed
60049c4
Fix store_valid_credential: add origin_type, isolate from rotation rescue
Crypto-Cat
committed
0a4df5a
Fix check method: tighten expired_session match to avoid false positive on patched targets
Crypto-Cat
committed
8350bc9
Remove TMP_PASSWORD option; password complexity already guaranteed by generated suffix
Crypto-Cat
committed
65f6d78
Apply suggestions from code review

authored and
Crypto-Cat
committed
7dba30e
Move DefangedMode to advanced options
Crypto-Cat
committed
fd07c15
Removed frozen string comment from the top to fix build.. Note that exploit does not work if you remove the 'find' option
Crypto-Cat
committed
e6f7fdd
Added back comment, as new framework fix will sort previous issue
Crypto-Cat
committed
57affb8
Added module for CVE-2026-20182
Crypto-Cat
committed
074b032
Merge pull request #21285 from sjanusz-r7/rpc-creds-reports-domain
adfoster-r7
authored
560580f
Merge pull request #21292 from sjanusz-r7/db-notes-rpc-return-notes-json-data
adfoster-r7
authored
1af6e29
Raise an exception instead of returning a hash object in parent service
sjanusz-r7
committed
b327f29
Merge pull request #21305 from sjanusz-r7/db-vulns-and-services-rpc-new-report-approach
adfoster-r7
authored
2c07ad3
Merge pull request #21458 from dwelch-r7/bump-sinatra-version
adfoster-r7
authored
f45b13d
add python2 and python2.7 in find_exec_program

dledda-r7
and
Copilot
authored
ea0cddc
Merge pull request #21177 from h00die/security_center
dledda-r7
authored
cef2625
automatic module_metadata_base.json update
jenkins-metasploit
committed
c5e737a
Add KerberosTicketTrace support for AS/TGS/AP exchanges
eve0805
committed
88fc073
Address review feedback for Kerberos ticket trace logging
eve0805
committed
a3b5f27
Revert "Address review feedback for Kerberos ticket trace logging"
eve0805
committed
43b4f90
Improve Kerberos trace output consistency and spec
eve0805
committed
5ae4ab3
Improve Kerberos readable trace formatting and spec
eve0805
committed
ce88e44
Improve Kerberos readable trace formatting and spec
eve0805
committed
aa062a5
Improve Kerberos readable trace formatting and spec
eve0805
committed
698bfe4
Improve Kerberos readable trace formatting and spec
eve0805
committed
fbd9b88
Merge pull request #21463 from jburgess-r7/add-cisco-sdwan-vhub-auth-bypass
jheysel-r7
authored
72e60b6
automatic module_metadata_base.json update
jenkins-metasploit
committed
c6ae1bd

Commits on May 16, 2026

Add CertificateTracePresenter with PKINIT certificate hook
Pushpenderrathore
committed
fed466f

Commits on May 17, 2026

Updates the module, adds more reliable exploits, finishes documentations
msutovsky-r7
committed
86088f9
Removes redundant file
msutovsky-r7
committed
aa664c8

Commits on May 18, 2026

Removes wrong condition
msutovsky-r7
committed
d6d5ea8
Fix msfdb crash on windows
adfoster-r7
committed
86016e3
Merge pull request #21474 from adfoster-r7/fix-msfdb-crash-on-windows
adfoster-r7
authored
12338ac
Apply suggestions from code review

jburgess-r7
and
cdelafuente-r7
authored
c9b2bde
Fix msfdb installation error on windows
adfoster-r7
committed
dbca860
Merge pull request #21417 from jburgess-r7/add-cpanel-whm-auth-bypass-rce
cdelafuente-r7
authored
996dbef
automatic module_metadata_base.json update
jenkins-metasploit
committed
8dcab01
Merge pull request #21475 from adfoster-r7/fix-msfdb-installation-error-on-windows
dwelch-r7
authored
8e1ba4a
Update payload command handling and exec payload definitions
bhaskarbhar
committed
f7a549b
rubocop correction
bhaskarbhar
committed
93acaae
Revert the module check
smcintyre-r7
committed
b03edca

Commits on May 19, 2026

Refactor based on review
bhaskarbhar
committed
cf84772
Fixes uninitialized datastore option
msutovsky-r7
committed
a516c8a
Removes re-definition of datastore option
msutovsky-r7
committed
966c0b6
Updates the modules, fixes the exploits
msutovsky-r7
committed
f8d00b8
Add exploit module for Dompdf RCE (CVE-2022-28368)

