 Martin Sutovsky
|
34f3957aea
|
Land #19772, adding module for CraftCMS FTP template exploit
|
2025-01-23 20:21:17 +01:00 |
|
|
Martin Sutovsky
|
159b2bb6dc
|
Land #19805, new module for LibreNMS Authenticated RCE
|
2025-01-20 15:33:37 +01:00 |
|
|
Takah1ro
|
54bd55b186
|
Update vulnerable version
|
2025-01-18 10:18:10 +09:00 |
|
|
Takah1ro
|
ca304ae5c4
|
Avoid to split payload
|
2025-01-17 21:21:48 +09:00 |
|
|
Takah1ro
|
4e53c967c2
|
Update message
|
2025-01-16 12:59:18 +09:00 |
|
|
Brendan
|
9bd8590b99
|
Merge pull request #19793 from sfewer-r7/CVE-2024-55956
Cleo LexiCom, VLTrader, and Harmony Unauthenticated Remote Code Execution (CVE-2024-55956)
|
2025-01-15 15:04:45 -06:00 |
|
|
Jack Heysel
|
2254a1f213
|
Responded to comments
|
2025-01-15 09:22:44 -08:00 |
|
|
msutovsky-r7
|
0630187870
|
Land #19798, fixing link and code cleanup
Fix nsfw link in mssql_clr_payload, and rubocop the module
|
2025-01-15 16:41:34 +01:00 |
|
|
Takah1ro
|
10be7a80cf
|
Update document
|
2025-01-13 10:56:16 +09:00 |
|
|
Takah1ro
|
93bb7fa6c5
|
Add LibreNMS Authenticated RCE (CVE-2024-51092)
|
2025-01-12 12:28:07 +09:00 |
|
|
Jack Heysel
|
18be9fc101
|
Added suggestions from jvoisin
|
2025-01-10 11:45:40 -08:00 |
|
|
Chocapikk
|
b7d922f471
|
Fix and enhance CraftCMS FTP exploit module
|
2025-01-10 18:16:11 +01:00 |
|
|
jheysel-r7
|
58c359293d
|
Merge pull request #19796 from h00die/move_acronis
move acronis_cyber_protect_unauth_rce_cve_2022_3405 inside the http folder
|
2025-01-09 18:33:22 -08:00 |
|
|
h00die
|
ce9f1b9101
|
fix nsfw link
|
2025-01-09 21:23:38 -05:00 |
|
|
jheysel-r7
|
5374c7b362
|
Merge pull request #19676 from h00die/needrestart
Ubuntu needrestart LPE (CVE-2024-48990)
|
2025-01-09 17:02:54 -08:00 |
|
|
jheysel-r7
|
a6ba7bf9c2
|
Merge pull request #19734 from h00die/runc_arch
arch linux compatibility for runc priv esc
|
2025-01-09 16:45:02 -08:00 |
|
|
h00die
|
1a839c0b33
|
move acronis_cyber_protect_unauth_rce_cve_2022_3405 inside the http folder
|
2025-01-09 16:30:51 -05:00 |
|
|
h00die
|
437c9fc99e
|
review of ubuntu_needrestart_lpe
|
2025-01-09 16:23:09 -05:00 |
|
|
Diego Ledda
|
5cfaf4871d
|
Land #19738, Pandora FMS auth RCE (CVE-2024-11320)
Land #19738, Pandora FMS auth RCE (CVE-2024-11320)
|
2025-01-09 17:16:58 +01:00 |
|
|
Diego Ledda
|
b2e28efa48
|
Land #19781, Add Selenium file read auxiliary module
Land #19781, Add Selenium file read auxiliary module
|
2025-01-08 13:54:04 +01:00 |
|
|
Diego Ledda
|
fea171357a
|
Land #19771, Add Selenium Firefox RCE module (CVE-2022-28108)
Land #19771, Add Selenium Firefox RCE module (CVE-2022-28108)
|
2025-01-08 13:44:33 +01:00 |
|
|
jheysel-r7
|
0ff2835bb7
|
Merge pull request #19770 from h00die-gr3y/netis-unauth-rce
Netis Router Exploit Chain Reactor [CVE-2024-48455, CVE-2024-48456 and CVE-2024-48457]
|
2025-01-07 17:24:37 -08:00 |
|
|
jheysel-r7
|
f475b9d4d6
|
Merge pull request #19749 from zeroSteiner/fix/mod/ntp_nak_to_the_future
