 Spencer McIntyre
|
415383b48d
|
Land #17042, Add exploit for CVE-2022-36804
|
2022-09-21 13:07:32 -04:00 |
|
|
Christophe De La Fuente
|
4943d86ec6
|
Land #16989, Unified Remote RCE
|
2022-09-21 14:06:33 +02:00 |
|
|
space-r7
|
f2e003cdb0
|
add documentation
|
2022-09-20 18:45:48 -05:00 |
|
|
h00die
|
271171f6d2
|
unified now with invisible feature
|
2022-09-18 19:02:59 -04:00 |
|
|
Christophe De La Fuente
|
52ff168c5e
|
Land #16914, Add PAN-OS auth command injection module (CVE-2020-2038)
|
2022-09-15 17:58:07 +02:00 |
|
|
Jack Heysel
|
1c99daa836
|
Updated error handling
|
2022-09-13 12:40:59 -04:00 |
|
|
h00die
|
ae91cfa9c5
|
unified_remote exploit
|
2022-09-08 17:09:31 -04:00 |
|
|
bwatters
|
2af5b22272
|
Land #16983, firefox_xpi_bootstrapped_addon: Add notes, description, references, docs
Merge branch 'alnd-16983' into upstream-master
|
2022-09-08 08:23:32 -05:00 |
|
|
space-r7
|
a11569fc53
|
Land #16944, add Apach Spark RCE
|
2022-09-07 13:02:27 -05:00 |
|
|
h00die-gr3y
|
f71ec84f9e
|
updated documentation
|
2022-09-06 19:36:11 +00:00 |
|
|
bcoles
|
a7d2145e8d
|
firefox_xpi_bootstrapped_addon: Add notes, description, references, docs
|
2022-09-05 02:23:37 +10:00 |
|
|
Christophe De La Fuente
|
8ba621a291
|
Land #16923, Cisco ASA-X with FirePOWER Services Authenticated Command Injection (CVE-2022-20828)
|
2022-09-02 18:37:37 +02:00 |
|
|
Spencer McIntyre
|
6965115c8e
|
Land #16786, Zyxel Firewall LPE (CVE-2022-30526)
|
2022-08-31 08:40:23 -04:00 |
|
|
h00die-gr3y
|
e8083c6fb1
|
commit module and documentation
|
2022-08-26 15:39:18 +00:00 |
|
|
h00die-gr3y
|
21c4e3ce3d
|
commit module and documentation
|
2022-08-26 15:05:39 +00:00 |
|
|
Spencer McIntyre
|
ae5a9bd41b
|
Land #16734, Add rtf support to cve-2022-30190
Add rtf support to cve-2022-30190 AKA Follina
|
2022-08-25 17:26:46 -04:00 |
|
|
Spencer McIntyre
|
68eae1664e
|
Tweak the follina docs
|
2022-08-25 17:10:59 -04:00 |
|
|
Grant Willcox
|
2369e1562c
|
Add in documentation on how to install the target from scratch
|
2022-08-23 11:44:09 -05:00 |
|
|
Ron Bowes
|
abd392c372
|
Add in changes from review
|
2022-08-23 11:44:03 -05:00 |
|
|
Grant Willcox
|
5b61b5097f
|
RuboCop documentation, add in Verification steps, and fix up minor issues
|
2022-08-23 11:44:02 -05:00 |
|
|
Ron Bowes
|
0e6647c7f9
|
Add scenarios
|
2022-08-23 11:43:53 -05:00 |
|
|
Ron Bowes
|
97f8ec9367
|
Documentation, output cleanup
|
2022-08-23 11:43:51 -05:00 |
|
|
Christophe De La Fuente
|
847cd97927
|
Land #16925, Fix a payload bug in unrar_cve_2022_30333
|
2022-08-23 12:59:37 +02:00 |
|
|
Ron Bowes
|
13d8c41f98
|
Clean up and better documentation
|
2022-08-22 11:46:50 -07:00 |
|
|
Spencer McIntyre
|
07fdc1f1ec
|
Land #16907, ms10_092_schelevator: Cleanup
|
2022-08-22 11:53:02 -04:00 |
|
|
Jake Baines
|
b4fe31757d
|
Added module for CVE-2022-20828
|
2022-08-19 12:29:37 -07:00 |
|
|
Grant Willcox
|
97bce45e69
|
Land #16915, Add exploit for CVE-2022-23277 (Exchange RCE)
|
2022-08-19 11:11:46 -05:00 |
|
|
bcoles
|
666a3efcfd
|
ms10_092_schelevator: Cleanup
