deardaniel/secdata-raw huggingface dataset:
Metasploit Module: A10 Networks AX Loadbalancer Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/a10networks_ax_directory_traversal.rb
Disclosure date: 2014-01-28
References: CVE-2014-125125, OSVDB-102657, BID-65206, EDB-31261

Description:
This module exploits a directory traversal flaw found in A10 Networks
          (Soft) AX Loadbalancer version 2.6.1-GR1-P5/2.7.0 or less.  When
          handling a file download request, the xml/downloads class fails to
          properly check the 'filename' parameter, which can be abused to read
          any file outside the virtual directory. Important files include SSL
          certificates. This module works on both the hardware devices and the
          Virtual Machine appliances. IMPORTANT NOTE: This module will also delete the
          file on the device after downloading it. Because of this, the CONFIRM_DELETE
          option must be set to 'true' either manually or by script.
Metasploit Module: NFR Agent SRS Record Arbitrary Remote File Access
Type: auxiliary
Path: modules/auxiliary/scanner/http/novell_file_reporter_srs_fileaccess.rb
References: CVE-2012-4957, URL-https://www.rapid7.com/blog/post/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959/

Description:
NFRAgent.exe, a component of Novell File Reporter (NFR), allows remote attackers to retrieve
        arbitrary files via a request to /FSF/CMD with a SRS Record with OPERATION 4 and
        CMD 103, specifying a full pathname. This module has been tested successfully
        against NFR Agent 1.0.4.3 (File Reporter 1.0.2) and NFR Agent 1.0.3.22 (File
        Reporter 1.0.1).
Metasploit Module: PhpMyAdmin Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/phpmyadmin_login.rb

Description:
This module will attempt to authenticate to PhpMyAdmin.
Metasploit Module: Tomcat Application Manager Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/tomcat_mgr_login.rb
References: CVE-2009-3843, OSVDB-60317, BID-37086, CVE-2009-4189, OSVDB-60670, URL-https://web.archive.org/web/[PII_REDACTED]2955/http://www.harmonysecurity.com/blog/2009/11/hp-operations-manager-backdoor-account.html, ZDI-09-085, CVE-2009-4188, BID-38084, CVE-2010-0557

Description:
This module simply attempts to login to a Tomcat Application Manager instance using a specific user/pass.
Metasploit Module: ManageEngine DeviceExpert User Credentials
Type: auxiliary
Path: modules/auxiliary/scanner/http/manageengine_deviceexpert_user_creds.rb
Disclosure date: 2014-08-28
References: EDB-34449, OSVDB-110522, CVE-2014-5377

Description:
This module extracts usernames and salted MD5 password hashes
          from ManageEngine DeviceExpert version 5.9 build 5980 and prior.

          This module has been tested successfully on DeviceExpert
          version 5.9.7 build 5970.

Check method (fingerprinting):
get_users ? Exploit::CheckCode::Vulnerable('Successfully retrieved user credentials') : Exploit::CheckCode::Safe('Could not retrieve user credentials')
  end
Metasploit Module: Apache "mod_userdir" User Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/http/apache_userdir_enum.rb
References: BID-3335, CVE-2001-1013, OSVDB-637

Description:
Apache with the UserDir directive enabled generates different error
      codes when a username exists and there is no public_html directory and when the username
      does not exist, which could allow remote attackers to determine valid usernames on the
      server.
Metasploit Module: HTTP Directory Listing Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/dir_listing.rb

Description:
This module identifies directory listing vulnerabilities
          in a given directory path.
Metasploit Module: LimeSurvey Zip Path Traversals
Type: auxiliary
Path: modules/auxiliary/scanner/http/limesurvey_zip_traversals.rb
Disclosure date: 2020-04-02
References: EDB-48297, CVE-2020-11455, URL-https://github.com/LimeSurvey/LimeSurvey/commit/daf50ebb16574badfb7ae0b8526ddc5871378f1b, CVE-2019-9960, URL-https://www.secsignal.org/en/news/cve-2019-9960-arbitrary-file-download-in-limesurvey/, URL-https://github.com/LimeSurvey/LimeSurvey/commit/1ed10d3c423187712b8f6a8cb2bc9d5cc3b2deb8

