{"vulnerability": "cve-2013-1004", "sightings": [{"uuid": "51b6cc54-4758-4483-8cb1-23116a7426d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10047", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/miniweb_upload_wbem.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "3ad79d31-56a5-4350-b584-5f709c77f2c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10049", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "3be1b847-4602-42ff-9027-b33a2cca4ff3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10040", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "bb607109-cfe7-4b88-991b-ae6f7c4b8b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10042", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "e501f547-da55-4bc7-828f-44e09e637581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10043", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "4c74c594-ff32-4b70-8b6a-1615c58da8ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10044", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "c6cb2161-6ad9-4cb7-8092-425909b9f045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10046", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "5af28b41-1043-4818-8566-1d0b15241c88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10047", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "611361de-284e-436b-8d6c-c692a337df70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10048", "type": "seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "content": "", "creation_timestamp": "2025-10-23T21:12:57.000000Z"}, {"uuid": "0a6c9dcb-8db3-475f-ae6c-d12a7c0e269e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10040", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvblwp45dn2l", "content": "", "creation_timestamp": "2025-07-31T16:53:00.619113Z"}, {"uuid": "016fe246-68b1-459c-9d3c-eb48817d5b01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10040", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvekdjxe6e2a", "content": "", "creation_timestamp": "2025-08-01T21:02:23.688071Z"}, {"uuid": "5a0c7a1d-78e1-4985-9a55-d72c2a29be57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10047", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lveo3erfac2e", "content": "", "creation_timestamp": "2025-08-01T22:09:24.031851Z"}, {"uuid": "9c11b5f5-2040-4de4-9eff-9bdddbb056d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10048", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lveoncdyvg2d", "content": "", "creation_timestamp": "2025-08-01T22:19:25.441641Z"}, {"uuid": "2d442496-3da3-4339-949c-b7072964831d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10049", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lveowbpspe2k", "content": "", "creation_timestamp": "2025-08-01T22:24:26.795111Z"}, {"uuid": "443c8d37-77a9-4b71-ae28-4af20b048ae5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10043", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/astium_sqli_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "75545396-73f6-4634-9add-2d156d73f425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10049", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/raidsonic_nas_ib5220_exec_noauth.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "eaee1ddb-2cd5-422e-a577-3089efd0360d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10048", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "70bc8e8e-b82b-4cec-a871-4c0fc23e712a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10042", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/freeftpd_pass.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "555d872b-e3eb-462c-b349-23d4784656b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10040", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/clipbucket_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8ed9779a-2087-49d3-8178-09db0a817b9f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10046", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/agnitum_outpost_acs.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "637194e7-956a-41b5-9888-1f3e2d137811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10044", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e94c9769-b5cd-4122-aa48-2750c664d8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10043", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/astium_sqli_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits vulnerabilities found in Astium astium-confweb-2.1-25399 RPM and\\n          lower. A SQL Injection vulnerability is used to achieve authentication bypass and gain\\n          admin access. From an admin session arbitrary PHP code upload is possible. It is used\\n          to add the final PHP payload to \\\"/usr/local/astium/web/php/config.php\\\" and execute the\\n          \\\"sudo /sbin/service astcfgd reload\\\" command to reload the configuration and achieve\\n          remote root code execution.\", \"disclosure_date\": \"2013-09-17\", \"fullname\": \"exploit/linux/http/astium_sqli_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:54:55 +0000\", \"name\": \"Astium Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/astium_sqli_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"linux/http/astium_sqli_upload\", \"references\": [\"CVE-2013-10043\", \"OSVDB-88860\", \"EDB-23831\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Astium 2.1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:23.245678Z"}, {"uuid": "b883cb72-a569-4e15-8ee4-d9499e5c8604", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10048", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb", "content": "{\"aliases\": [], \"arch\": \"cmd\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Various D-Link Routers are vulnerable to OS command injection via the web\\n          interface. The vulnerability exists in command.php, which is accessible without\\n          authentication. This module has been tested with the versions DIR-600 2.14b01,\\n          DIR-300 rev B 2.13.\", \"disclosure_date\": \"2013-02-04\", \"fullname\": \"exploit/linux/http/dlink_command_php_exec_noauth\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"D-Link Devices Unauthenticated Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"linux/http/dlink_command_php_exec_noauth\", \"references\": [\"CVE-2013-10048\", \"OSVDB-89861\", \"EDB-24453\", \"BID-57734\", \"URL-http://web.archive.org/web/20240619081418/http://www.dlink.com/uk/en/home-solutions/connect/routers/dir-600-wireless-n-150-home-router\", \"URL-http://www.s3cur1ty.de/home-network-horror-days\", \"URL-http://www.s3cur1ty.de/m1adv2013-003\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:29.747039Z"}, {"uuid": "acae3069-8c01-4b28-bec0-9578f32d22f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10049", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/raidsonic_nas_ib5220_exec_noauth.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Michael Messner \", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Different Raidsonic NAS devices are vulnerable to OS command injection via the web\\n          interface. The vulnerability exists in timeHandler.cgi, which is accessible without\\n          authentication. This module has been tested with the versions IB-NAS5220 and\\n          IB-NAS4220. Since this module is adding a new user and modifying the inetd daemon\\n          configuration, this module is set to ManualRanking and could cause target instability.