rapid7/metasploit-framework

View on GitHub

Showing 22,177 of 22,177 total issues

Avoid too many return statements within this method.
Open

    return CheckCode::Unknown('Connection failed while trying to execute the echo command to check the vulnerability status.') unless res
Severity: Major
Found in modules/exploits/linux/http/wd_mycloud_unauthenticated_cmd_injection.rb - About 30 mins to fix

    Avoid too many return statements within this method.
    Open

            return CheckCode::Unknown(res_array[0])
    Severity: Major
    Found in modules/exploits/linux/http/nagios_xi_snmptrap_authenticated_rce.rb - About 30 mins to fix

      Avoid too many return statements within this method.
      Open

              return Exploit::CheckCode::Detected
      Severity: Major
      Found in modules/exploits/linux/http/rancher_server.rb - About 30 mins to fix

        Avoid too many return statements within this method.
        Open

              return CheckCode::Detected("Could not determine EyesOfNetwork version. API version is #{api_version}")
        Severity: Major
        Found in modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb - About 30 mins to fix

          Avoid too many return statements within this method.
          Open

                return CheckCode::Safe("Target is EyesOfNetwork with API version #{api_version}.")
          Severity: Major
          Found in modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb - About 30 mins to fix

            Avoid too many return statements within this method.
            Open

                    return CheckCode::Detected('Failed to sign the license agreement.')
            Severity: Major
            Found in modules/exploits/linux/http/nagios_xi_snmptrap_authenticated_rce.rb - About 30 mins to fix

              Avoid too many return statements within this method.
              Open

                  return Exploit::CheckCode::Safe("#{peer} - Unexpected response, unable to determine version") if json_body['version'].nil?
              Severity: Major
              Found in modules/exploits/linux/http/kibana_timelion_prototype_pollution_rce.rb - About 30 mins to fix

                Avoid too many return statements within this method.
                Open

                      return CheckCode::Appears("Target is EyesOfNetwork 5.3 or older with API version #{api_version}.")
                Severity: Major
                Found in modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb - About 30 mins to fix

                  Avoid too many return statements within this method.
                  Open

                      return CheckCode::Safe
                  Severity: Major
                  Found in modules/exploits/linux/http/nagios_xi_snmptrap_authenticated_rce.rb - About 30 mins to fix

                    Avoid too many return statements within this method.
                    Open

                        return CheckCode::Vulnerable('The target executed the echo command.') if res.code == 200 && res.body.include?(echo_cmd) && res.body.include?('"success":true')
                    Severity: Major
                    Found in modules/exploits/linux/http/wd_mycloud_unauthenticated_cmd_injection.rb - About 30 mins to fix

                      Avoid too many return statements within this method.
                      Open

                            return CheckCode::Detected('Could not determine EyesOfNetwork version.')
                      Severity: Major
                      Found in modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb - About 30 mins to fix

                        Avoid too many return statements within this method.
                        Open

                              return CheckCode::Appears("Target is EyesOfNetwork 5.2 with API version #{api_version}.")
                        Severity: Major
                        Found in modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb - About 30 mins to fix

                          Avoid too many return statements within this method.
                          Open

                                  return CheckCode::Unknown(sign_license_result[1])
                          Severity: Major
                          Found in modules/exploits/linux/http/nagios_xi_snmptrap_authenticated_rce.rb - About 30 mins to fix

                            Avoid too many return statements within this method.
                            Open

                                  return CheckCode::Unknown('Connection failed')
                            Severity: Major
                            Found in modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb - About 30 mins to fix

                              Avoid too many return statements within this method.
                              Open

                                    return CheckCode::Detected('Unable to obtain the Nagios XI version from the dashboard')
                              Severity: Major
                              Found in modules/exploits/linux/http/nagios_xi_snmptrap_authenticated_rce.rb - About 30 mins to fix

                                Avoid too many return statements within this method.
                                Open

                                      return CheckCode::NotVulnerable("Target is EyesOfNetwork version #{@version} and is not vulnerable.")
                                Severity: Major
                                Found in modules/exploits/linux/http/eyesofnetwork_autodiscovery_rce.rb - About 30 mins to fix

                                  Avoid too many return statements within this method.
                                  Open

                                      return CheckCode::Appears("Apache OFBiz version #{@version} detected") if Rex::Version.new(@version) < Rex::Version.new('18.12.11')
                                  Severity: Major
                                  Found in modules/exploits/linux/http/apache_ofbiz_deserialization.rb - About 30 mins to fix

                                    Avoid too many return statements within this method.
                                    Open

                                        return CheckCode::Appears('Apache OFBiz pre version 17 detected') if @version == 'pre-17'
                                    Severity: Major
                                    Found in modules/exploits/linux/http/apache_ofbiz_deserialization.rb - About 30 mins to fix

                                      Avoid too many return statements within this method.
                                      Open

                                              return
                                      Severity: Major
                                      Found in modules/exploits/linux/http/php_imap_open_rce.rb - About 30 mins to fix

                                        Avoid too many return statements within this method.
                                        Open

                                                return
                                        Severity: Major
                                        Found in modules/exploits/linux/http/php_imap_open_rce.rb - About 30 mins to fix
                                          Severity
                                          Category
                                          Status
                                          Source
                                          Language