This module exploits a remote code execution vulnerability (CVE-2022-33891) of Apache Spark. The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable.

An authenticated user can import a repository from GitHub into GitLab. When importing a GitHub repository the GitLab api client uses Sawyer for handling the responses. This takes a JSON hash and ...

***Disclaimer: The following information is for educational purposes only. Unauthorized use of this code for malicious purposes is illegal and can result in severe consequences. The author is not ...

EJPT learning glimpses: Metasploit framework: module: exploit SMBGhost (CVE-2020-0796) CVE-2020-0796, widely known as SMBGhost, is a "wormable" critical vulnerability in the Microsoft Server Message ...

A public exploit module for the BlueKeep Windows vulnerability has been added today to the open-source Metasploit penetration testing framework, developed by Rapid7 in collaboration with the ...

The developers of the Metasploit penetration testing framework have released today a weaponized exploit for the BlueKeep Windows vulnerability. While other security researchers have released defanged ...

If you’ve got a way to crack Google Chrome, the Metasploit team wants to pay you for it. Today Rapid 7 announced that it has a total of $5,000 to reward to contributors who send in exploits for its ...