{"vulnerability": "CVE-1999-0502", "sightings": [{"uuid": "f0c55608-05a9-44c0-a131-e9354e45d763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41694", "content": "", "creation_timestamp": "1999-01-01T00:00:00.000000Z"}, {"uuid": "4b772b7a-17d2-43d9-99a5-ae787a20d312", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:37.000000Z"}, {"uuid": "ba6c7b03-9a39-41b0-a7ec-645611f347c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:00.000000Z"}, {"uuid": "1de91e12-241e-41fa-80e3-6c706d40adef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_session_cgi_http_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "963097d6-4e71-43c4-ab59-c63f793ad4fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "fed654aa-ae07-4da8-bed7-8946773fbe76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/winrm/winrm_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "5c7df8d7-b874-419c-8b05-6c7791404a1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/ftp_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "09701561-459e-471a-8d38-0d91d33663e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rsh_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "57de1922-633e-49b4-be3b-222c958c8764", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/telnet_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e36ac935-6457-41ad-8432-f979e7e299cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/brocade_enable_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b4f8e766-cd2e-4aa9-be0c-5d9090230f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_300_615_http_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "35b0be0b-4b0a-4a29-bf06-6e6034f0c161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wordpress_xmlrpc_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d6e0a0c7-87d7-424d-9972-95d66997b78f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/db2/db2_auth.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "8caf7f71-3912-427d-ae12-3c3170f12981", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "59633aa5-053b-45dc-aafc-12e52be3985d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/oracle/oracle_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "d1fe45d9-fd1a-4230-ad26-6620a06da5e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/pcanywhere/pcanywhere_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "6081b94e-1331-454f-88fd-da820e9f05ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rlogin_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "77ac8f7b-cf84-440b-a51f-51108f92677b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/http_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "62030094-3092-463f-a3e6-1673d20ee882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_615h_http_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "df6d38ee-39ae-4d1c-8d6f-71d8802fa814", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rexec_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "7200af11-3282-4289-b1f9-e668f29ea39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmauthd_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "b90ff839-bf73-4147-90e3-d2b13844b222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "4b34e42d-3250-4a1f-bf7f-0ef6cd743235", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dell_idrac.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "cb5a2d78-cfb5-4d35-be83-c24f08ae2baa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/joomla_bruteforce_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "c8ba9ae0-308f-46e8-a44a-58f43772b1cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/postgres/postgres_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "e39b3daf-afca-439e-9eb9-fe9678b5211d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/nntp/nntp_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "ad5b8b8d-1bbf-451e-902e-8d5c5e6a79af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmware_http_login.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "83e041ea-e121-47be-9a34-2d0f18e0d591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lyy7rsxzsx2i", "content": "", "creation_timestamp": "2025-09-16T21:02:21.389047Z"}, {"uuid": "7821b0bf-2693-429a-9e67-2d9acf8ecb49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/ssh/sshexec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "75dc62fc-544e-4ff9-8bd7-67b85698e0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "published-proof-of-concept", "source": "https://t.me/canyoupwnme/998", "content": "#0daytoday #SSH - User Code Execution Exploit CVE-1999-0502 [remote #exploits #0day #Exploit] dlvr.it/NjCCjy", "creation_timestamp": "2017-03-23T21:39:21.000000Z"}, {"uuid": "4ea6e438-ba2b-4c8a-8bd1-043a7a94dc7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ftp/ftp_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"todb \", \"g0tmi1k\"], \"autofilter_ports\": [21, 2121], \"autofilter_services\": [\"ftp\"], \"check\": true, \"default_credential\": false, \"description\": \"This module tests FTP logins on a range of machines. Successful\\n          logins are recorded in the database as credentials, along with\\n          host information.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/ftp/ftp_login\", \"is_install_path\": true, \"mod_time\": \"2026-05-29 15:07:34 +0000\", \"name\": \"FTP Authentication Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\", \"account-lockouts\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/ftp/ftp_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/ftp/ftp_login\", \"references\": [\"CVE-1999-0502\", \"ATT&CK-T1021\", \"ATT&CK-T1110.001\"], \"rport\": 21, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:25.816455Z"}, {"uuid": "8e5b098f-ce75-4b75-84ce-917319d993de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dell_idrac.