ec5858c198
Added newly assigned CVE identifier
2023-04-27 09:54:48 -04:00
9c9eac28a7
Land #17874 , VMware Workspace One Access mr_me Hekate LPE
...
Merge branch 'land-17874' into upstream-master
2023-04-18 19:29:39 -05:00
bd286dd147
Added missing require builder statement
2023-04-18 18:10:46 -04:00
de18ed438a
Removed unnecessary require statement
2023-04-18 18:05:11 -04:00
a2c23d18ef
Added require builder statement
2023-04-18 16:01:14 -04:00
6ae00877ed
Land #17854 , VMware Workspace One Access mr_me Hekate RCE
...
Merge branch 'land-17854' into upstream-master
2023-04-18 09:49:41 -05:00
cda2e9610b
Land #17820 , optimising the nagiosxi modules
...
This PR refactors the authenticated nagiosxi modules and mixins..
2023-04-14 16:21:26 -04:00
ace2f42387
Changed ranking to Good
2023-04-14 15:15:40 -04:00
08788d3d82
Update logging with rc script info
2023-04-13 14:28:15 -04:00
aef2b8d314
Land #17804 , Fix incorrect module metadata CI and add validation automation
2023-04-13 15:11:46 +01:00
30cf40a4f1
VMware Workspace One Acces LPE
2023-04-12 15:36:17 -04:00
bc57131b73
Moving LPE to separate PR
2023-04-12 15:23:51 -04:00
a6b478e046
Land #17832 , Two modules for UniRPC - CVE-2023-28502 and CVE-2023-28503
2023-04-12 11:43:13 +02:00
7dc1faa689
Better error handling, and fix version detection
2023-04-11 09:34:24 -07:00
a2d2946007
Rubocop
2023-04-07 13:53:12 -04:00
18170babc2
Fix RCE payloads and add autorunscript
2023-04-07 13:35:16 -04:00
1a8671311d
Move the offsets into a field separate from 'targets'
2023-04-07 10:26:56 -07:00
02072418f0
Expand the comment about why we're checking for \xff (since it can't appear in the payload)
2023-04-07 10:10:13 -07:00
056b0a0e8b
LPE and doc updates
2023-04-07 10:41:10 -04:00
665ba4aece
Add additional target
2023-04-06 23:41:36 -04:00
9985538846
Update modules/exploits/linux/http/apache_couchdb_cmd_exec.rb
...
fix nil exception
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2023-04-07 09:55:00 +09:00
79d4021f31
Replaced janky XML building
2023-04-06 14:58:05 -04:00
544fb8ead6
Removed unecessary start_service proc
2023-04-06 14:26:02 -04:00
ce111f158a
Better error handling
2023-04-06 10:35:33 -07:00
d92fc41d29
Print out what command fails when attempting RCE
2023-04-06 13:31:17 -04:00
4984a3e2d3
Edit check method to raise errors instead of returning boolean
2023-04-06 13:25:20 -04:00
b7456e20d5
VMware Workspace One Access mr_me Hekate exploit
2023-04-05 23:10:34 -04:00
523931aa4c
Change target options for stack overflow exploit
2023-04-05 15:24:49 -07:00
c345fe78b8
Fix up error handling and other comments from the PR
2023-04-05 15:13:35 -07:00
c07ca83d6c
Fix the metadata and add an in-memory target
2023-04-05 14:07:12 -07:00
04a9ae7335
Add check methods
2023-04-05 10:55:28 -07:00
e004be00fe
Converted to Active Support
2023-04-05 16:53:01 +01:00
c3a7da54d5
reduces code duplication
2023-04-04 10:27:11 +01:00
40e6917b7f
tests passing
2023-04-04 10:24:09 +01:00
8b3d799104
fix check function which always prints vulnerable
2023-04-04 10:07:06 +09:00
812d3c7f35
PR Review Changes for optimizing the nagiosxi modules
2023-04-01 14:28:37 +05:30
7cb6213334
Fix an msftidy error
2023-03-29 09:56:04 -07:00
54ed192401
Add URLs
2023-03-29 08:10:52 -07:00
41fe44ef1a
Merge branch 'master' into unirpc-auth-bypass
2023-03-29 08:03:05 -07:00
6897be4b01
Add two Metasploit modules for UniData vulnerabilities
2023-03-29 08:01:50 -07:00
f626b55831
Land #17825 , Update zimbra_slapper_priv_esc.rb
2023-03-28 18:36:18 +01:00
fcb93fef58
Land #17806 , Optergy BMS Backdoor RCE module
...
This module exploits an undocumented backdoor vulnerability
(CVE-2019-7276) in the Optergy Proton and Enterprise Building
Management System (BMS) applications.
2023-03-28 10:27:35 -04:00
f3c12ba176
Land #17808 , Update broken secunia references
...
The Secunia links in the framework were dead. They have
now been restored using the wayback machine to grab
replacement links from the earliest date possible.
2023-03-27 17:20:13 -04:00
38f7cbdfc6
Update zimbra_slapper_priv_esc.rb
...
fixing reference to use an archive link as the sites down.
2023-03-27 16:46:07 +01:00
bcef7ee357
updated module and documentation with SUDO option
2023-03-26 18:31:25 +00:00
a67e894609
optimising the nagiosxi modules and also fixing the bug when autocheck is disabled
2023-03-26 15:58:45 +05:30
d04c8e1bce
Update broken secunia references
2023-03-23 10:43:57 +00:00
28459c286a
init commit module and documentation
2023-03-22 18:40:50 +00:00
1f2a889d0c
Land #17388 , Zyxel router RCE
...
This module adds a new exploit module for a buffer
overflow in roughly 45 different Zyxel router and VPN models.
2023-03-21 15:07:04 -04:00
f5d1aab01a
Changed send_request_cgi to raw
2023-03-21 14:26:05 -04:00
Jacob Baines