{"vulnerability": "cve-2019-5645", "sightings": [{"uuid": "3b9e1fd9-3535-46d8-8d2b-aca4cc6965aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5645", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:44.000000Z"}, {"uuid": "40052411-b603-494c-8324-3e8d6f043282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5645", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:16.000000Z"}, {"uuid": "29f9824a-a90f-4935-8b3c-76bea58e343d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5645", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/metasploit_httphandler_dos.rb", "content": "", "creation_timestamp": "2019-12-26T19:59:49.000000Z"}, {"uuid": "3205905b-c5f5-4f27-9921-e7b29063ed3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5645", "type": "seen", "source": "https://t.me/cibsecurity/14406", "content": "ATENTION\u203c New - CVE-2019-5645\n\nBy sending a specially crafted HTTP GET request to a listening Rapid7 Metasploit HTTP handler, an attacker can register an arbitrary regular expression. When evaluated, this malicious handler can either prevent new HTTP handler sessions from being established, or cause a resource exhaustion on the Metasploit server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2020-09-01T18:55:23.000000Z"}, {"uuid": "1c0ae20d-843d-4da8-b3cc-23af38e11b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-5645", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/http/metasploit_httphandler_dos.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Jose Garduno, Dreamlab Technologies AG\", \"Angelo Seiler, Dreamlab Technologies AG\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits the Metasploit HTTP(S) handler by sending\\n          a specially crafted HTTP request that gets added as a resource handler.\\n          Resources (which come from the external connections) are evaluated as RegEx\\n          in the handler server. Specially crafted input can trigger Gentle, Soft and Hard DoS.\\n\\n          Tested against Metasploit 5.0.20.\", \"disclosure_date\": \"2019-09-04\", \"fullname\": \"auxiliary/dos/http/metasploit_httphandler_dos\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Metasploit HTTP(S) handler DoS\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [], \"Stability\": [\"crash-service-down\"]}, \"path\": \"/modules/auxiliary/dos/http/metasploit_httphandler_dos.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"dos/http/metasploit_httphandler_dos\", \"references\": [\"CVE-2019-5645\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:00.280651Z"}]}