diff --git a/db/modules_metadata_base.json b/db/modules_metadata_base.json index 186441889b..cc16b68d14 100644 --- a/db/modules_metadata_base.json +++ b/db/modules_metadata_base.json @@ -35408,6 +35408,39 @@ "is_install_path": true, "ref_name": "linux/misc/gld_postfix" }, + "exploit_linux/misc/hid_discoveryd_command_blink_on_unauth_rce": { + "name": "HID discoveryd command_blink_on Unauthenticated RCE", + "full_name": "exploit/linux/misc/hid_discoveryd_command_blink_on_unauth_rce", + "rank": 600, + "disclosure_date": "2016-03-28", + "type": "exploit", + "author": [ + "Ricky \"HeadlessZeke\" Lawshae", + "coldfusion39", + "Brendan Coles" + ], + "description": "This module exploits an unauthenticated remote command execution\n vulnerability in the discoveryd service exposed by HID VertX and Edge\n door controllers.\n\n This module was tested successfully on a HID Edge model EH400\n with firmware version 2.3.1.603 (Build 04/23/2012).", + "references": [ + "ZDI-16-223", + "URL-https://blog.trendmicro.com/let-get-door-remote-root-vulnerability-hid-door-controllers/", + "URL-http://nosedookie.blogspot.com/2011/07/identifying-and-querying-hid-vertx.html", + "URL-https://exfil.co/2016/05/09/exploring-the-hid-eh400/", + "URL-https://github.com/lixmk/Concierge", + "URL-https://github.com/coldfusion39/VertXploit" + ], + "is_server": false, + "is_client": false, + "platform": "Linux", + "arch": "armle", + "rport": "4070", + "targets": [ + "Automatic" + ], + "mod_time": "2018-06-03 05:41:10 +0000", + "path": "/modules/exploits/linux/misc/hid_discoveryd_command_blink_on_unauth_rce.rb", + "is_install_path": true, + "ref_name": "linux/misc/hid_discoveryd_command_blink_on_unauth_rce" + }, "exploit_linux/misc/hikvision_rtsp_bof": { "name": "Hikvision DVR RTSP Request Remote Code Execution", "full_name": "exploit/linux/misc/hikvision_rtsp_bof", @@ -39745,6 +39778,34 @@ "is_install_path": true, "ref_name": "multi/http/gitlab_shell_exec" }, + "exploit_multi/http/gitlist_arg_injection": { + "name": "GitList v0.6.0 Argument Injection Vulnerability", + "full_name": "exploit/multi/http/gitlist_arg_injection", + "rank": 600, + "disclosure_date": "2018-04-26", + "type": "exploit", + "author": [ + "Kacper Szurek", + "Shelby Pace" + ], + "description": "This module exploits an argument injection vulnerability in GitList v0.6.0.\n The vulnerability arises from GitList improperly validating input using the php function\n 'escapeshellarg'.", + "references": [ + "EDB-44548", + "URL-https://security.szurek.pl/exploit-bypass-php-escapeshellarg-escapeshellcmd.html" + ], + "is_server": true, + "is_client": false, + "platform": "PHP", + "arch": "php", + "rport": "80", + "targets": [ + "GitList v0.6.0" + ], + "mod_time": "2018-07-06 14:25:58 +0000", + "path": "/modules/exploits/multi/http/gitlist_arg_injection.rb", + "is_install_path": true, + "ref_name": "multi/http/gitlist_arg_injection" + }, "exploit_multi/http/gitorious_graph": { "name": "Gitorious Arbitrary Command Execution", "full_name": "exploit/multi/http/gitorious_graph", @@ -101138,7 +101199,9 @@ "platform": "Linux,OSX,Windows", "arch": "", "rport": "", - "targets": null, + "targets": [ + + ], "mod_time": "2018-06-21 16:46:15 +0000", "path": "/modules/post/multi/manage/open.rb", "is_install_path": true, @@ -101214,7 +101277,9 @@ "platform": "Linux,OSX,Windows", "arch": "", "rport": "", - "targets": null, + "targets": [ + + ], "mod_time": "2018-06-21 16:46:00 +0000", "path": "/modules/post/multi/manage/screensaver.rb", "is_install_path": true,