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Cristiano Maruti \", \"h00die\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to login to a iDRAC webserver instance using\\n        default username and password.  Tested against Dell Remote Access\\n        Controller 6 - Express version 1.50 and 1.85,\\n        Controller 7 - Enterprise 2.63.60.62\\n        Controller 8 - Enterprise 2.83.05\\n        Controller 9 - Enterprise 4.40.00.00\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/dell_idrac\", \"is_install_path\": true, \"mod_time\": \"2022-09-23 17:57:40 +0000\", \"name\": \"Dell iDRAC Default Login\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/dell_idrac.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/dell_idrac\", \"references\": [\"CVE-1999-0502\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:30.202748Z"}, {"uuid": "f14ef1a9-9a81-4a11-9bf4-34d900087a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/db2/db2_auth.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"todb \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate against a DB2 instance\\n        using username and password combinations indicated by the\\n        USER_FILE, PASS_FILE, and USERPASS_FILE options.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/db2/db2_auth\", \"is_install_path\": true, \"mod_time\": \"2025-05-24 14:23:30 +0000\", \"name\": \"DB2 Authentication Brute Force Utility\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"account-lockouts\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/db2/db2_auth.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/db2/db2_auth\", \"references\": [\"CVE-1999-0502\"], \"rport\": 50000, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:24.734402Z"}, {"uuid": "bd311059-ea19-4dbd-b241-c7dabaa1a3ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/http_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443, 8081, 8444], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to HTTP services that\\n        require Basic, Digest, or WebDAV authentication.\\n        It will probe URIs to identify endpoints requiring authentication (HTTP 401)\\n        and then perform brute-force login attempts.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/http_login\", \"is_install_path\": true, \"mod_time\": \"2026-04-16 22:05:06 +0000\", \"name\": \"HTTP Login Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/http_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/http_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:33.870566Z"}, {"uuid": "1d87df82-d8c0-42c8-8df0-d4cbbc1d1a4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_session_cgi_http_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \", \"Michael Messner \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to different D-Link HTTP management\\n        services. It has been tested successfully on D-Link DIR-300 Hardware revision B,\\n        D-Link DIR-600 Hardware revision B, D-Link DIR-815 Hardware revision A and DIR-645\\n        Hardware revision A devices. It is possible that this module also works with other\\n        models.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/dlink_dir_session_cgi_http_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"D-Link DIR-300B / DIR-600B / DIR-815 / DIR-645 HTTP Login Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/dlink_dir_session_cgi_http_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/dlink_dir_session_cgi_http_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:30.752585Z"}, {"uuid": "7900e01d-4545-429e-ba14-bc4651722d9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_300_615_http_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \", \"Michael Messner \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to different D-Link HTTP management\\n        services. It has been tested on D-Link DIR-300 Hardware revision A, D-Link DIR-615\\n        Hardware revision D and D-Link DIR-320 devices. It is possible that this module\\n        also works with other models.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/dlink_dir_300_615_http_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"D-Link DIR-300A / DIR-320 / DIR-615D HTTP Login Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/dlink_dir_300_615_http_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/dlink_dir_300_615_http_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:30.584076Z"}, {"uuid": "3d7e4634-b9af-4181-b1f7-3224b01442e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dlink_dir_615h_http_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \", \"Michael Messner \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to different D-Link HTTP management\\n        services. It has been tested successfully on D-Link DIR-615 Hardware revision H\\n        devices. It is possible that this module also works with other models.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/dlink_dir_615h_http_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"D-Link DIR-615H HTTP Login Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/dlink_dir_615h_http_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/dlink_dir_615h_http_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:30.680879Z"}, {"uuid": "1cbf959f-282d-488e-9650-502439bf4503", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/joomla_bruteforce_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"luisco100 \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to Joomla 2.5. or 3.0 through bruteforce attacks\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/joomla_bruteforce_login\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Joomla Bruteforce Login Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/joomla_bruteforce_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/joomla_bruteforce_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:35.631972Z"}, {"uuid": "405de15f-d288-4a7a-a8a9-598c3ef02ae6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/tomcat_mgr_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"MC \", \"Matteo Cantoni \", \"jduck \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443, 8081, 8444, 9080, 19300], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module simply attempts to login to a Tomcat Application Manager instance using a specific user/pass.