Homepage

pymetasploit3@1.0.3

A full-fledged msfrpc library for Metasploit framework.

  • latest version

    1.0.6

  • first published

    7 years ago

  • latest version published

    2 years ago

  • licenses detected

  • View pymetasploit3 package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the pymetasploit3 package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Arbitrary Command Injection

    pymetasploit3 is an A full-fledged msfrpc library for Metasploit framework.

    Affected versions of this package are vulnerable to Arbitrary Command Injection via the console.run_module_with_output() function. An attacker can execute arbitrary commands and manipulate sessions by injecting newline characters into module options, which alters the intended command structure and causes unintended commands to be executed.

    How to fix Arbitrary Command Injection?

    There is no fixed version for pymetasploit3.

    [0,)
    Go back to all versions of this package