4137d2df21
Merge branch 'rapid7:master' into apache_airflow_dag_rce
2023-08-17 10:19:13 +06:30
8717e66b14
Land #18280 , Add Maltrail Unauth RCE Module
...
This PR adds a module for an unauthenticated RCE vulnerability
in Maltrail, a malicious traffic detection system. This vuln
does not have a CVE associated with it.
2023-08-16 17:29:05 -04:00
a91f928d62
Update documentation/modules/exploit/unix/http/maltrail_rce.md
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-16 18:45:37 +00:00
a2a4489ce4
Merge branch 'rapid7:master' into apache_airflow_dag_rce
2023-08-16 13:50:13 +06:30
b5a21f66b5
add docs
2023-08-15 20:30:54 -04:00
900e418796
Land #18226 , H2 Web Interface RCE
...
This PR adds a module to exploit an RCE feature in
the H2 databases Web Interface.
2023-08-15 16:23:09 -04:00
53bd5bfb0a
Fix a typo in the docs
2023-08-15 10:23:28 -04:00
bdaaef8d60
Merge branch 'rapid7:master' into apache_airflow_dag_rce
2023-08-15 12:24:06 +06:30
6cf136ec3a
Land #18263 , Add RaspAP Unauth Command Injection
...
This PR adds an unauthenticated command injection
module for the RaspAP webgui application.
2023-08-14 23:25:23 -04:00
99e78a4c00
Update documentaion file
2023-08-14 21:01:10 -04:00
6ff0c956b3
Merge branch 'master' into useradd
2023-08-14 16:13:54 -04:00
a47ac264ae
corrected typo
2023-08-13 22:56:57 +02:00
b623684284
added module documentation
2023-08-13 22:35:14 +02:00
4953dad2fc
Update scenario code block to use "msf" instead of "rb" - 3rd scenario
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2023-08-12 09:29:29 +06:30
94521e2dc3
Update scenario code block to use "msf" instead of "rb" - 2nd scenario
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2023-08-12 09:29:08 +06:30
ac2d2588d9
Update scenario code block to use "msf" instead of "rb"
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2023-08-12 09:28:19 +06:30
54fa11c822
Added new UseraddMethod argument
2023-08-11 17:58:57 -04:00
54b0abb318
Apache Airflow 1.10.10 - Example DAG Remote Code Execution (CVE-2020-11978 + CVE-2020-13927)
2023-08-11 21:43:16 +06:30
904e8ba89f
roundcube arbitrary file read
2023-08-10 22:45:01 -04:00
4b7d98df07
Add Maltrail Unauthenticated RCE exploit
2023-08-10 23:02:20 +02:00
da9200819d
Update scenarios for new targets
2023-08-10 00:55:52 +02:00
214c788ce7
Land #18232 , metabase setup token rce (cve-2023-38646)
2023-08-09 09:44:53 +01:00
3be876b9dc
Update pam_username_bof.md
2023-08-09 00:24:53 -05:00
bba8681be4
update doc
2023-08-08 17:44:35 -04:00
7b024f21bd
apache nifi h2 rce
2023-08-08 17:44:35 -04:00
9516592eb6
metabase setup token rce
2023-08-08 17:16:56 -04:00
ec5317a789
h2 doc addition
2023-08-08 17:15:22 -04:00
97daf47269
h2 web interface shell
2023-08-08 17:15:22 -04:00
d1f9f540c6
Add VMware vRealize Log Insight RCE exploit
2023-08-08 20:32:38 +02:00
41f0c30855
Add RaspAP Unauthenticated Command Injection (CVE-2022-39986) Exploit
2023-08-04 21:22:07 +02:00
bcfc892195
General code clean up
2023-08-04 14:27:14 -04:00
e8456a6625
Add documentation and fix null filename catch
2023-08-03 18:30:20 -05:00
4a7836055e
Land #18211 , Subrion CMS v4.2.1 RCE
2023-08-03 19:03:44 +02:00
00006fffae
Land #18240 , Citrix RCE - CVE-2023-3519
2023-08-03 18:55:48 +02:00
67e1c57b7c
Fix some buffer encoding issues
2023-08-03 12:47:14 -04:00
31da1f890d
Merge branch 'rapid7:master' into subrion_cms_file_upload_rce
2023-08-03 18:29:21 +06:30
49c5b1df64
Land #18203 , Fix libssh_auth_bypass crash on newer versions of Ruby
2023-08-03 12:51:36 +01:00
29c2361a9c
Module clean up, docs, metadata, rubocop
2023-08-02 18:53:20 -04:00
329920eeb2
Add Netgear NMS RCE (CVE-2023-38096/8) exploit
2023-08-02 18:03:57 +02:00
19dcc2d674
Move module and documentation from linux/http to multi/http
2023-08-02 10:10:27 -04:00
042136cf57
python flask signer module and docs
2023-08-01 18:27:25 -04:00
692c625752
Add module docs
2023-08-01 12:28:13 -04:00
79d3cc81cb
changes-to-support-nmap-script
2023-08-01 07:50:01 -04:00
11fb61c3b6
Merge branch 'rapid7:master' into subrion_cms_file_upload_rce
2023-08-01 14:24:37 +03:00
b979217227
Land #18239 , Add version numbers to apache nifi rce module
2023-07-31 22:28:52 +01:00
b2869a5550
version numbers for apache nifi rce
2023-07-31 17:16:26 -04:00
5d9a65eeb0
version numbers for apache nifi rce
2023-07-31 16:14:57 -04:00
a7402fb5f1
Land #18205 , Add rudder-server SQLI RCE (CVE-2023-30625) exploit
2023-07-31 15:15:07 +02:00
154387f99a
Add additional installation instructions and scenarios
2023-07-30 07:28:16 -04:00
19ef0cc4f9
Added documentation and fixed a typo in the module description
2023-07-28 21:30:24 +00:00
Ismail Dawoodjee