Adithyadspawar
authored and
msutovsky-r7
committed
bd08ec7
Merge pull request #21414 from dledda-r7/feat/copyfail/python2.7
smcintyre-r7
authored
778678f
automatic module_metadata_base.json update
jenkins-metasploit
committed
0d718a4
Move *brute.rb in favour of *_brute.rb
g0tmi1k
committed
907960d
#{rhost}:#{rport} -> #{Rex::Socket.to_authority(rhost, rport)}
g0tmi1k
committed
0745cc6
Fix typos

g0tmi1k
and
smcintyre-r7
committed
d7a9964
Bump metasploit-credential to 6.0.24
jheysel-r7
committed
f471646
Merge pull request #9 from smcintyre-r7/pr/collab/21447
jheysel-r7
authored
e430e78
Merge pull request #21460 from bhaskarbhar/mixin
smcintyre-r7
authored
142bca2
automatic module_metadata_base.json update
jenkins-metasploit
committed
addb6da
Merge pull request #1 from msutovsky-r7/collab/exploit/cve-2023-7102
Alpenlol
authored
25af935
Land #21035, adds module for arbitrary code execution in Barracuda ESG (CVE-2023-7102)
msutovsky-r7
authored
05e925c
automatic module_metadata_base.json update
jenkins-metasploit
committed
b770f64
Update modules/auxiliary/scanner/oracle/isqlplus_sidbrute.rb
jheysel-r7
authored
02b7f46
Hash reporting fix
jheysel-r7
committed
8cde2fa
Merge pull request #21127 from g0tmi1k/def_initialize
jheysel-r7
authored
6d4e7aa
Merge pull request #21447 from jheysel-r7/fix/kerberoasting_realm_reporting
smcintyre-r7
authored
723507b
automatic module_metadata_base.json update
jenkins-metasploit
committed
57b074a
Fix and centralize Python SSL handling
zeroSteiner
committed
a8a5985
Merge pull request #21101 from g0tmi1k/tftp_brute
jheysel-r7
authored
66f1097
automatic module_metadata_base.json update
jenkins-metasploit
committed
0567ed7

Commits on May 20, 2026

Updates the module
msutovsky-r7
committed
8d3a56a
Updates docs, fixes issues in module
msutovsky-r7
committed
304e639
Removes redundant documentation
msutovsky-r7
committed
ad04063
Replace non-ASCII em-dashes with hyphens in CertificateTracePresenter
Pushpenderrathore
committed
c62f3c4
Fix X.509 version display and SAN parsing in CertificateTracePresenter
Pushpenderrathore
committed
0dca91b
improve check routine to account for some responses containing a 200 response with 'Undefined SAML error', this is indicitive of a vulnerable system so we loop and check again. This matches teh run…
sfewer-r7
committed
5882042
Bump version of framework to 6.4.135
jenkins-metasploit
committed
2dcfb98
Updates docs, adds payload cleanup, removes time delay
msutovsky-r7
committed
d71cb64
Updates post request payload delivery
msutovsky-r7
committed
281a4d4
Adds JSON payload delivery
msutovsky-r7
committed
75f7563
Bump the version of metasm
zeroSteiner
committed
2bbf6b6
Merge pull request #21451 from zeroSteiner/feat/replace-to-hex-cstring-with-metasm
sjanusz-r7
authored
0befde5
automatic module_metadata_base.json update
jenkins-metasploit
committed
c3a4fe8
Merge pull request #21443 from jheysel-r7/gem/bump/metasploit-credential/6_0_24
smcintyre-r7
authored
c76a3c8
Merge pull request #21204 from sfewer-r7/CVE-2026-3055
bwatters-r7
authored
4a8bcef
automatic module_metadata_base.json update
jenkins-metasploit
committed
11c6caf
Merge pull request #21390 from zeroSteiner/fix/skip-anonymous-relay
jheysel-r7
authored
a6b20a6
Merge pull request #21271 from h00die/ollama_enum
bwatters-r7
authored
5f7aac8
automatic module_metadata_base.json update
jenkins-metasploit
committed
60a59a9
Add Python SSL shells to the acceptance tests
zeroSteiner
committed
5242db0
Fix command shell acceptance matrix to run all configured jobs

zeroSteiner
and
claude
committed
5bf3eb1
Fix a typo
zeroSteiner
committed
41090ce
kerberoast hash types added for cracking

h00die
authored and
jheysel-r7
committed
bc26fed
kerberoast hash types added for cracking

h00die
authored and
jheysel-r7
committed
f28a84a
finish fixing up hash_cracker_validator

