automatic module_metadata_base.json update

Author: msjenkins-r7

db/modules_metadata_base.json

@@ -54968,7 +54968,7 @@
     ],
     "platform": "",
     "arch": "",
-    "rport": null,
+    "rport": 445,
     "autofilter_ports": [
       139,
       445
@@ -54978,7 +54978,7 @@
       "microsoft-ds"
     ],
     "targets": null,
-    "mod_time": "2024-02-02 14:26:43 +0000",
+    "mod_time": "2024-09-17 09:59:42 +0000",
     "path": "/modules/auxiliary/scanner/smb/smb_enumusers_domain.rb",
     "is_install_path": true,
     "ref_name": "scanner/smb/smb_enumusers_domain",
@@ -63477,7 +63477,7 @@
 
     ],
     "platform": "All",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -63511,7 +63511,7 @@
 
     ],
     "platform": "All",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -82530,6 +82530,71 @@
     "session_types": false,
     "needs_cleanup": null
   },
+  "exploit_linux/http/traccar_rce_upload": {
+    "name": "Traccar v5 Remote Code Execution (CVE-2024-31214 and CVE-2024-24809)",
+    "fullname": "exploit/linux/http/traccar_rce_upload",
+    "aliases": [
+
+    ],
+    "rank": 600,
+    "disclosure_date": "2024-08-23",
+    "type": "exploit",
+    "author": [
+      "Michael Heinzl",
+      "yiliufeng168",
+      "Naveen Sunkavally"
+    ],
+    "description": "Remote Code Execution in Traccar v5.1 - v5.12.\n          Remote code execution can be obtained by combining two vulnerabilities: A path traversal vulnerability (CVE-2024-24809) and an unrestricted file upload vulnerability (CVE-2024-31214).\n          By default, the application allows self-registration, enabling any user to register an account and exploit the issues. Moreover, the application runs by default with root privileges, potentially resulting in a complete system compromise.\n          This module, which should work on any Red Hat-based Linux system, exploits these issues by adding a new cronjob file that executes the specified payload.",
+    "references": [
+      "URL-https://github.com/traccar/traccar/security/advisories/GHSA-vhrw-72f6-gwp5",
+      "URL-https://github.com/traccar/traccar/security/advisories/GHSA-3gxq-f2qj-c8v9",
+      "URL-https://www.horizon3.ai/attack-research/disclosures/traccar-5-remote-code-execution-vulnerabilities/",
+      "CVE-2024-31214",
+      "CVE-2024-24809"
+    ],
+    "platform": "Linux",
+    "arch": "cmd",
+    "rport": 8082,
+    "autofilter_ports": [
+      80,
+      8080,
+      443,
+      8000,
+      8888,
+      8880,
+      8008,
+      3000,
+      8443
+    ],
+    "autofilter_services": [
+      "http",
+      "https"
+    ],
+    "targets": [
+      "Linux Command"
+    ],
+    "mod_time": "2024-09-23 18:12:01 +0000",
+    "path": "/modules/exploits/linux/http/traccar_rce_upload.rb",
+    "is_install_path": true,
+    "ref_name": "linux/http/traccar_rce_upload",
+    "check": true,
+    "post_auth": true,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "Reliability": [
+        "event-dependent"
+      ],
+      "SideEffects": [
+        "ioc-in-logs",
+        "config-changes"
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": true
+  },
   "exploit_linux/http/trend_micro_imsva_exec": {
     "name": "Trend Micro InterScan Messaging Security (Virtual Appliance) Remote Code Execution",
     "fullname": "exploit/linux/http/trend_micro_imsva_exec",
@@ -98129,7 +98194,7 @@
       "URL-https://www.youtube.com/watch?v=mkX3dO6KN54"
     ],
     "platform": "Android,Apple_iOS,BSD,Java,JavaScript,Linux,Mainframe,Multi,NodeJS,OSX,PHP,Python,Ruby,Solaris,Unix,Windows",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": [
 
@@ -98171,7 +98236,7 @@
 
     ],
     "platform": "Android,Apple_iOS,BSD,Java,JavaScript,Linux,Mainframe,Multi,NodeJS,OSX,PHP,Python,Ruby,Solaris,Unix,Windows",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": [
 
@@ -116342,7 +116407,7 @@
       "URL-https://www.virtualbox.org/manual/ch04.html#sharedfolders"
     ],
     "platform": "Ruby",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": [
 
@@ -202561,7 +202626,7 @@
       "URL-https://www.sempervictus.com/single-post/a-serial-case-of-air-on-the-side-channel"
     ],
     "platform": "Unix",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -232395,7 +232460,7 @@
 
     ],
     "platform": "All",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -232467,7 +232532,7 @@
       "URL-https://www.sempervictus.com/single-post/once-upon-a-cloudy-air-i-crossed-a-gap-which-wasn-t-there"
     ],
     "platform": "All",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -232503,7 +232568,7 @@
 
     ],
     "platform": "All",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -232539,7 +232604,7 @@
 
     ],
     "platform": "All",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -232575,7 +232640,7 @@
 
     ],
     "platform": "All",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -237350,7 +237415,7 @@
 
     ],
     "platform": "Multi",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -237388,7 +237453,7 @@
 
     ],
     "platform": "Multi",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
@@ -256490,7 +256555,7 @@
     "autofilter_ports": null,
     "autofilter_services": null,
     "targets": null,
-    "mod_time": "2023-02-08 13:47:34 +0000",
+    "mod_time": "2024-08-13 15:51:09 +0000",
     "path": "/modules/post/linux/manage/pseudo_shell.rb",
     "is_install_path": true,
     "ref_name": "linux/manage/pseudo_shell",
@@ -259304,30 +259369,40 @@
     "aliases": [
 
     ],
-    "rank": 300,
+    "rank": 600,
     "disclosure_date": null,
     "type": "post",
     "author": [
-      "Eliott Teissonniere"
+      "Eliott Teissonniere",
+      "Julien Voisin"
     ],
     "description": "This module allows you to turn on or off the screensaver of the target computer and also\n          lock the current session.",
     "references": [
-
+      "URL-https://gitlab.gnome.org/GNOME/gnome-shell/-/issues/7530"
     ],
-    "platform": "Linux,OSX,Windows",
+    "platform": "Linux,OSX,Solaris,Unix,Windows",
     "arch": "",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,
     "targets": null,
-    "mod_time": "2023-02-08 13:47:34 +0000",
+    "mod_time": "2024-09-09 16:49:21 +0000",
     "path": "/modules/post/multi/manage/screensaver.rb",
     "is_install_path": true,
     "ref_name": "multi/manage/screensaver",
     "check": false,
     "post_auth": false,
     "default_credential": false,
     "notes": {
+      "Reliability": [
+
+      ],
+      "Stability": [
+
+      ],
+      "SideEffects": [
+
+      ]
     },
     "session_types": [
       "shell",
@@ -259346,6 +259421,10 @@
       {
         "name": "STOP",
         "description": "Stop the screensaver, user may be prompted for its password"
+      },
+      {
+        "name": "UNLOCK",
+        "description": "Unlock the current session"
       }
     ]
   },
@@ -260321,7 +260400,7 @@
       "URL-https://www.mac4n6.com/blog/2018/3/21/uh-oh-unified-logs-in-high-sierra-1013-show-plaintext-password-for-apfs-encrypted-external-volumes-via-disk-utilityapp"
     ],
     "platform": "OSX",
-    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r",
+    "arch": "x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, firefox, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64",
     "rport": null,
     "autofilter_ports": null,
     "autofilter_services": null,