automatic module_metadata_base.json update

Author: jenkins-metasploit

db/modules_metadata_base.json

@@ -41983,6 +41983,71 @@
 
     ]
   },
+  "auxiliary_scanner/http/simplehelp_toolbox_path_traversal": {
+    "name": "SimpleHelp Path Traversal Vulnerability CVE-2024-57727",
+    "fullname": "auxiliary/scanner/http/simplehelp_toolbox_path_traversal",
+    "aliases": [
+
+    ],
+    "rank": 300,
+    "disclosure_date": "2025-01-12",
+    "type": "auxiliary",
+    "author": [
+      "horizon3ai",
+      "imjdl",
+      "jheysel-r7"
+    ],
+    "description": "There exists a path traversal vulnerability in the /toolbox-resource endpoint that enables unauthenticated\n          remote attackers to download arbitrary files from the SimpleHelp server via crafted HTTP requests",
+    "references": [
+      "URL-https://www.horizon3.ai/attack-research/disclosures/critical-vulnerabilities-in-simplehelp-remote-support-software/",
+      "URL-https://simple-help.com/kb---security-vulnerabilities-01-2025#security-vulnerabilities-in-simplehelp-5-5-7-and-earlier",
+      "URL-https://rustlang.rs/posts/simple-help/",
+      "URL-https://attackerkb.com/topics/G4CTOrbDx0/cve-2024-57727",
+      "CVE-2024-57727"
+    ],
+    "platform": "",
+    "arch": "",
+    "rport": 80,
+    "autofilter_ports": [
+      80,
+      8080,
+      443,
+      8000,
+      8888,
+      8880,
+      8008,
+      3000,
+      8443
+    ],
+    "autofilter_services": [
+      "http",
+      "https"
+    ],
+    "targets": null,
+    "mod_time": "2025-02-24 10:26:01 +0000",
+    "path": "/modules/auxiliary/scanner/http/simplehelp_toolbox_path_traversal.rb",
+    "is_install_path": true,
+    "ref_name": "scanner/http/simplehelp_toolbox_path_traversal",
+    "check": false,
+    "post_auth": false,
+    "default_credential": false,
+    "notes": {
+      "Stability": [
+        "crash-safe"
+      ],
+      "SideEffects": [
+        "ioc-in-logs"
+      ],
+      "Reliability": [
+
+      ]
+    },
+    "session_types": false,
+    "needs_cleanup": false,
+    "actions": [
+
+    ]
+  },
   "auxiliary_scanner/http/smt_ipmi_49152_exposure": {
     "name": "Supermicro Onboard IPMI Port 49152 Sensitive File Exposure",
     "fullname": "auxiliary/scanner/http/smt_ipmi_49152_exposure",