Defined in 41 files
Last patched
MetasploitModule in rapid7/metasploit-framework was changed by 45 published CVE fixes between 2017 and 2026, in 41 distinct patches that added or removed 9,008 lines in total.
The name occurs in 41 files: modules/auxiliary/scanner/http/vicidial_multiple_sqli.rb, modules/exploits/multi/http/navigate_cms_rce.rb, modules/exploits/linux/http/cayin_cms_ntp.rb, modules/exploits/windows/http/cayin_xpost_sql_rce.rb, modules/exploits/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi.rb, modules/exploits/linux/http/denyall_waf_exec.rb, modules/auxiliary/dos/http/flexense_http_server_dos.rb, modules/exploits/multi/http/vbulletin_widget_template_rce.rb, modules/exploits/linux/http/linksys_wvbr0_user_agent_exec_noauth.rb, modules/auxiliary/scanner/vnc/ard_root_pw.rb, modules/exploits/windows/misc/wifi_mouse_rce.rb, modules/exploits/multi/http/horizontcms_upload_exec.rb, modules/exploits/multi/http/shopware_createinstancefromnamedarguments_rce.rb, modules/exploits/windows/misc/unified_remote_rce.rb, modules/exploits/windows/iis/iis_webdav_scstoragepathfromurl.rb, modules/exploits/linux/local/zimbra_slapper_priv_esc.rb, modules/exploits/windows/http/manageengine_adselfservice_plus_cve_2022_28810.rb, modules/exploits/windows/http/zentao_pro_rce.rb, modules/exploits/windows/misc/commvault_cmd_exec.rb, modules/exploits/windows/http/manageengine_appmanager_exec.rb, modules/post/linux/gather/haserl_read.rb, modules/exploits/windows/misc/ais_esel_server_rce.rb, modules/exploits/multi/http/connectwise_screenconnect_rce_cve_2024_1709.rb, modules/exploits/linux/http/vestacp_exec.rb, modules/payloads/singles/cmd/windows/jjs_reverse_tcp.rb, modules/exploits/linux/http/seagate_central_ssh_user_add.rb, modules/exploits/unix/sonicwall/sonicwall_xmlrpc_rce.rb, modules/exploits/multi/http/spip_x_spip_filtre_rce.rb, modules/exploits/linux/misc/drb_remote_codeexec.rb, lib/msf/core/exploit/remote/browser_getprivateip.rb, modules/exploits/unix/webapp/trixbox_ce_endpoint_devicemap_rce.rb, modules/exploits/windows/fileformat/documalis_pdf_editor_and_scanner.rb, modules/exploits/windows/http/rejetto_hfs_rce_cve_2024_23692.rb, modules/exploits/linux/local/zimbra_postfix_priv_esc.rb, modules/exploits/windows/http/flexdotnetcms_upload_exec.rb, modules/exploits/linux/http/wd_mycloud_multiupload_upload.rb, modules/exploits/linux/http/nuuo_nvrmini_unauth_rce_r2.rb, modules/exploits/windows/http/php_cgi_arg_injection_rce_cve_2024_4577.rb, modules/exploits/multi/http/churchinfo_upload_exec.rb, modules/exploits/windows/local/gog_galaxyclientservice_privesc.rb, modules/auxiliary/dos/http/metasploit_httphandler_dos.rb.
rapid7/metasploit-framework has 58 CVEs with a located fix in total, so 78% of them touched this function.
Every published CVE whose fix changed MetasploitModule, newest first, with the lines each fix touched.
CVE-2026-77806 · modules/exploits/multi/http/spip_x_spip_filtre_rce.rb · lines 1–102 · +102 −0
CVE-2024-4577 · modules/exploits/windows/http/php_cgi_arg_injection_rce_cve_2024_4577.rb · lines 1–159 · +159 −0
CVE-2024-23692 · modules/exploits/windows/http/rejetto_hfs_rce_cve_2024_23692.rb · lines 1–144 · +144 −0
CVE-2024-1709 · modules/exploits/multi/http/connectwise_screenconnect_rce_cve_2024_1709.rb · lines 1–434 · +434 −0
CVE-2022-3229 · modules/exploits/windows/misc/unified_remote_rce.rb · lines 1–611 · +611 −0
CVE-2020-6627 · modules/exploits/linux/http/seagate_central_ssh_user_add.rb · lines 1–211 · +211 −0
CVE-2021-43258 · modules/exploits/multi/http/churchinfo_upload_exec.rb · lines 1–242 · +242 −0
CVE-2022-3569 · modules/exploits/linux/local/zimbra_postfix_priv_esc.rb · lines 1–115 · +115 −0
CVE-2022-3218 · modules/exploits/windows/misc/wifi_mouse_rce.rb · lines 1–105 · +105 −0
CVE-2022-37393 · modules/exploits/linux/local/zimbra_slapper_priv_esc.rb · lines 1–138 · +138 −0
CVE-2022-34878 · modules/auxiliary/scanner/http/vicidial_multiple_sqli.rb · lines 1–300 · +300 −0