Description:
This module exploits an authenticated path traversal vulnerability found in LimeSurvey
          versions between 4.0 and 4.1.11 with CVE-2020-11455 or <= 3.15.9 with CVE-2019-9960,
          inclusive.
          In CVE-2020-11455 the getZipFile function within the filemanager functionality
          allows for arbitrary file download.  The file retrieved may be deleted after viewing,
          which was confirmed in testing.
          In CVE-2019-9960 the szip function within the downloadZip functionality allows
          for arbitrary file download.
          Verified against 4.1.11-200316, 3.15.0-181008, 3.9.0-180604, 3.6.0-180328,
          3.0.0-171222, and 2.70.0-170921.
Metasploit Module: Oracle Demantra Database Credentials Leak
Type: auxiliary
Path: modules/auxiliary/scanner/http/oracle_demantra_database_credentials_leak.rb
Disclosure date: 2014-02-28
References: CVE-2013-5795, CVE-2013-5880, URL-https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2013-5795/, URL-https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2013-5880/

Description:
This module exploits a database credentials leak found in Oracle Demantra 12.2.1 in
          combination with an authentication bypass. This way an unauthenticated user can retrieve
          the database name, username and password on any vulnerable machine.
Metasploit Module: WordPress Mobile Edition File Read Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_mobileedition_file_read.rb
References: CVE-2015-9406, EDB-36733

Description:
This module exploits a directory traversal vulnerability in WordPress Plugin
          "WP Mobile Edition" version 2.2.7, allowing to read arbitrary files with the
          web server privileges.

Check method (fingerprinting):
check_plugin_version_from_readme('wp-mobile-edition', '2.3')
  end
Metasploit Module: NFR Agent FSFUI Record Arbitrary Remote File Access
Type: auxiliary
Path: modules/auxiliary/scanner/http/novell_file_reporter_fsfui_fileaccess.rb
References: CVE-2012-4958, URL-https://www.rapid7.com/blog/post/2012/11/16/nfr-agent-buffer-vulnerabilites-cve-2012-4959/

Description:
NFRAgent.exe, a component of Novell File Reporter (NFR), allows remote attackers to retrieve
        arbitrary text files via a directory traversal while handling requests to /FSF/CMD
        with an FSFUI record with UICMD 126. This module has been tested successfully
        against NFR Agent 1.0.4.3 (File Reporter 1.0.2) and NFR Agent 1.0.3.22 (File
        Reporter 1.0.1).
Metasploit Module: WordPress LearnPress Unauthenticated SQLi (CVE-2024-8522, CVE-2024-8529)
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_learnpress_c_fields_sqli.rb
Disclosure date: 2024-09-11
References: CVE-2024-8522, CVE-2024-8529, URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/learnpress/learnpress-wordpress-lms-plugin-427-unauthenticated-sql-injection-via-c-only-fields, URL-https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/learnpress/learnpress-wordpress-lms-plugin-427-unauthenticated-sql-injection-via-c-fields

Description:
The LearnPress WordPress LMS Plugin up to version 4.2.7 is vulnerable to SQL injection via
          the 'c_only_fields' and 'c_fields' parameters. This allows unauthenticated attackers to exploit blind SQL injections
          and extract sensitive information.
Metasploit Module: HTTP HTML Title Tag Content Grabber
Type: auxiliary
Path: modules/auxiliary/scanner/http/title.rb
Authors: Stuart Morgan <stuart.morgan[at]mwrinfosecurity.com>