Fix ntp_nak_to_the_future
|
2025-01-07 09:01:15 -08:00 |
|
|
Spencer McIntyre
|
e5e06572fb
|
Add documentation to the module with testing steps
|
2025-01-07 09:14:08 -05:00 |
|
|
Diego Ledda
|
7ead96a740
|
Land #19769, Add Selenium Chrome RCE module (CVE-2022-28108)
Land #19769, Add Selenium Chrome RCE module (CVE-2022-28108)
|
2025-01-07 11:10:37 +01:00 |
|
|
H00die.Gr3y
|
9a6d074463
|
Apply suggestions from code review
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-01-07 09:25:41 +01:00 |
|
|
jheysel-r7
|
817557c589
|
Merge pull request #19614 from vultza/onedev-file-read
OneDev Unauthenticated Arbitrary File Read (CVE-2024-45309)
|
2025-01-06 18:57:35 -08:00 |
|
|
sfewer-r7
|
3ff685b70e
|
fix three typos
|
2025-01-06 09:42:21 +00:00 |
|
|
sfewer-r7
|
fe7334fae2
|
add in CVE-2024-55956 exploit
|
2025-01-06 09:26:44 +00:00 |
|
|
Takah1ro
|
11c1b726cf
|
Improve
* add timeout option
* print session info
* apply suggestions (#19769)
|
2025-01-04 11:54:31 +09:00 |
|
|
Takah1ro
|
710ae1198a
|
Apply suggestions from #19769
|
2025-01-04 10:12:57 +09:00 |
|
|
Takah1ro
|
3b947cf1c5
|
Update vulnerable version
|
2025-01-02 09:57:00 +09:00 |
|
|
Takah1ro
|
9d664a36f0
|
Add Selenium file read auxiliary module
|
2025-01-01 11:55:35 +09:00 |
|
|
jheysel-r7
|
e70b6c777f
|
Merge pull request #19663 from sfewer-r7/CVE-2024-0012
Exploit module for PAN-OS management interface unauth RCE (CVE-2024-0012 + CVE-2024-9474)
|
2024-12-30 10:29:10 -08:00 |
|
|
jheysel-r7
|
f436f44d83
|
Merge pull request #19698 from h00die/obsidian
obsidian community plugin persistence module
|
2024-12-30 09:06:58 -08:00 |
|
|
Takah1ro
|
38d8d35dc5
|
Update doc
|
2024-12-30 13:50:13 +09:00 |
|
|
Takah1ro
|
bbc282e90c
|
Improve check
|
2024-12-30 13:36:15 +09:00 |
|
|
Takah1ro
|
6e0c945a42
|
Improve check for version 4
|
2024-12-30 13:00:25 +09:00 |
|
|
h00die-gr3y
|
862f2ee6c6
|
Added documentation and some small module updates
|
2024-12-29 20:05:05 +00:00 |
|
|
Takah1ro
|
68ae0d40ea
|
Add timeout option
|
2024-12-29 13:02:32 +09:00 |
|
|
Takah1ro
|
e4111cdc97
|
Update to use FETCH_DELETE
|
2024-12-29 12:33:39 +09:00 |
|
|
Takah1ro
|
86bd1c2938
|
Minor improve
* enable fetch_delete
* avoid using single quotes
* update doc
|
2024-12-29 12:19:19 +09:00 |
|
|
Takah1ro
|
af432a3b72
|
Improve stability
|
2024-12-29 12:00:09 +09:00 |
|
|
Takah1ro
|
90d9bb769d
|
Update vulnerable version
|
2024-12-28 15:53:31 +09:00 |
|
|
Takah1ro
|
7ecc1cb87b
|
Update vulnerable version
|
2024-12-28 14:39:24 +09:00 |
|
|
Takah1ro
|
340d4bcd58
|
Add selenium firefox rce module
|
2024-12-28 12:27:18 +09:00 |
|
|
Takah1ro
|
e3d68d4164
|
Update author and fix version detection
|
2024-12-28 11:18:41 +09:00 |
|
|
vultza
|
814cdb354f
|
fix typo
|
2024-12-27 14:45:05 +00:00 |
|
|
Takah1ro
|
64b1832567
|
Update not to use selenium-webdriver
|
2024-12-27 13:00:20 +09:00 |
|
|
Takah1ro
|
82ebdf1f9d
|
Improve docs
|
2024-12-26 23:54:47 +09:00 |
|