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/tomcat_mgr_login\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 22:53:21 +0000\", \"name\": \"Tomcat Application Manager Login Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/http/tomcat_mgr_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/tomcat_mgr_login\", \"references\": [\"CVE-2009-3843\", \"OSVDB-60317\", \"BID-37086\", \"CVE-2009-4189\", \"OSVDB-60670\", \"URL-https://web.archive.org/web/20091129092955/http://www.harmonysecurity.com/blog/2009/11/hp-operations-manager-backdoor-account.html\", \"ZDI-09-085\", \"CVE-2009-4188\", \"BID-38084\", \"CVE-2010-0557\", \"URL-http://www-01.ibm.com/support/docview.wss?uid=swg21419179\", \"CVE-2010-4094\", \"ZDI-10-214\", \"CVE-2009-3548\", \"OSVDB-60176\", \"BID-36954\", \"URL-https://tomcat.apache.org/\", \"CVE-1999-0502\"], \"rport\": 8080, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:53.310833Z"}, {"uuid": "356ffe94-5ba2-4af3-972a-cbc67eb30bdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wordpress_xmlrpc_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Cenk Kalpakoglu \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate against a Wordpress-site\\n          (via XMLRPC) using username and password combinations indicated\\n          by the USER_FILE, PASS_FILE, and USERPASS_FILE options.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/wordpress_xmlrpc_login\", \"is_install_path\": true, \"mod_time\": \"2026-06-03 22:53:21 +0000\", \"name\": \"Wordpress XML-RPC Username/Password Login Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/http/wordpress_xmlrpc_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/http/wordpress_xmlrpc_login\", \"references\": [\"URL-https://wordpress.org/\", \"URL-http://www.ethicalhack3r.co.uk/security/introduction-to-the-wordpress-xml-rpc-api/\", \"CVE-1999-0502\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:56.211287Z"}, {"uuid": "57b021e3-0bc1-40cd-a160-407c5ea1a529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/mysql/mysql_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Bernardo Damele A. G. \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module simply queries the MySQL instance for a specific user/pass (default is root with blank).\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/mysql/mysql_login\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"MySQL Login Utility\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/mysql/mysql_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/mysql/mysql_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 3306, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:01.821247Z"}, {"uuid": "e89cf443-3a44-4e3d-a8fb-bf3b60693a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/nntp/nntp_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"bcoles \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to NNTP services\\n          which support the AUTHINFO authentication extension.\\n\\n          This module supports AUTHINFO USER/PASS authentication,\\n          but does not support AUTHINFO GENERIC or AUTHINFO SASL\\n          authentication methods.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/nntp/nntp_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"NNTP Login Utility\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/nntp/nntp_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/nntp/nntp_login\", \"references\": [\"CVE-1999-0502\", \"URL-https://datatracker.ietf.org/doc/html/rfc3977\", \"URL-https://datatracker.ietf.org/doc/html/rfc4642\", \"URL-https://datatracker.ietf.org/doc/html/rfc4643\"], \"rport\": 119, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:02.127915Z"}, {"uuid": "a641d912-c700-4f42-8a06-670ec7b88be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/oracle/oracle_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Patrik Karlsson \", \"todb \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate against an Oracle RDBMS\\n          instance using username and password combinations indicated\\n          by the USER_FILE, PASS_FILE, and USERPASS_FILE options.\\n\\n          Due to a bug in nmap versions 6.50-7.80 may not work.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/oracle/oracle_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Oracle RDBMS Login Utility\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/oracle/oracle_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/oracle/oracle_login\", \"references\": [\"URL-https://www.oracle.com/database/\", \"CVE-1999-0502\", \"URL-https://nmap.org/nsedoc/scripts/oracle-brute.html\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:03.014429Z"}, {"uuid": "1ce5de88-4970-49de-a7b8-0ba17227db6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/pcanywhere/pcanywhere_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"theLightCosine \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module will test pcAnywhere logins on a range of machines and\\n        report successful logins.