Description:
Generates a GET request to the provided webservers and returns the server header,
        HTML title attribute and location header (if set). This is useful for rapidly identifying
        interesting web applications en mass.
Metasploit Module: Cisco ASA ASDM Brute-force Login
Type: auxiliary
Path: modules/auxiliary/scanner/http/cisco_asa_asdm_bruteforce.rb
References: URL-https://www.cisco.com/c/en/us/products/security/adaptive-security-device-manager/index.html

Description:
This module scans for the Cisco ASA ASDM landing page and performs login brute-force
          to identify valid credentials.
Metasploit Module: ES File Explorer Open Port
Type: auxiliary
Path: modules/auxiliary/scanner/http/es_file_explorer_open_port.rb
Disclosure date: Jan 16 2019
References: CVE-2019-6447, URL-https://www.ms509.com/2016/03/01/es-explorer-vul/, URL-https://github.com/fs0c131y/ESFileExplorerOpenPortVuln, URL-https://twitter.com/fs0c131y/status/[PII_REDACTED]13508352

Description:
This module connects to ES File Explorer's HTTP server to run
        certain commands. The HTTP server is started on app launch, and is available
        as long as the app is open. Version 4.1.9.7.4 and below are reported vulnerable
        This module has been tested against 4.1.9.5.1.
Metasploit Module: RIPS Scanner Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/rips_traversal.rb
References: CVE-2025-34126, EDB-18660, URL-http://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html

Description:
This module exploits a directory traversal vulnerability in the RIPS Scanner v0.54,
          allowing to read arbitrary files with the web server privileges.
Metasploit Module: Octopus Deploy Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/octopusdeploy_login.rb

Description:
This module simply attempts to login to an Octopus Deploy server using a specific
        username and password. It has been confirmed to work on version 3.4.4
Metasploit Module: Wordpress XML-RPC Username/Password Login Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/wordpress_xmlrpc_login.rb
References: URL-https://wordpress.org/, URL-http://www.ethicalhack3r.co.uk/security/introduction-to-the-wordpress-xml-rpc-api/, CVE-1999-0502

Description:
This module attempts to authenticate against a Wordpress-site
          (via XMLRPC) using username and password combinations indicated
          by the USER_FILE, PASS_FILE, and USERPASS_FILE options.
Metasploit Module: ManageEngine Support Center Plus Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/support_center_plus_directory_traversal.rb
Disclosure date: 2014-01-28
Authors: xistence <xistence[at]0x90.nl>
References: CVE-2014-100002, EDB-31262, OSVDB-102656, BID-65199

Description:
This module exploits a directory traversal vulnerability found in ManageEngine
          Support Center Plus build 7916 and lower. The module will create a support ticket
          as a normal user, attaching a link to a file on the server. By requesting our
          own attachment, it's possible to retrieve any file on the filesystem with the same
          privileges as Support Center Plus is running. On Windows this is always with SYSTEM
          privileges.
Metasploit Module: Httpdasm Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/httpdasm_directory_traversal.rb
References: CVE-2010-10012, EDB-15861

Description:
This module allows for traversing the file system of a host running httpdasm v0.92.
Metasploit Module: Apache ActiveMQ JSP Files Source Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/http/apache_activemq_source_disclosure.rb
References: CVE-2010-1587, OSVDB-64020, BID-39636, URL-https://issues.apache.org/jira/browse/AMQ-2700

Description:
This module exploits a source code disclosure in Apache ActiveMQ. The
          vulnerability is due to the Jetty's ResourceHandler handling of specially crafted
          URI's starting with //. It has been tested successfully on Apache ActiveMQ 5.3.1
          over Windows 2003 SP2 and Ubuntu 10.04.
Metasploit Module: WordPress Brute Force and User Enumeration Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/wordpress_login_enum.rb
References: BID-35581, CVE-2009-2335, OSVDB-55713