h00die
authored and
jheysel-r7
committed
1007648
take incoming

h00die
authored and
jheysel-r7
committed
8e3580b
kerberoast cracking updates

h00die
authored and
jheysel-r7
committed
75f28b5
remove bad rebase items

h00die
authored and
jheysel-r7
committed
c54d005
hash_crack_validator rewite and john krb5tgs working

h00die
authored and
jheysel-r7
committed
55934bb
testing

h00die
authored and
jheysel-r7
committed
04743e8

Commits on May 21, 2026

Land #21155, adds exploit module for Dompdf (CVE-2022-28368)
msutovsky-r7
authored
c2fa49a
automatic module_metadata_base.json update
jenkins-metasploit
committed
d59c2e0
fix: move CIDR filtering to RPC endpoint in rpc_hosts
kx7m2qd
committed
b7466ba
Fix mcp server test failure
adfoster-r7
committed
c31b6cb
Makes precompiled exploits static
msutovsky-r7
committed
f432eca
Merge pull request #21485 from adfoster-r7/fix-mcp-server-test-failure
dwelch-r7
authored
e7ed485
Land #21434, adds Dirtyfrag privilege escalation modules (CVE-2026-43284, CVE-2026-43500)
msutovsky-r7
authored
c7684e2
automatic module_metadata_base.json update
jenkins-metasploit
committed
af83872
Remove LDAP monkey patches
adfoster-r7
committed
9949cf2
Tighten the conditions for running these tests
zeroSteiner
committed
29b59c6
fix gitlab version errors
h00die
committed
cc9e202
Merge pull request #21486 from adfoster-r7/remove-ldap-monkey-patches
adfoster-r7
authored
ba71087

Commits on May 22, 2026

working poc, still rough for activemq jolokia
h00die
committed
e9f7fb2

Commits on May 24, 2026

Commits on May 25, 2026

Msftidy fix
bootstrapbool
committed
d812038
feat: initial work on payloads manager plugin

jbx81-1337
authored and
msutovsky-r7
committed
89166b5
Update plugins/payloads_manager.rb

authored and
msutovsky-r7
committed
43ba8be
Update plugins/payloads_manager.rb

authored and
msutovsky-r7
committed
3a56683
Update plugins/payloads_manager.rb

authored and
msutovsky-r7
committed
5f3d177
Update plugins/payloads_manager.rb

authored and
msutovsky-r7
committed
a0573ae
fix: review updates

jbx81-1337
authored and
msutovsky-r7
committed
8457ec6
docs: update How-To-Use-Plugins.md to include Payloads Manager plugin details

jbx81-1337
authored and
msutovsky-r7
committed
e1d2f54
docs: add details for Payloads Manager plugin and its subcommands

jbx81-1337
authored and
msutovsky-r7
committed
b496b7f
fix: deactivate payloads and remove symlink on unselect

jbx81-1337
authored and
msutovsky-r7
committed
e57c93c
fix: improve target link handling for payloads and add validation

jbx81-1337
authored and
msutovsky-r7
committed
53f27e0
fix: enhance payload activation by validating source paths and adding error handling

jbx81-1337
authored and
msutovsky-r7
committed
acfa621
fix: enhance payload removal process with error handling and status messages

jbx81-1337
authored and
msutovsky-r7
committed
50e8957
fix: add error handling and usage messages for payloads_manager commands

jbx81-1337
authored and
msutovsky-r7
committed
531224f
fix: enhance payload fetching with improved error handling and size validation

jbx81-1337
authored and
msutovsky-r7
committed
e4274d6
fix|draft: status display with custom color styling

jbx81-1337
authored and
msutovsky-r7
committed
25a4a0a
Fixes columns color
msutovsky-r7
committed
e3bdead
all tests running
h00die
committed
1b25feb
all tests running
h00die
committed
f4b25e6
all tests running
h00die
committed
cac87e4
activemq jolokia exploit
h00die
committed
f0cdbc5
add more info for documentation in AGENTS.md
h00die
committed
fed3f7b
make sure module descriptions only use ASCII
h00die
committed
b1a4c71

