Bedrohung: This Metasploit module exploits an unauthenticated directory traversal vulnerability which exists in Spring Cloud Config versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6.

Betrifft: Spring Cloud Config listens by default on port 8888.

Bedrohung: This Metasploit module scans for the Cisco ASA ASDM landing page and performs login brute-force to identify valid credentials.

Betrifft: Betrifft Systeme und Installationen im Cisco-Ökosystem sowie damit verknüpfte Netzwerkdienste.

Bedrohung: This Metasploit module exploits an unauthenticated directory traversal vulnerability in Apache Flink versions 1.11.0 less than or equal to 1.11.2.

Betrifft: The JobManager REST API fails to validate user-supplied log file paths, allowing retrieval of arbitrary files with the privileges of the web server user.

Bedrohung: This Metasploit module simply attempts to login to a RFCode Reader web interface.

Betrifft: Please note that by default there is no authentication.

Bedrohung: Wordpress plugin Easy WP SMTP versions less than or equal to 1.4.2 was found to not include index.html within its plugin folder.

Betrifft: This potentially allows for directory listings.

Bedrohung: This Metasploit module attempts to bruteforce Typo3 logins.

Betrifft: Betrifft Systeme und Installationen im Generic Security-Ökosystem sowie damit verknüpfte Netzwerkdienste.

Bedrohung: This Metasploit module exploits a source code disclosure in Apache ActiveMQ.

Betrifft: The vulnerability is due to the Jettys ResourceHandler handling of specially crafted URIs starting with //.

Bedrohung: This Metasploit module exploits an authentication bypass vulnerability in Meteocontrol WEBLog appliances (software version < May 2016 release) to extract Administrator password for the device management portal.

Betrifft: Betrifft Systeme und Installationen im Generic Security-Ökosystem sowie damit verknüpfte Netzwerkdienste.