Metasploit lands Flowise authentication-bypass module (CVE-2025-58434)
The auxiliary module targets CVE-2025-58434; the commit gives no affected versions, fix, or exploitation status.
Stories per day · 30 days
2 RSS
7 stories, newest first · one card per story
Stories tagged #exploit-module
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Rapid7's Metasploit wrap-up adds 12 modules, including unauthenticated RCE for N-central, Langflow, LiteLLM, and dizqueTV.
12
Update modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0769.rb
Metasploit updated its Langflow unauthenticated RCE module for CVE-2026-0769.
Update modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb
Metasploit updated its authenticated RCE module for Langflow flaw CVE-2026-7873.
Update modules/exploits/multi/persistence/kate_plugin.rb
Metasploit commit updates the Kate editor plugin persistence module without new vulnerability details.
get the module working against several of the 12.4.3 versions
A Metasploit Framework exploit module was updated to work reliably against several 12.4.3 software versions.
add a DefangedMode advanced options as teh exploit modifies the targe…
A Metasploit Framework commit adds a DefangedMode advanced option to an exploit module that modifies the target host configuration.