Commits on May 26, 2026

Merge pull request #21267 from bootstrapbool/supsystic_contact_form_cve_2026_4257
jheysel-r7
authored
a8d7a5f
automatic module_metadata_base.json update
jenkins-metasploit
committed
ea5bf14
Update LicenseFinder dependency
adfoster-r7
committed
6281eda
Merge pull request #21487 from adfoster-r7/update-licensefinder-dependency
adfoster-r7
authored
72fb241
Update LicenseFinder
adfoster-r7
committed
071f2b6
Merge pull request #21500 from adfoster-r7/update-licensefinder
cgranleese-r7
authored
5f16dc7
automatic module_metadata_base.json update
jenkins-metasploit
committed
cc5507e
Bump version of framework to 6.4.136
jenkins-metasploit
committed
17cd9f5
fix snmp enum bug
h00die
committed
36efa28
Merge pull request #21502 from h00die/fix_snmp_no_system_date
adfoster-r7
authored
5e87a48
automatic module_metadata_base.json update
jenkins-metasploit
committed
5003379
guard wsl startup_folder persistence
h00die
committed
464ca4f
Merge pull request #20881 from h00die/krb5tgs_rc4
jheysel-r7
authored
2dbc6a0
automatic module_metadata_base.json update
jenkins-metasploit
committed
9013523
Fix MSSQL 'unsupported token: 169' error for SQL Server 2022

Aaditya1273
authored and
jheysel-r7
committed
4f602b5

Commits on May 27, 2026

Multiple fixes
jheysel-r7
committed
3210bd4
Land #21087, adds payload manager plugin
msutovsky-r7
authored
f80be5a
add CVEs to modules

h00die
authored and
msutovsky-r7
committed
aefbe06
Rubocopes cassandra_web_file_read module
msutovsky-r7
committed
bd566bd
Land #21506, adds guard for wsl_startup_folder persistence
msutovsky-r7
authored
428ff50
Land #21504, adds CVE numbers to modules
msutovsky-r7
authored
89f8a09
automatic module_metadata_base.json update
jenkins-metasploit
committed
19d077a
Update --help-formats and --payload-options flags
orbit-bot
committed
14f03d3
Merge pull request #21484 from zeroSteiner/fix/issue/21301
bwatters-r7
authored
f5dd9b4
automatic module_metadata_base.json update
jenkins-metasploit
committed
533e554
Fix spec and update to check ORDER token
jheysel-r7
committed
8fba6e3

Commits on May 28, 2026

Add Gogs rebase RCE exploit module
Crypto-Cat
committed
ae573b9
Update modules/exploits/multi/http/apache_activemq_jolokia_rce.rb

h00die
and
msutovsky-r7
authored
3cd90e0
Update modules/exploits/multi/http/apache_activemq_jolokia_rce.rb

h00die
and
msutovsky-r7
authored
afcffdd
Merge pull request #21514 from orbit-bot/fix/msfvenom-help-formats-flag
smcintyre-r7
authored
9ccb1ef
Merge pull request #21498 from h00die/add_docs_to_agents
adfoster-r7
authored
4e0891f
peer review
h00die
committed
228f0aa
WIP for auto update gitlab versions
h00die
committed
20396ee
Update the Attic label definition
jheysel-r7
committed
fcc0389
Fix/msf host info cidr filtering
smcintyre-r7
committed
379122e
Merge pull request #21429 from zeroSteiner/fix/redundant-kernel-version
bwatters-r7
authored
f997e51
Merge pull request #21432 from 4ravind-b/fix-check-simple-api
smcintyre-r7
authored
cf76707
Update github workflows messaging
jheysel-r7
committed
a8d936a
Inserted missing word "author"
jheysel-r7
committed
84b54dd
automatic module_metadata_base.json update
jenkins-metasploit
committed
f912adf
Add service hierarchy reporting to HTTP login scanners

sjanusz-r7
authored and
adfoster-r7
committed
eda55c6

Commits on May 29, 2026

Land #21497, adds authenticated arbitrary OS command injection in Activemq jolokia (CVE-2026-34197)
msutovsky-r7
authored
53f3218
automatic module_metadata_base.json update
jenkins-metasploit
committed
b3b3e35
Merge pull request #21488 from sjanusz-r7/add-service-hierarchy-to-login-scanner-subset
adfoster-r7
authored
6926ad5
Address code review feedback
Crypto-Cat
committed
faf6a25
Changed reporting structure to recommended one
Crypto-Cat
committed
ffaffbe
Do the CIDR parsing in PostgreSQL
smcintyre-r7
committed
db5ac40
Fix Kerberos AP-REQ options trace label
eve0805
committed
499043f
Merge pull request #21517 from jheysel-r7/docs/update_attic_definition
smcintyre-r7
authored
749e876
Add RPC_Db#rpc_hosts CIDR filtering specs

smcintyre-r7
and
claude
committed
90c9e96
Fix handling of malformed replies in ipmi_cipher_zero
zeroSteiner
committed
705b3a3
Fixes two bugs in the single shell riscv payloads
bwatters-r7
committed
9403460
Update IP addresses in rspec tests
bwatters-r7
committed
d458b7b

