Skip to content
OpenAdvisories

Product · Rapid7

Metasploit Framework

12 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2020-7350 Public exploit

    Metasploit Framework Plugin Libnotify Command Injection

    Rapid7 Metasploit Framework versions before 5.0.85 suffers from an instance of CWE-78: OS Command Injection, wherein the libnotify plugin accepts untrusted user-supplied data via a remote computer's hostname or service name. An attacker can create a specially…

    Rapid7 Metasploit Framework