|
2022-08-19 15:19:28 +10:00 |
|
|
Christophe De La Fuente
|
d49b74d164
|
Land #16809, Add exploit module for Advantech iView command injection - CVE-2022-2143
|
2022-08-18 17:19:14 +02:00 |
|
|
Spencer McIntyre
|
7c1dd17c86
|
Add a missing verison, fix typos
|
2022-08-17 17:36:31 -04:00 |
|
|
Jack Heysel
|
75efe1528c
|
Added check method, reponded to PR comments
|
2022-08-17 17:24:03 -04:00 |
|
|
bwatters
|
115955591b
|
Fix up the Unicode coversions and update docs
|
2022-08-17 13:21:56 -05:00 |
|
|
jheysel-r7
|
47f2b52277
|
Update documentation/modules/exploit/linux/http/panos_auth_rce.md
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
|
2022-08-17 13:42:17 -04:00 |
|
|
jheysel-r7
|
ef0578160c
|
Update documentation/modules/exploit/linux/http/panos_auth_rce.md
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
|
2022-08-17 13:32:36 -04:00 |
|
|
jheysel-r7
|
08502e184c
|
Update documentation/modules/exploit/linux/http/panos_auth_rce.md
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com>
|
2022-08-17 13:32:07 -04:00 |
|
|
Spencer McIntyre
|
62ab42b797
|
Update vulnerable version numbers and docs
|
2022-08-17 08:55:46 -04:00 |
|
|
jheysel-r7
|
30df4ce7b0
|
Update documentation/modules/exploit/linux/http/panos_auth_rce.md
|
2022-08-16 09:58:55 -04:00 |
|
|
Jack Heysel
|
57109f2966
|
Add PAN-OS auth command injection module
|
2022-08-16 09:44:05 -04:00 |
|
|
Jack Heysel
|
06f0fffc20
|
Land #16856, Webmin package updates RCE module
This module exploits an arbitrary command injection
in Webmin versions prior to 1.997.
|
2022-08-09 16:13:19 -04:00 |
|
|
Spencer McIntyre
|
0e148d6ba4
|
Update and rename the module
|
2022-08-09 13:32:09 -04:00 |
|
|
Christophe De La Fuente
|
38b845f247
|
Fix from code review
- Documentation typos
- Adding ARM64 support
|
2022-08-09 15:09:25 +02:00 |
|
|
Ron Bowes
|
be25e1fc77
|
Add documentation
|
2022-08-05 13:55:05 -05:00 |
|
|
space-r7
|
0334beada2
|
Land #16758, add ManageEngine ADAudit Plus exploit
|
2022-08-05 12:19:42 -05:00 |
|
|
space-r7
|
4202502992
|
make some prints vprints, add steps
|
2022-08-05 11:34:46 -05:00 |
|
|
Ron Bowes
|
7c21c57564
|
Merge branch 'master' into manageengine-adauditplus-cve-2022-28219
|
2022-08-04 14:07:50 -07:00 |
|
|
Christophe De La Fuente
|
9c6a198453
|
Land #16796, Path traversal vulnerability in RARLAB UnRAR < 6.12 with Zimbra RCE module
|
2022-08-04 19:44:57 +02:00 |
|
|
bwatters
|
163d4d5b11
|
Land #16854, Add CVE-2022-31660 VMware Workspace ONE Access LPE
Merge branch 'land-16854' into upstream-master
|
2022-08-03 16:50:12 -05:00 |
|
|
Christophe De La Fuente
|
449a7b71d5
|
Add module exploit and docs for the Webmin package updates RCE
|
2022-08-03 12:01:41 +02:00 |
|
|
Jack Heysel
|
82182f7815
|
Land #16852, Zoho PMP XML-RPC Unauth RCE module
Add in exploit module for CVE-2022-35405 aka Zoho
Password Manager Pro XML-RPC Unauthenticated RCE
|
2022-08-02 17:18:28 -04:00 |
|
|
Spencer McIntyre
|
8ed4293e9c
|
Add module docs for CVE-2022-31660
|
2022-08-02 16:42:08 -04:00 |
|