update link and wording

CVE-2024-1212/CVE-2024-1212.py

@@ -1,4 +1,4 @@
-# Exploit for CVE-2024-1212: Unauthenticated RCE in Progress Kemp LoadMaster
+# Exploit for CVE-2024-1212: Unauthenticated command injection in Progress Kemp LoadMaster
 # Tested on: LoadMaster 7.2.59.0.22007
 # Author: Dave Yesland @daveysec with Rhino Security Labs
 

CVE-2024-1212/README.md

@@ -1,11 +1,11 @@
-# CVE-2024-1212: Unauthenticated RCE in Progress Kemp LoadMaster
+# CVE-2024-1212: Unauthenticated Command Injection in Progress Kemp LoadMaster
 
 ## Information
-**Description:** This allows remote code execution in the Progress Kemp LoadMaster via the admin web service.  
+**Description:** This allows unauthenticated command injection in the Progress Kemp LoadMaster via the admin web service.  
 **Versions Affected:** All LoadMaster releases after 7.2.48.1  
 **Version Fixed:** 7.2.59.2 (GA), 7.2.54.8 (LTSF), 7.2.48.10 (LTS)  
 **Researcher:** Dave Yesland  
-**Disclosure Link:** PLACEHOLDER  
+**Disclosure Link:** [email protected]:RhinoSecurityLabs/CVEs.git  
 **NIST CVE Link:** https://nvd.nist.gov/vuln/detail/CVE-2024-1212  
 **Vendor Advisory:** https://support.kemptechnologies.com/hc/en-us/articles/23878931058445-LoadMaster-Security-Vulnerability-CVE-2024-1212  
 

CVE-2024-1212/metasploit/exploits/linux/http/progress_kemp_loadmaster_unauth_cmd_injection.rb

@@ -25,7 +25,7 @@ def initialize(info = {})
           'References' => [
             ['CVE', '2024-1212'],
             ['URL', 'https://kemptechnologies.com/kemp-load-balancers'],
-            ['URL', 'https://www.rhinosecuritylabs.com/']
+            ['URL', 'https://rhinosecuritylabs.com/research/cve-2024-1212unauthenticated-command-injection-in-progress-kemp-loadmaster/']
           ],
           'DisclosureDate' => '2024',
           'Notes' => {