automatic module_metadata_base.json update

Author: jenkins-metasploit

db/modules_metadata_base.json

@@ -79530,6 +79530,68 @@
     "session_types": false,
     "needs_cleanup": true
   },
+  "exploit_linux/http/netalertx_rce_cve_2024_46506": {
+    "name": "Unauthenticated RCE in NetAlertX",
+    "fullname": "exploit/linux/http/netalertx_rce_cve_2024_46506",
+    "aliases": [
+
+    ],
+    "rank": 600,
+    "disclosure_date": "2025-01-30",
+    "type": "exploit",
+    "author": [
+      "Chebuya (Rhino Security Labs)",
+      "Takahiro Yokoyama"
+    ],
+    "description": "An attacker can update NetAlertX settings with no authentication, which results in RCE.",
+    "references": [
+      "CVE-2024-46506",
+      "URL-https://rhinosecuritylabs.com/research/cve-2024-46506-rce-in-netalertx/"
+    ],
+    "platform": "Linux",
+    "arch": "",
+    "rport": 20211,
+    "autofilter_ports": [
+      80,
+      8080,
+      443,
+      8000,
+      8888,
+      8880,
+      8008,
+      3000,
+      8443
+    ],
+    "autofilter_services": [
+      "http",
+      "https"
+    ],
+    "targets": [
+      "Linux Command"
+    ],
+    "mod_time": "2025-02-11 11:25:24 +0000",
+    "path": "/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb",
+    "is_install_path": true,
+    "ref_name": "linux/http/netalertx_rce_cve_2024_46506",
+    "check": true,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "SideEffects": [
+        "config-changes",
+        "artifacts-on-disk",
+        "ioc-in-logs"
+      ],
+      "Reliability": [
+        "repeatable-session"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": null
+  },
   "exploit_linux/http/netgear_dgn1000_setup_unauth_exec": {
     "name": "Netgear DGN1000 Setup.cgi Unauthenticated RCE",
     "fullname": "exploit/linux/http/netgear_dgn1000_setup_unauth_exec",
@@ -192323,6 +192385,65 @@
     "session_types": false,
     "needs_cleanup": null
   },
+  "exploit_windows/scada/mypro_mgr_cmd": {
+    "name": "mySCADA myPRO Manager Unauthenticated Command Injection (CVE-2024-47407)",
+    "fullname": "exploit/windows/scada/mypro_mgr_cmd",
+    "aliases": [
+
+    ],
+    "rank": 600,
+    "disclosure_date": "2024-11-21",
+    "type": "exploit",
+    "author": [
+      "Michael Heinzl"
+    ],
+    "description": "Unauthenticated Command Injection in MyPRO Manager <= v1.2 from mySCADA.\n          The vulnerability can be exploited by a remote attacker to inject arbitrary operating system commands which will get executed in the context of the myscada9 administrative user that is automatically added by the product.",
+    "references": [
+      "URL-https://www.cisa.gov/news-events/ics-advisories/icsa-24-326-07",
+      "CVE-2024-47407"
+    ],
+    "platform": "Windows",
+    "arch": "cmd",
+    "rport": 34022,
+    "autofilter_ports": [
+      80,
+      8080,
+      443,
+      8000,
+      8888,
+      8880,
+      8008,
+      3000,
+      8443
+    ],
+    "autofilter_services": [
+      "http",
+      "https"
+    ],
+    "targets": [
+      "Windows_Fetch"
+    ],
+    "mod_time": "2025-01-29 20:18:05 +0000",
+    "path": "/modules/exploits/windows/scada/mypro_mgr_cmd.rb",
+    "is_install_path": true,
+    "ref_name": "windows/scada/mypro_mgr_cmd",
+    "check": true,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "Reliability": [
+        "repeatable-session"
+      ],
+      "SideEffects": [
+        "ioc-in-logs"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": null
+  },
   "exploit_windows/scada/procyon_core_server": {
     "name": "Procyon Core Server HMI Coreservice.exe Stack Buffer Overflow",
     "fullname": "exploit/windows/scada/procyon_core_server",