Metasploit prefers frozen string literals in new modules
This code change standardizes string handling in new Metasploit modules for consistency.
Stories per day · 30 days
6 RSS
Relatedrapid76documentation4apache-solr3rce3flowise2grafana2authenticated1authentication-bypass1beyondtrust1cisco1code-style1cve-2024-92641docker1exploit-framework1exploit-module1false-positives1file-upload1frozen-strings1
43 stories, newest first · one card per story
Stories tagged #metasploit
Metasploit adds unauthenticated RCE modules for perimeter devices
New modules cover Flowise, SPIP, OpenBullet2, GitLab, Portainer, and a NetScaler bug the vendor said was exploited.
5
Typo fixed in Cisco SMTP exploit module for Metasploit
A singular typo in the Cisco SMTP exploit module has been corrected in the Metasploit Framework.
BeyondTrust Remote Support flaw yields unauthenticated RCE
Rapid7’s Metasploit module writes a PHP file via a forged local router ID and runs it as the site user.
2
Metasploit adds authenticated Portainer Docker API root RCE
The new module targets an authenticated Docker API path; the commit names no CVE or affected versions.
Metasploit lands Flowise authentication-bypass module (CVE-2025-58434)
The auxiliary module targets CVE-2025-58434; the commit gives no affected versions, fix, or exploitation status.
Metasploit Framework commit updates a module and its docs
The public commit message names neither the module nor any target or vulnerability.
Metasploit varnish_cli_login docs aligned with the module
The commit only updates documentation output so it matches the existing varnish_cli_login module.
Metasploit adds Langflow, OpenCTI, Grafana and MongoDB modules
Six Langflow modules cover an auth bypass and remote code execution from 1.0.0 through 1.11.4.
6
Metasploit updates Apache Solr version scanner documentation
The commit only refreshes module documentation and does not add an exploit or a new module.
Metasploit commit removes agent module examples, updates AGENTS.md
The change is documentation and example cleanup, not a new exploit or module release.
Metasploit updates Apache Solr version scanner documentation
The commit only revises the auxiliary HTTP scanner module’s markdown, with no exploit or vulnerability details in the snippet.
Metasploit adds specs for the mkdir post API
Pull request 20944 adds tests so mkdir behaves consistently across session types, with no vulnerability disclosed.
Addresses some false positives in several modules
Metasploit commit reduces false positives across several modules.
How Multi-Campus Universities can Build a more Connected Security Program
Rapid7 says multi-campus universities should share security visibility and response while keeping campus data separate.
2
Clarify Grafana CVE-2024-9264 version handling
A Metasploit commit clarifies version handling for the Grafana CVE-2024-9264 module.
Metasploit Wrap Up: A Collection of What Can Only Be Called Eclectic Modules
Rapid7's Metasploit wrap-up adds 12 modules, including unauthenticated RCE for N-central, Langflow, LiteLLM, and dizqueTV.
12
Update modules/exploits/multi/http/langflow_unauth_rce_cve_2026_0769.rb
Metasploit updated its Langflow unauthenticated RCE module for CVE-2026-0769.
Update modules/exploits/multi/http/langflow_auth_rce_cve_2026_7873.rb
Metasploit updated its authenticated RCE module for Langflow flaw CVE-2026-7873.
Update modules/auxiliary/scanner/postgres/postgres_login.rb
Rapid7 updated Metasploit's PostgreSQL login scanner module, with no vulnerability details disclosed.
Update encoder and exploit templates to enforce fail-loud architectur…
Rapid7 updated Metasploit encoder and exploit templates to fail loudly and standardize rank placeholders.
Update module templates to include placeholders for DisclosureDate an…
Metasploit templates now include DisclosureDate and SessionTypes placeholders plus encoder and exploit docs.
Add generators for module scaffolding and enablement for Users/Agents
Metasploit adds generators for module scaffolding and enablement for users and agents.
Update modules/auxiliary/scanner/smb/cve_2000_0979.rb
Metasploit commit 1b458c3 updates the auxiliary SMB scanner for CVE-2000-0979.