 Jack Heysel
|
482fdefb2c
|
Land #18313, SolarView Compact unauth RCE module
This PR adds a SolarView Compact unauth RCE module.
|
2023-09-05 17:49:28 -04:00 |
|
|
jheysel-r7
|
03ccb3cce0
|
Apply grammatical suggestions from code review
|
2023-09-05 17:06:01 -04:00 |
|
|
cgranleese-r7
|
55d0f29e54
|
Land #18281, Detection module for CVE-2023-21554 - QueueJumper
|
2023-09-05 14:03:30 +01:00 |
|
|
bka-dev
|
a027daaa0d
|
corrected another minor typo
|
2023-09-05 14:28:47 +02:00 |
|
|
bka-dev
|
d3698a8b46
|
added known vulnerable systems
|
2023-09-05 13:58:36 +02:00 |
|
|
xaitax
|
d5f355d8de
|
WinRAR 6.22 (CVE-2023-38831)
|
2023-09-04 18:56:22 +02:00 |
|
|
h00die
|
fb9f3bd13f
|
review comments
|
2023-09-01 20:14:41 -04:00 |
|
|
Jeffrey Martin
|
6b5fff6c33
|
Land #18125, LDAP Capture Simple Authentication
|
2023-09-01 11:08:19 -05:00 |
|
|
Ege Balcı
|
a552132fc3
|
Update documentation/modules/exploit/windows/misc/ivanti_avalanche_mdm_bof.md
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-09-01 01:53:17 +00:00 |
|
|
Ege Balcı
|
48cb2db70b
|
Update scenario
|
2023-09-01 03:48:08 +02:00 |
|
|
Jack Heysel
|
7b8debd58f
|
Tidy up, last minute rubocop
|
2023-08-31 02:17:35 -04:00 |
|
|
Jack Heysel
|
9779b1eeae
|
Lexmark Device Embedded Web Server RCE (CVE-2023-26068)
|
2023-08-30 20:30:14 -04:00 |
|
|
jheysel-r7
|
ef55c4f2c1
|
Update documentation/modules/exploit/windows/local/cve_2023_28252_clfs_driver.md
|
2023-08-30 12:11:37 -04:00 |
|
|
Christophe De La Fuente
|
8217745a85
|
Land #18257, Apache nifi h2 rce (CVE-2023-34468)
|
2023-08-30 13:37:37 +02:00 |
|
|
Jack Heysel
|
fe8cb3398f
|
Another docs update
|
2023-08-29 17:33:51 -04:00 |
|
|
Jack Heysel
|
47f621106c
|
Updated docs
|
2023-08-29 17:11:33 -04:00 |
|
|
Jack Heysel
|
a3a7454f74
|
Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
|
2023-08-29 15:24:04 -04:00 |
|
|
Ege Balcı
|
1d9c7fde77
|
Add LG Simple Editor Unauthenticated RCE (CVE-2023-40498) Exploit
|
2023-08-29 17:58:43 +02:00 |
|
|
Christophe De La Fuente
|
7fa2586e34
|
Land #18247, Netgear NMS RCE CVE-2023-38096/8
|
2023-08-28 11:23:08 +02:00 |
|
|
h00die-gr3y
|
77a1bbef79
|
Second release module and documentation
|
2023-08-28 07:49:40 +00:00 |
|
|
Ege Balcı
|
eaeb2024d3
|
Merge branch 'master' into vmware_vrli_rce
Merge for ThriftMessageType
|
2023-08-26 22:42:25 +02:00 |
|
|
Ege Balcı
|
8ba2343164
|
Update documentation/modules/exploit/windows/misc/ivanti_avalanche_mdm_bof.md
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com>
|
2023-08-26 16:26:39 +00:00 |
|
|
Ege Balcı
|
b10d677308
|
Doc update.