Commits on May 30, 2026

Add Windows Kernel Pointer Exposure Enumerator (Info Gathering)

CharlesQuinnDev
authored and
msutovsky-r7
committed
3a7d455
Move windows_kernel_pointer_enum from auxiliary to post/forensics

CharlesQuinnDev
authored and
msutovsky-r7
committed
1a15a69
Rubocop Problems Fixed

CharlesQuinnDev
authored and
msutovsky-r7
committed
d3696af
Add Windows kernel handle enumeration library + address review feedback

CharlesQuinnDev
authored and
msutovsky-r7
committed
02c9405
Fix rubocop issues in module and library

CharlesQuinnDev
authored and
msutovsky-r7
committed
6c0c136
Add missing documentation comment to HandleEnum module

CharlesQuinnDev
authored and
msutovsky-r7
committed
28d1670
Fixes issues
msutovsky-r7
committed
919c0dd
Address review feedback: shared CertificateTrace mixin, ms_icpr tracing, MS extension decoding
Pushpenderrathore
committed
fc4714e

Commits on May 31, 2026

offload gitlab versions and create automation tool
h00die
committed
07660de
rubocopy and cleanup
h00die
committed
b91ced6
Land #21039, adds post module for Windows kernel pointer enumerator
msutovsky-r7
authored
92ca204
automatic module_metadata_base.json update
jenkins-metasploit
committed
8b5f523
rubocopy and cleanup
h00die
committed
808d87d

Commits on Jun 1, 2026

Apply suggestions from code review

jburgess-r7
and
jvoisin
authored
99192a0
address feedback from jvoisin: report sevice with it's version no
Crypto-Cat
committed
033dc38
fix regex offense
Crypto-Cat
committed
d20d2b7

Commits on Jun 2, 2026

Commits on Jun 3, 2026

Potential fix for pull request finding

h00die
and
Copilot
authored
3223605
fix some review comments
h00die
committed
1f2e4d4
Apply suggestions from code review

jburgess-r7
and
cdelafuente-r7
authored
ad7c055
move gitlab_versions file to data folder
h00die
committed
c3c3e23
Fix Unix payload delivery and address PR review feedback
Crypto-Cat
committed
6f9e2a2
restructured service check to use layered services
Crypto-Cat
committed
8b22aa9
fixed default writeable dir for fetch command on unix, should resolve previous issues
Crypto-Cat
committed
2602f8b
Merge pull request #21515 from jburgess-r7/add-gogs-rebase-rce
cdelafuente-r7
authored
c74a80f
automatic module_metadata_base.json update
jenkins-metasploit
committed
1b13d2d
Hex-encode undecodable certificate extensions in trace output
Pushpenderrathore
committed
3d89bd0
Merge pull request #21489 from h00die/fix_gitlab_errors
smcintyre-r7
authored
5d07312
automatic module_metadata_base.json update
jenkins-metasploit
committed
5075c29
Merge pull request #21412 from zeroSteiner/feat/default-session-id
adfoster-r7
authored
8d30819

Commits on Jun 4, 2026

Merge pull request #21526 from zeroSteiner/fix/ipmi/scanner-multi
adfoster-r7
authored
628f66a
automatic module_metadata_base.json update
jenkins-metasploit
committed
fce4cf3
Bump version of framework to 6.4.137
jenkins-metasploit
committed
51bb5b3
Merge pull request #21519 from bwatters-r7/fix/riscv-single-shells
dledda-r7
authored
464c808
automatic module_metadata_base.json update
jenkins-metasploit
committed
5082648
Merge pull request #21466 from eve0805/feature/kerberos-ticket-trace-as-tgs-ap
jheysel-r7
authored
12fc9bd
Merge pull request #20618 from Aaditya1273/issue-20607-mssql-token-169-fix
adfoster-r7
authored
7849690
Merge pull request #21212 from h00die/clickfix
adfoster-r7
authored
5eb34bb

Commits on Jun 5, 2026

Merge pull request #21528 from h00die/edb_refs
adfoster-r7
authored
8332182
Decode Application Policies extension to OID labels in CertificateTracePresenter
Pushpenderrathore
committed
b349c07
Update additional callsites
adfoster-r7
committed
0a5a037
Merge pull request #21222 from g0tmi1k/rhost_rport
adfoster-r7
authored
406d51b
automatic module_metadata_base.json update
jenkins-metasploit
committed
73ea324
Merge pull request #21198 from Pushpenderrathore/certificate-trace
jheysel-r7
authored
f073ad6

Commits on Jun 7, 2026

fix: Gemfile to reduce vulnerabilities
snyk-bot
committed
74e4595