Description:
WordPress Authentication Brute Force and User Enumeration Utility
Metasploit Module: WordPress Easy WP SMTP Password Reset
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_easy_wp_smtp.rb
Disclosure date: 2020-12-06
References: URL-https://wordpress.org/support/topic/security-issue-with-debug-log/, URL-https://blog.nintechnet.com/wordpress-easy-wp-smtp-plugin-fixed-zero-day-vulnerability/, URL-https://plugins.trac.wordpress.org/changeset/2432768/easy-wp-smtp, CVE-2020-35234

Description:
Wordpress plugin Easy WP SMTP versions <= 1.4.2 was found to not include index.html within its plugin folder.
          This potentially allows for directory listings.  If debug mode is also enabled for the plugin, all SMTP
          commands are stored in a debug file.  An email must have been sent from the system as well to create the debug
          file.  If an email hasn't been sent (Test Email function not included), Aggressive can bypass the last check.
          Combining these items, it's possible to request a password reset for an account, then view the debug file to determine
          the link that was emailed out, and reset the user's password.
Metasploit Module: Novell Zenworks Mobile Device Management Admin Credentials
Type: auxiliary
Path: modules/auxiliary/scanner/http/novell_mdm_creds.rb
References: CVE-2013-1081, OSVDB-91119, URL-https://support.microfocus.com/kb/doc.php?id=7011895

Description:
This module attempts to pull the administrator credentials from
        a vulnerable Novell Zenworks MDM server.
Metasploit Module: Cisco Network Access Manager Directory Traversal Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/cisco_nac_manager_traversal.rb
References: CVE-2011-3305, OSVDB-76080

Description:
This module tests whether a directory traversal vulnerability is present
        in versions of Cisco Network Access Manager 4.8.x You may wish to change
        FILE (e.g. passwd or hosts), MAXDIRS and RPORT depending on your environment.
Metasploit Module: WANGKONGBAO CNS-1000 and 1100 UTM Directory Traversal
Type: auxiliary
Path: modules/auxiliary/scanner/http/wangkongbao_traversal.rb
References: CVE-2012-4031, EDB-19526

Description:
This module exploits the WANGKONGBAO CNS-1000 and 1100 UTM appliances aka
          Network Security Platform. This directory traversal vulnerability is interesting
          because the apache server is running as root, this means we can grab anything we
          want! For instance, the /etc/shadow and /etc/passwd files for the special
          kfc:$1$SlSyHd1a$PFZomnVnzaaj3Ei2v1ByC0:15488:0:99999:7::: user
Metasploit Module: Archive.org Stored Domain URLs
Type: auxiliary
Path: modules/auxiliary/scanner/http/enum_wayback.rb

Description:
This module pulls and parses the URLs stored by Archive.org for the purpose of
          replaying during a web assessment. Finding unlinked and old pages.
Metasploit Module: Gallery WD for Joomla! Unauthenticated SQL Injection Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/joomla_gallerywd_sqli_scanner.rb
Disclosure date: 2015-03-30
References: EDB-36563

Description:
This module will scan for Joomla! instances vulnerable to an unauthenticated SQL injection
          within the Gallery WD for Joomla! extension version 1.2.5 and likely prior.
Metasploit Module: ReDoc API Docs UI Exposed
Type: auxiliary
Path: modules/auxiliary/scanner/http/redoc_exposed.rb

Description:
Detects publicly exposed ReDoc API documentation pages.
          The module performs safe, read-only GET requests and reports likely
          ReDoc instances based on HTML markers.
Metasploit Module: Docker Server Version Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/docker_version.rb

Description:
This module attempts to identify the version of a Docker Server running on a
          host. If you wish to see all the information available, set VERBOSE to true.
Metasploit Module: Jira Users Enumeration
Type: auxiliary
Path: modules/auxiliary/scanner/http/jira_user_enum.rb
Disclosure date: 2020-08-16
References: URL-https://jira.atlassian.com/browse/JRASERVER-71560, CVE-2020-14181