|
2023-08-25 21:18:48 +02:00 |
|
|
h00die
|
772978964e
|
elastic memory disclosure
|
2023-08-25 13:28:17 -04:00 |
|
|
Ege Balcı
|
a971867ca6
|
Add Ivanti Avalanche MDM Buffer Overflow Exploit (CVE-2023-32560)
|
2023-08-25 19:26:06 +02:00 |
|
|
cudalac
|
926bdd03c4
|
roundcube arbitrary file read
|
2023-08-25 08:59:53 -04:00 |
|
|
Spencer McIntyre
|
b830587a60
|
Land #18310, elasticsearch enum module enhancements
elasticsearch enum module enhancements
|
2023-08-24 18:31:48 -04:00 |
|
|
h00die
|
67768567ac
|
review comments
|
2023-08-24 17:24:20 -04:00 |
|
|
h00die
|
43401dd872
|
review comments
|
2023-08-24 16:23:41 -04:00 |
|
|
h00die
|
5382eb22d1
|
kibana exploit
|
2023-08-24 16:08:08 -04:00 |
|
|
Ege Balcı
|
0fe335aff2
|
Update documentation/modules/exploit/windows/http/netgear_nms_rce.md
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-24 16:10:30 +00:00 |
|
|
Christophe De La Fuente
|
a037d16b66
|
Land #18233, Chamilo unauthenticed RCE [CVE-2023-34960]
|
2023-08-24 11:49:40 +02:00 |
|
|
h00die
|
3879fbed95
|
elasticsearch enum module enhancements
|
2023-08-23 18:09:28 -04:00 |
|
|
h00die
|
79a4cfa9cb
|
elasticsearch enum module enhancements
|
2023-08-23 18:07:52 -04:00 |
|
|
h00die
|
8796d5e2d4
|
elasticsearch enum module enhancements
|
2023-08-23 18:06:41 -04:00 |
|
|
adfoster-r7
|
e760e781df
|
Land #18307, Fix exploit/linux typos in Subrion RCE docs
|
2023-08-23 20:37:46 +01:00 |
|
|
h00die
|
36327e1ff4
|
elasticsearch enum module enhancements
|
2023-08-23 15:19:06 -04:00 |
|
|
RadioLogic
|
48acd804da
|
Added PasswordHashType advanced option
|
2023-08-23 13:37:08 -04:00 |
|
|
Ismail Dawoodjee
|
c216c5a184
|
Fix lines in SmarterMail RCE docs for linting with msftidy_docs
|
2023-08-23 23:07:07 +08:00 |
|
|
Ismail Dawoodjee
|
94b7e77d11
|
Fix exploit/linux typos in Subrion RCE docs
|
2023-08-23 22:44:49 +08:00 |
|
|
h00die-gr3y
|
f64b67968f
|
Final minor updates
|
2023-08-23 11:38:07 +00:00 |
|
|
H00die.Gr3y
|
1db284dcaa
|
Apply suggestions from code review
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2023-08-22 18:46:25 +02:00 |
|
|
Ron Bowes
|
ce50cfa11a
|
Add module for SonicWall vulns, which includes cve-2023-34124
|
2023-08-21 08:53:07 -07:00 |
|
|
Ismail Dawoodjee
|
e4cf796056
|
Update documentation with scenarios from latest module code
|
2023-08-21 10:25:06 +08:00 |
|
|
Ismail Dawoodjee
|
b8a2a405c8
|
Merge branch 'rapid7:master' into apache_airflow_dag_rce
|
2023-08-19 08:31:18 +06:30 |
|
|
Jack Heysel
|
f3c8ca94ff
|
Land #18297, fix broken mysql_authbypass_hashdump
This PR fixes the broken mysql_authbypass_hashdump module.
|
2023-08-18 17:08:31 -04:00 |
|
|
Jack Heysel
|
5fdc9924d5
|
Land #18123, add exploit for Jorani unauth RCE
This PR adds a module that chains together a log poisoning LFI,
redirection bypass and a path traversal vulnerability to obtain unauth RCE.
|
2023-08-18 16:44:42 -04:00 |
|
|
jheysel-r7
|
4ddd789f51
|
Apply suggestions from code review
|
2023-08-18 15:33:59 -04:00 |
|
|
adfoster-r7
|
4a76371b01
|
Fix broken mysql_authbypass_hashdump module
|
2023-08-17 23:41:43 +01:00 |
|
|
cgranleese-r7
|
89f8deb672
|
Land #18253, Add CVE-2023-34634, Greenshot Fileformat exploit
|
2023-08-17 15:30:02 +01:00 |
|