CVE-2022-34877 · modules/auxiliary/scanner/http/vicidial_multiple_sqli.rb · lines 1–300 · +300 −0
CVE-2022-34876 · modules/auxiliary/scanner/http/vicidial_multiple_sqli.rb · lines 1–300 · +300 −0
CVE-2022-28810 · modules/exploits/windows/http/manageengine_adselfservice_plus_cve_2022_28810.rb · lines 1–328 · +328 −0
CVE-2022-28810 · modules/payloads/singles/cmd/windows/jjs_reverse_tcp.rb · lines 1–73 · +73 −0
CVE-2022-23227 · modules/exploits/linux/http/nuuo_nvrmini_unauth_rce_r2.rb · lines 1–213 · +213 −0
CVE-2020-7385 · modules/exploits/linux/misc/drb_remote_codeexec.rb · line 0 · +0 −170
CVE-2021-29133 · modules/post/linux/gather/haserl_read.rb · lines 1–79 · +79 −0
CVE-2020-27386 · modules/exploits/windows/http/flexdotnetcms_upload_exec.rb · lines 1–327 · +327 −0
CVE-2020-27387 · modules/exploits/multi/http/horizontcms_upload_exec.rb · lines 1–305 · +305 −0
CVE-2020-7373 · modules/exploits/multi/http/vbulletin_widget_template_rce.rb · lines 1–141 · +141 −0
CVE-2019-5645 · modules/auxiliary/dos/http/metasploit_httphandler_dos.rb · lines 1–132 · +132 −0
CVE-2020-7374 · modules/exploits/windows/fileformat/documalis_pdf_editor_and_scanner.rb · lines 1–135 · +135 −0
CVE-2020-7361 · modules/exploits/windows/http/zentao_pro_rce.rb · lines 1–261 · +261 −0
CVE-2020-7357 · modules/exploits/linux/http/cayin_cms_ntp.rb · lines 1–148 · +148 −0
CVE-2020-7357 · modules/exploits/windows/http/cayin_xpost_sql_rce.rb · lines 1–149 · +149 −0
CVE-2020-7356 · modules/exploits/linux/http/cayin_cms_ntp.rb · lines 1–148 · +148 −0
CVE-2020-7356 · modules/exploits/windows/http/cayin_xpost_sql_rce.rb · lines 1–149 · +149 −0
CVE-2020-7352 · modules/exploits/windows/local/gog_galaxyclientservice_privesc.rb · lines 1–146 · +146 −0
CVE-2020-7351 · modules/exploits/unix/webapp/trixbox_ce_endpoint_devicemap_rce.rb · lines 1–198 · +198 −0
CVE-2020-10808 · modules/exploits/linux/http/vestacp_exec.rb · lines 1–276 · +276 −0
CVE-2019-12799 · modules/exploits/multi/http/shopware_createinstancefromnamedarguments_rce.rb · lines 1–282 · +282 −0
CVE-2019-10123 · modules/exploits/windows/misc/ais_esel_server_rce.rb · lines 1–135 · +135 −0
CVE-2018-17552 · modules/exploits/multi/http/navigate_cms_rce.rb · lines 1–128 · +128 −0
CVE-2018-17553 · modules/exploits/multi/http/navigate_cms_rce.rb · lines 1–128 · +128 −0
CVE-2018-9866 · modules/exploits/unix/sonicwall/sonicwall_xmlrpc_rce.rb · lines 1–130 · +130 −0
CVE-2018-6849 · lib/msf/core/exploit/remote/browser_getprivateip.rb · lines 1–141 · +141 −0
CVE-2018-8065 · modules/auxiliary/dos/http/flexense_http_server_dos.rb · lines 1–75 · +75 −0
CVE-2018-7890 · modules/exploits/windows/http/manageengine_appmanager_exec.rb · lines 1–102 · +102 −0
CVE-2017-18044 · modules/exploits/windows/misc/commvault_cmd_exec.rb · lines 1–98 · +98 −0
CVE-2017-17411 · modules/exploits/linux/http/linksys_wvbr0_user_agent_exec_noauth.rb · lines 1–118 · +118 −0
CVE-2017-17560 · modules/exploits/linux/http/wd_mycloud_multiupload_upload.rb · lines 1–106 · +106 −0
CVE-2017-13872 · modules/auxiliary/scanner/vnc/ard_root_pw.rb · lines 1–113 · +113 −0
CVE-2017-14706 · modules/exploits/linux/http/denyall_waf_exec.rb · lines 1–103 · +103 −0
CVE-2017-14705 · modules/exploits/linux/http/denyall_waf_exec.rb · lines 1–103 · +103 −0
CVE-2016-7547 · modules/exploits/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi.rb · lines 1–276 · +276 −0
CVE-2016-7552 · modules/exploits/multi/http/trendmicro_threat_discovery_admin_sys_time_cmdi.rb · lines 1–276 · +276 −0
CVE-2017-7269 · modules/exploits/windows/iis/iis_webdav_scstoragepathfromurl.rb · lines 1–155 · +155 −0
Get an alert when the next CVE fix lands in rapid7/metasploit-framework, with the patched functions.
Monitor metasploit-framework CVEsFunctions in the same files that CVE fixes also changed.
Functions in rapid7/metasploit-framework changed by the most CVE fixes.
Common questions about CVE fixes to MetasploitModule.
Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.
Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.