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/pcanywhere/pcanywhere_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"PcAnywhere Login Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/pcanywhere/pcanywhere_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/pcanywhere/pcanywhere_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 5631, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:03.210504Z"}, {"uuid": "4695607b-879c-4ee5-aefc-04552eb0b15c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rlogin_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module will test an rlogin service on a range of machines and\\n        report successful logins.\\n\\n        NOTE: This module requires access to bind to privileged ports (below 1024).\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/rservices/rlogin_login\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"rlogin Authentication Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/rservices/rlogin_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/rservices/rlogin_login\", \"references\": [\"CVE-1999-0651\", \"CVE-1999-0502\"], \"rport\": 513, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:04.006545Z"}, {"uuid": "39d796e6-f0d1-48ad-b99e-3e9240ea9422", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rsh_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module will test a shell (rsh) service on a range of machines and\\n        report successful logins.\\n\\n        NOTE: This module requires access to bind to privileged ports (below 1024).\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/rservices/rsh_login\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"rsh Authentication Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/rservices/rsh_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/rservices/rsh_login\", \"references\": [\"CVE-1999-0651\", \"CVE-1999-0502\"], \"rport\": 514, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:04.204002Z"}, {"uuid": "881bdaf3-cb4e-409f-b94f-847edae3b3f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/rservices/rexec_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"jduck \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module will test a range of machines for a remote execution (rexec)\\n        service (part of the r-commands suite) and report successful logins,\\n        optionally attempt to spawn a session.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/rservices/rexec_login\", \"is_install_path\": true, \"mod_time\": \"2026-06-16 08:02:33 +0000\", \"name\": \"rexec Authentication Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/rservices/rexec_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/rservices/rexec_login\", \"references\": [\"CVE-1999-0651\", \"CVE-1999-0502\"], \"rport\": 512, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:03.802385Z"}, {"uuid": "06740aa3-74cf-4242-915e-5f3c0e8fc9ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/postgres/postgres_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"todb \"], \"autofilter_ports\": [5432], \"autofilter_services\": [\"postgres\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate against a PostgreSQL\\n          instance using username and password combinations indicated\\n          by the USER_FILE, PASS_FILE, and USERPASS_FILE options. Note that\\n          passwords may be either plaintext or MD5 formatted hashes.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/postgres/postgres_login\", \"is_install_path\": true, \"mod_time\": \"2025-09-02 16:31:33 +0000\", \"name\": \"PostgreSQL Login Utility\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/auxiliary/scanner/postgres/postgres_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/postgres/postgres_login\", \"references\": [\"URL-https://www.postgresql.org/\", \"CVE-1999-0502\", \"URL-https://hashcat.net/forum/archive/index.php?thread-4148.html\"], \"rport\": 5432, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:03.513359Z"}, {"uuid": "2a62bcb4-0c70-4330-801c-5f30af77d9ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssh/ssh_login.rb", "content": "{\"actions\": [], \"aliases\": [\"auxiliary/scanner/ssh/ssh_login_pubkey\"], \"arch\": \"\", \"author\": [\"todb \", \"RageLtMan\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module will test ssh logins on a range of machines and\\n        report successful logins.  If you have loaded a database plugin\\n        and connected to a database this module will record successful\\n        logins and hosts so you can track your access.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/ssh/ssh_login\", \"is_install_path\": true, \"mod_time\": \"2026-01-26 22:06:55 +0000\", \"name\": \"SSH Login Check Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/ssh/ssh_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/ssh/ssh_login\", \"references\": [\"CVE-1999-0502\", \"ATT&CK-T1021.004\"], \"rport\": 22, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:08.439343Z"}, {"uuid": "1f69367e-c68b-41d6-8029-a797617d2c58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmauthd_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"theLightCosine \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module will test vmauthd logins on a range of machines and\\n        report successful logins.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/vmware/vmauthd_login\", \"is_install_path\": true, \"mod_time\": \"2025-05-26 21:30:58 +0000\", \"name\": \"VMware Authentication Daemon Login Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"account-lockouts\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/vmware/vmauthd_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/vmware/vmauthd_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 902, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:11.827082Z"}, {"uuid": "995d9609-8636-4f21-a34d-8dc5d0de6b5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/vmware/vmware_http_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"theLightCosine \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to the VMware\\n        HTTP service for VMware Server, ESX, and ESXI.