https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 19:15:23 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-349567 EUVD-2026-349567 https://cve.radiocsirt.org/vuln/euvd-2026-349567 https://cve.radiocsirt.org/vuln/fkie_cve-2026-5463 <p>Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended commands, potentially leading to arbitrary command execution and manipulation of Metasploit sessions.</p> <p>Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended commands, potentially leading to arbitrary command execution and manipulation of Metasploit sessions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-5463 https://cve.radiocsirt.org/vuln/ghsa-qpc3-8vqg-8g6w <p><strong>Affected:</strong> PyPI: pymetasploit3</p> <p>Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended commands, potentially leading to arbitrary command execution and manipulation of Metasploit sessions.</p> <p><strong>Affected:</strong> PyPI: pymetasploit3</p> <p>Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended commands, potentially leading to arbitrary command execution and manipulation of Metasploit sessions.</p> https://cve.radiocsirt.org/vuln/ghsa-qpc3-8vqg-8g6w https://cve.radiocsirt.org/vuln/pysec-2026-500 <p><strong>Affected:</strong> PyPI: pymetasploit3</p> <p>Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended commands, potentially leading to arbitrary command execution and manipulation of Metasploit sessions.</p> <p><strong>Affected:</strong> PyPI: pymetasploit3</p> <p>Command injection vulnerability in console.run_module_with_output() in pymetasploit3 through version 1.0.6 allows attackers to inject newline characters into module options such as RHOSTS. This breaks the intended command structure and causes the Metasploit console to execute additional unintended commands, potentially leading to arbitrary command execution and manipulation of Metasploit sessions.</p> https://cve.radiocsirt.org/vuln/pysec-2026-500