Description:
This module exploits an information disclosure vulnerability that allows an
          unauthenticated user to enumerate users in the /ViewUserHover.jspa endpoint.
          This only affects Jira versions < 7.13.16, 8.0.0 <= version < 8.5.7, 8.6.0 <= version < 8.11.1
          Discovered by Mikhail Klyuchnikov @__mn1__
          This module has been tested on versions 8.4.1, 8.5.6, 8.10.1, 8.11.0
Metasploit Module: JBoss Vulnerability Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/jboss_vulnscan.rb
References: CVE-2008-3273, CVE-2010-1429, CVE-2010-0738, CVE-2010-1428, CVE-2017-12149

Description:
This module scans a JBoss instance for a few vulnerabilities.
Metasploit Module: Supermicro Onboard IPMI Port 49152 Sensitive File Exposure
Type: auxiliary
Path: modules/auxiliary/scanner/http/smt_ipmi_49152_exposure.rb
Disclosure date: 2014-06-19
References: URL-http://blog.cari.net/carisirt-yet-another-bmc-vulnerability-and-some-added-extras/, URL-https://github.com/zenfish/ipmi/blob/master/dump_SM.py

Description:
This module abuses a file exposure vulnerability accessible through the web interface
          on port 49152 of Supermicro Onboard IPMI controllers.  The vulnerability allows an attacker
          to obtain detailed device information and download data files containing the clear-text
          usernames and passwords for the controller. In May of 2014, at least 30,000 unique IPs
          were exposed to the internet with this vulnerability.
Metasploit Module: Xorcom CompletePBX Arbitrary File Read and Deletion via systemDataFileName
Type: auxiliary
Path: modules/auxiliary/scanner/http/xorcom_completepbx_diagnostics_file_read.rb
Disclosure date: 2025-03-02
References: CVE-2025-30005, URL-https://xorcom.com/new-completepbx-release-5-2-36-1/, URL-https://chocapikk.com/posts/2025/completepbx/

Description:
This module exploits an authenticated path traversal vulnerability in
          Xorcom CompletePBX <= 5.2.35. The issue occurs due to improper validation of the
          `systemDataFileName` parameter in the `diagnostics` module, allowing authenticated attackers
          to retrieve arbitrary files from the system.

          Additionally, the exploitation of this vulnerability results in the **deletion** of the
          requested file from the target system.

          The vulnerability is identified as CVE-2025-30005.

Check method (fingerprinting):
completepbx?
  end
Metasploit Module: Dolibarr ERP/CRM Login Utility
Type: auxiliary
Path: modules/auxiliary/scanner/http/dolibarr_login.rb

Description:
This module attempts to authenticate to a Dolibarr ERP/CRM's admin web interface,
          and should only work against version 3.1.1 or older, because these versions do not
          have any default protections against brute forcing.
Metasploit Module: WordPress Mobile Pack Information Disclosure Vulnerability
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_mobile_pack_info_disclosure.rb
References: CVE-2014-5337

Description:
This module exploits an information disclosure vulnerability in WordPress Plugin
          "WP Mobile Pack" version 2.1.2, allowing to read files with privileges
          information.

Check method (fingerprinting):
check_plugin_version_from_readme('wordpress-mobile-pack', '2.1.3')
  end
Metasploit Module: Supermicro Onboard IPMI CGI Vulnerability Scanner
Type: auxiliary
Path: modules/auxiliary/scanner/http/smt_ipmi_cgi_scanner.rb
Disclosure date: 2013-11-06
References: CVE-2013-3621, CVE-2013-3623, URL-https://www.rapid7.com/blog/post/2013/11/06/supermicro-ipmi-firmware-vulnerabilities/

Description:
This module checks for known vulnerabilities in the CGI applications of
          Supermicro Onboard IPMI controllers. These issues currently include
          several unauthenticated buffer overflows in the login.cgi and close_window.cgi
          components.
Metasploit Module: Binom3 Web Management Login Scanner, Config and Password File Dump
Type: auxiliary
Path: modules/auxiliary/scanner/http/binom3_login_config_pass_dump.rb
References: URL-https://www.cisa.gov/uscert/ics/advisories/ICSA-17-031-01A, CVE-2017-5162