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/vmware/vmware_http_login\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"VMware Web Login Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\", \"account-lockouts\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/vmware/vmware_http_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/vmware/vmware_http_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 443, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:11.902428Z"}, {"uuid": "86292397-06f5-4f4e-a678-796d79566ada", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/winrm/winrm_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"thelightcosine\", \"smashery\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443, 5985, 5986], \"autofilter_services\": [\"http\", \"https\", \"winrm\"], \"check\": false, \"default_credential\": false, \"description\": \"This module attempts to authenticate to a WinRM service. It currently\\n        works only if the remote end allows Negotiate(NTLM) authentication.\\n        Kerberos is not currently supported.  Please note: in order to use this\\n        module without SSL, the 'AllowUnencrypted' winrm option must be set.\\n        Otherwise adjust the port and set the SSL options in the module as appropriate.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/winrm/winrm_login\", \"is_install_path\": true, \"mod_time\": \"2026-08-22 16:10:28 +0000\", \"name\": \"WinRM Login Utility\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/winrm/winrm_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/winrm/winrm_login\", \"references\": [\"CVE-1999-0502\", \"ATT&CK-T1021.006\"], \"rport\": 5985, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:12.529730Z"}, {"uuid": "88de5d17-83a0-438d-8fc0-15a03f148215", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/telnet_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"egypt \"], \"autofilter_ports\": [23], \"autofilter_services\": [\"telnet\"], \"check\": false, \"default_credential\": false, \"description\": \"This module will test a telnet login on a range of machines and\\n        report successful logins.  If you have loaded a database plugin\\n        and connected to a database this module will record successful\\n        logins and hosts so you can track your access.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/telnet/telnet_login\", \"is_install_path\": true, \"mod_time\": \"2025-09-22 19:52:39 +0000\", \"name\": \"Telnet Login Check Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/telnet/telnet_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/telnet/telnet_login\", \"references\": [\"CVE-1999-0502\", \"ATT&CK-T1021\"], \"rport\": 23, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:10.694639Z"}, {"uuid": "eb9caf25-330c-48bc-9fb6-dae0cbe4c3cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/telnet/brocade_enable_login.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die \"], \"autofilter_ports\": [23], \"autofilter_services\": [\"telnet\"], \"check\": false, \"default_credential\": false, \"description\": \"This module will test a range of Brocade network devices for a\\n        privileged logins and report successes. The device authentication mode\\n        must be set as 'aaa authentication enable default local'.\\n        Telnet authentication, e.g. 'enable telnet authentication', should not\\n        be enabled in the device configuration.\\n\\n        This module has been tested against the following devices:\\n              ICX6450-24 SWver 07.4.00bT311,\\n              FastIron WS 624 SWver 07.2.02fT7e1\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/telnet/brocade_enable_login\", \"is_install_path\": true, \"mod_time\": \"2025-06-20 13:20:44 +0000\", \"name\": \"Brocade Enable Login Check Scanner\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/scanner/telnet/brocade_enable_login.rb\", \"platform\": \"\", \"post_auth\": true, \"rank\": 300, \"ref_name\": \"scanner/telnet/brocade_enable_login\", \"references\": [\"CVE-1999-0502\"], \"rport\": 23, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:48:10.388212Z"}, {"uuid": "d92dc686-61ca-46cf-84ed-4934592b05cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-1999-0502", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/ssh/sshexec.rb", "content": "{\"aliases\": [], \"arch\": \"cmd, x86, x64, armle, mipsle, mipsbe, aarch64, python\", \"author\": [\"Spencer McIntyre\", \"Brandon Knight\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module connects to the target system and executes the necessary\\n        commands to run the specified payload via SSH. If a native payload is\\n        specified, an appropriate stager will be used.\", \"disclosure_date\": \"1999-01-01\", \"fullname\": \"exploit/multi/ssh/sshexec\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"SSH User Code Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"repeatable-session\"], \"SideEffects\": [\"artifacts-on-disk\", \"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/exploits/multi/ssh/sshexec.rb\", \"platform\": \"BSD,Linux,OSX,Python,Unix\", \"post_auth\": true, \"rank\": 0, \"ref_name\": \"multi/ssh/sshexec\", \"references\": [\"CVE-1999-0502\", \"ATT&CK-T1021.004\"], \"rport\": 22, \"session_types\": false, \"targets\": [\"Linux Command\", \"Linux x86\", \"Linux x64\", \"Linux armle\", \"Linux mipsle\", \"Linux mipsbe\", \"Linux aarch64\", \"OSX x86\", \"OSX x64\", \"BSD x86\", \"BSD x64\", \"Python\", \"Unix Cmd\", \"Interactive SSH\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:28.609520Z"}]}