45
45
45
45
30
Update modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb
Rapid7 updated a Metasploit auxiliary scanner module that detects XML external entity injection in Elasticsearch via Apache Tika.
A commit in the Metasploit Framework updated modules/auxiliary/scanner/http/elasticsearch_tika_xfa_xxe.rb, an auxiliary scanner module. The module targets XML external entity (XXE) injection in Elasticsearch through Apache Tika, and was co-authored by jheysel-r7. The terse commit message contains no additional details, CVE references, or exploitation notes.
18
add a DefangedMode advanced options as teh exploit modifies the targe…
A Metasploit Framework commit adds a DefangedMode advanced option to an exploit module that modifies the target host configuration.
The commit introduces a DefangedMode advanced option so that the exploit's modification of the target configuration runs only explicitly, making the behavior visible to the user. No target product, affected software, or CVE identifier is named in the commit message.
12
45
45
45
30
45
45
45
45
45
45
45
45
45
45
45
45
45