Description:
This module scans for Binom3 Multifunctional Revenue Energy Meter and Power Quality Analyzer
          management login portal(s), and attempts to identify valid credentials.
          There are four (4) default accounts - 'root'/'root', 'admin'/'1', 'alg'/'1', 'user'/'1'.
          In addition to device config, 'root' user can also access password file.
          Other users - admin, alg, user - can only access configuration file.
          The module attempts to download configuration and password files depending on the login user credentials found.
Metasploit Module: Novell ZENworks Asset Management 7.5 Configuration Access
Type: auxiliary
Path: modules/auxiliary/scanner/http/zenworks_assetmanagement_getconfig.rb
References: CVE-2012-4933, URL-https://www.rapid7.com/blog/post/2012/10/11/cve-2012-4933-novell-zenworks/

Description:
This module exploits a hardcoded user and password for the GetConfig maintenance
          task in Novell ZENworks Asset Management 7.5. The vulnerability exists in the Web
          Console and can be triggered by sending a specially crafted request to the rtrlet component,
          allowing a remote unauthenticated user to retrieve the configuration parameters of
          Novell Zenworks Asset Management, including the database credentials in clear text.
          This module has been successfully tested on Novell ZENworks Asset Management 7.5.
Metasploit Module: MS15-034 HTTP Protocol Stack Request Handling HTTP.SYS Memory Information Disclosure
Type: auxiliary
Path: modules/auxiliary/scanner/http/ms15_034_http_sys_memory_dump.rb
References: CVE-2015-1635, MSB-MS15-034, URL-https://pastebin.com/ypURDPc4, URL-https://github.com/rapid7/metasploit-framework/pull/5150, URL-https://community.qualys.com/blogs/securitylabs/2015/04/20/ms15-034-analyze-and-remote-detection, URL-http://www.securitysift.com/an-analysis-of-ms15-034/, URL-http://securitysift.com/an-analysis-of-ms15-034/

Description:
This module dumps memory contents using a crafted Range header and affects only
          Windows 8.1, Server 2012, and Server 2012R2. Note that if the target
          is running in VMware Workstation, this module has a high likelihood
          of resulting in BSOD; however, VMware ESX and non-virtualized hosts
          seem stable. Using a larger target file should result in more memory
          being dumped, and SSL seems to produce more data as well.
Metasploit Module: Cisco Firepower Management Console 6.0 Login
Type: auxiliary
Path: modules/auxiliary/scanner/http/cisco_firepower_login.rb

Description:
This module attempts to authenticate to a Cisco Firepower Management console via HTTPS.
          The credentials are also used for SSH, which could allow remote code execution.
Metasploit Module: Wordpress Paid Membership Pro code Unauthenticated SQLi
Type: auxiliary
Path: modules/auxiliary/scanner/http/wp_paid_membership_pro_code_sqli.rb
Disclosure date: 2023-01-12
References: CVE-2023-23488, URL-https://www.tenable.com/security/research/tra-2023-2

Description:
Paid Membership Pro, a WordPress plugin,
          prior to 2.9.8 is affected by an unauthenticated SQL injection via the
          `code` parameter.

          Remote attackers can exploit this vulnerability to dump usernames and password hashes
          from the `wp_users` table of the affected WordPress installation. These password hashes
          can then be cracked offline using tools such as Hashcat to obtain valid login
          credentials for the affected WordPress installation.
Metasploit Module: Http:BL Lookup
Type: auxiliary
Path: modules/auxiliary/scanner/http/httpbl_lookup.rb
References: URL-https://www.projecthoneypot.org/httpbl_api.php

Description:
This module can be used to enumerate information
          about an IP addresses from Project HoneyPot's HTTP Block List.