Skip to content
Threat Feed
Subscribe

Tag

Metasploit

2 briefs RSS
high advisory

Pymetasploit3 Command Injection Vulnerability (CVE-2026-5463)

A command injection vulnerability in pymetasploit3 versions up to 1.0.6 allows attackers to inject newline characters into module options, leading to arbitrary command execution within Metasploit sessions.

command-injection metasploit pymetasploit3
2r 1t 1c
critical advisory

Metasploit Exploitation via Malicious Confluence Plugin

A Metasploit module exploits Atlassian Confluence servers by deploying a malicious Java plugin that downloads Meterpreter, granting the attacker full control over the compromised system.

Confluence Data Center +4 confluence metasploit meterpreter plugin exploitation attack
2r 3t