\", \"disclosure_date\": \"2013-02-04\", \"fullname\": \"exploit/linux/http/raidsonic_nas_ib5220_exec_noauth\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Raidsonic NAS Devices Unauthenticated Remote Command Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/linux/http/raidsonic_nas_ib5220_exec_noauth.rb\", \"platform\": \"Unix\", \"post_auth\": false, \"rank\": 0, \"ref_name\": \"linux/http/raidsonic_nas_ib5220_exec_noauth\", \"references\": [\"CVE-2013-10049\", \"OSVDB-90221\", \"EDB-24499\", \"BID-57958\", \"URL-http://www.s3cur1ty.de/m1adv2013-010\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:48:53.636960Z"}, {"uuid": "14d6c49f-2a7e-4299-b8ce-a3da64904e55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10040", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/clipbucket_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Gabby\", \"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in ClipBucket version 2.6 and lower.\\n          The script \\\"/admin_area/charts/ofc-library/ofc_upload_image.php\\\" can be used to\\n          upload arbitrary code without any authentication. This module has been tested\\n          on version 2.6 on CentOS 5.9 32-bit.\", \"disclosure_date\": \"2013-10-04\", \"fullname\": \"exploit/unix/webapp/clipbucket_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"ClipBucket Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/clipbucket_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/clipbucket_upload_exec\", \"references\": [\"CVE-2013-10040\", \"PACKETSTORM-123480\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Clipbucket 2.6\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:41.157090Z"}, {"uuid": "6620f5e9-9646-4c00-9628-0f52f96415c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10044", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"xistence \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in OpenEMR version 4.1.1 Patch 14 and lower.\\n          When logging in as any non-admin user, it's possible to retrieve the admin SHA1 password\\n          hash from the database through SQL injection. The SQL injection vulnerability exists\\n          in the \\\"new_comprehensive_save.php\\\" page. This hash can be used to log in as the admin\\n          user. After logging in, the \\\"manage_site_files.php\\\" page will be used to upload arbitrary\\n          code.\", \"disclosure_date\": \"2013-09-16\", \"fullname\": \"exploit/unix/webapp/openemr_sqli_privesc_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"OpenEMR 4.1.1 Patch 14 SQLi Privilege Escalation Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/openemr_sqli_privesc_upload.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/openemr_sqli_privesc_upload\", \"references\": [\"CVE-2013-10044\", \"OSVDB-97482\", \"EDB-28329\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"OpenEMR\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:44.840044Z"}, {"uuid": "be714295-dbfc-48c9-a945-6d0568f62ced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10042", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/ftp/freeftpd_pass.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Wireghoul\", \"TecR0c \"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"freeFTPd 1.0.10 and below contains an overflow condition that is triggered as\\n          user-supplied input is not properly validated when handling a specially crafted\\n          PASS command. This may allow a remote attacker to cause a buffer overflow,\\n          resulting in a denial of service or allow the execution of arbitrary code.\\n\\n          freeFTPd must have an account set to authorization anonymous user account.\", \"disclosure_date\": \"2013-08-20\", \"fullname\": \"exploit/windows/ftp/freeftpd_pass\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:58 +0000\", \"name\": \"freeFTPd PASS Command Buffer Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/ftp/freeftpd_pass.rb\", \"platform\": \"Windows\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"windows/ftp/freeftpd_pass\", \"references\": [\"CVE-2013-10042\", \"OSVDB-96517\", \"EDB-27747\", \"BID-61905\"], \"rport\": 21, \"session_types\": false, \"targets\": [\"freeFTPd 1.0.10 and below on Windows Desktop Version\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:36.746522Z"}, {"uuid": "13fbab5b-a2b8-44b9-a1fc-391282a4974f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10047", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/miniweb_upload_wbem.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"AkaStep\", \"bcoles \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in MiniWeb HTTP server (build 300).\\n          The software contains a file upload vulnerability that allows an\\n          unauthenticated remote attacker to write arbitrary files to the file system.\\n\\n          Code execution can be achieved by first uploading the payload to the remote\\n          machine as an exe file, and then upload another mof file, which enables\\n          WMI (Management Instrumentation service) to execute the uploaded payload.\\n          Please note that this module currently only works for Windows before Vista.\", \"disclosure_date\": \"2013-04-09\", \"fullname\": \"exploit/windows/http/miniweb_upload_wbem\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:31 +0000\", \"name\": \"MiniWeb (Build 300) Arbitrary File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/http/miniweb_upload_wbem.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/http/miniweb_upload_wbem\", \"references\": [\"CVE-2013-10047\", \"OSVDB-92198\", \"OSVDB-92200\", \"PACKETSTORM-121168\"], \"rport\": 8000, \"session_types\": false, \"targets\": [\"MiniWeb build 300 on Windows (Before Vista)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:55.240049Z"}, {"uuid": "d2e874a6-ea7d-476a-8131-2e178ed42d73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-10046", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/agnitum_outpost_acs.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"x86, x64\", \"author\": [\"Ahmad Moghimi\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a directory traversal vulnerability on Agnitum Outpost Internet\\n            Security 8.1. The vulnerability exists in the acs.exe component, allowing the user to load\\n            arbitrary DLLs through the acsipc_server named pipe, and finally execute arbitrary\\n            code with SYSTEM privileges. This module has been tested successfully on Windows 7 SP1 with\\n            Agnitum Outpost Internet Security 8.1 (32 bits and 64 bits versions).\", \"disclosure_date\": \"2013-08-02\", \"fullname\": \"exploit/windows/local/agnitum_outpost_acs\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:58:46 +0000\", \"name\": \"Agnitum Outpost Internet Security Local Privilege Escalation\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/local/agnitum_outpost_acs.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/local/agnitum_outpost_acs\", \"references\": [\"CVE-2013-10046\", \"OSVDB-96208\", \"EDB-27282\"], \"rport\": null, \"session_types\": [\"meterpreter\"], \"targets\": [\"Agnitum Outpost Internet Security 8.1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:06.707384Z"}]}