 William Vu
|
f338ad165a
|
Land #12058, cisco_dcnm_upload_2019 exploit
|
2019-08-30 14:08:41 -05:00 |
|
|
Brent Cook
|
3216ce31b5
|
Land #12205, prefer https always
|
2019-08-15 16:48:23 -07:00 |
|
|
Jeffrey Martin
|
65430010eb
|
Revert "Land #12158, needs_cleanup for on_new_session"
This reverts commit 52a135843e.
|
2019-08-02 15:39:19 -05:00 |
|
|
William Vu
|
52a135843e
|
Land #12158, needs_cleanup for on_new_session
|
2019-08-02 13:03:00 -07:00 |
|
|
Wei Chen
|
eb17db7be3
|
Land #12010, Add exploit module for wp-database-backup Wordpress plugin
|
2019-07-23 10:23:23 -07:00 |
|
|
William Vu
|
26eefd3c27
|
Land #12074, missing split fix for #12072
|
2019-07-10 09:22:32 -07:00 |
|
|
William Vu
|
55026ba379
|
Land #12072, cmd_psh_payload arch string fixes
|
2019-07-10 08:40:43 -07:00 |
|
|
asoto-r7
|
83b8f3b946
|
Land #12013, Make SRVHOST the callback address in confluence_widget_connector
|
2019-06-25 14:08:45 -07:00 |
|
|
William Vu
|
7c29adfd2b
|
Land #12008, struts2_content_type_ognl 302 fix
|
2019-06-24 22:50:56 -07:00 |
|
|
William Vu
|
ea8b7976bc
|
Land #11996, ZDI reference for rails_double_tap
|
2019-06-22 00:37:13 -07:00 |
|
|
William Vu
|
775027699e
|
Land #11900, normalize_uri style fix
|
2019-05-29 22:18:02 -07:00 |
|
|
Jacob Robles
|
b458521bc1
|
Land #11864, Add RCE vector to Jenkins ACL bypass
|
2019-05-23 04:43:07 -07:00 |
|
|
bwatters-r7
|
76ee5556b8
|
Land #11833, moodle_cmd_exec nil check
Merge branch 'land-11833' into upstream-master
|
2019-05-20 11:10:19 -07:00 |
|
|
William Vu
|
32d0c9c697
|
Land #11859, struts2_rest_xstream style fix
|
2019-05-20 10:42:49 -07:00 |
|
|
Wei Chen
|
8c5fef6081
|
Land #11828, Add CVE-2017-18357: Shopware Object Instantiation
|
2019-05-17 16:25:07 -07:00 |
|
|
Shelby Pace
|
c517a43683
|
Land #11802, add GetSimple CMS RCE module
|
2019-05-16 09:33:27 -07:00 |
|
|
Shelby Pace
|
07ee5721be
|
Land #11779, add Rails Doubletap Dev mode RCE
|
2019-05-01 06:38:41 -07:00 |
|
|
Wei Chen
|
a7f0c223cd
|
Land #11784, Fix NoMethodError in jira_plugin_upload exploit module
|
2019-04-29 09:02:34 -07:00 |
|
|
Shelby Pace
|
962902cbef
|
Land #11697, add Pimcore unserialize RCE
|
2019-04-29 06:55:48 -07:00 |
|
|
asoto-r7
|
dca368736c
|
Land #11717, exploit/multi/http/confluence_widget_connector
|
2019-04-18 10:17:00 -07:00 |
|
|
Shelby Pace
|
c648d2c9e6
|
Land #11657, add Horde form file upload
|
2019-04-09 11:50:36 -07:00 |
|
|
Shelby Pace
|
8f8f31dfd6
|
Land #11587, add Wordpress core RCE module
|
2019-04-04 13:25:48 -07:00 |
|
|
Brent Cook
|
a5568ea17a
|
Land #11579, Add support for splunk 7.2.4 to splunk_upload_app_exec
|
2019-03-29 14:24:48 -07:00 |
|
|
William Vu
|
b196d08339
|
Land #11635, Authors check for msftidy
|
2019-03-29 08:51:00 -07:00 |
|
|
Wei Chen
|
4af8881c48
|
Land #11592, Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE
|
2019-03-27 13:23:35 -07:00 |
|
|
William Vu
|
37135cd48e
|
Land #11606, jenkins_metaprogramming fixes
|
2019-03-21 09:23:45 -07:00 |
|
|
Jacob Robles
|
c4ac4eb5a7
|
Land #11466, Add Jenkins ACL bypass and metaprogramming RCE
|
2019-03-18 05:24:33 -07:00 |
|
|
Brent Cook
|
bacf6d07e0
|
Land #11483, update various modules to reflect current best practices
Merge remote-tracking branch 'upstream/pr/11483' into upstream-master
|
2019-02-25 12:21:57 -08:00 |
|
|
Wei Chen
|
8df9fc9473
|
Land #11072, Add nuuo_nvrmini_upgrade_rce
|
2019-02-06 20:32:33 -08:00 |
|
|
Jeffrey Martin
|
649e528875
|
Land #11330, Fix HTTP/SMB mixin order to restore SSL option
|
2019-01-29 15:56:24 -08:00 |
|
|
William Vu
|
9c5725b25c
|
Land #11234, @bcoles revisionism
|
2019-01-11 18:17:42 -08:00 |
|
|
Jacob Robles
|
7711d2a700
|
Land #11206, add coldfusion ckeditor file upload
|
2019-01-10 05:30:05 -08:00 |
|
|
Wei Chen
|
76ec4781a3
|
Land #11127, Fix TARGETURI support in struts2_namespace_ognl
|
2018-12-15 07:35:20 -08:00 |
|
|
William Vu
|
d5309999db
|
Land #11107, double negative logic cleanup
|
2018-12-11 18:32:32 -08:00 |
|
|
Brent Cook
|
d8e0b17777
|
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
|
2018-11-19 08:50:32 -08:00 |
|
|
Jacob Robles
|
77da5b145e
|
Land #10828, git submodule url exec CVE-2018-17456
|
2018-11-14 10:51:16 -08:00 |
|
|
Shelby Pace
|
a90bea2551
|
Land #9631, add Jira plugin upload module
|
2018-11-13 13:36:30 -08:00 |
|
|
Jacob Robles
|
9b495913dc
|
Land #10873, Add notes to exploit modules
|
2018-11-02 12:13:37 -07:00 |
|
|
William Vu
|
f0096227e7
|
Land #10505, post-auth and default creds info
|
2018-10-24 17:09:28 -05:00 |
|
|
William Vu
|
34a1c48d7c
|
Land #10671, struts2_namespace_ognl updates
There are still some outstanding concerns, but I want to unblock this.
|
2018-10-12 09:16:44 -07:00 |
|
|
Jacob Robles
|
ff06f81f89
|
Land #10704, Navigate CMS Unauthenticated RCE
|
2018-10-04 04:48:35 -07:00 |
|
|
William Vu
|
b42af6cd96
|
Land #10728, metadata updates for @rastating
|
2018-10-02 11:46:30 -07:00 |
|
|
Brent Cook
|
1ee8734717
|
Land #10570, AKA Metadata Refactor
|
2018-09-17 20:31:07 -07:00 |
|
|
William Vu
|
2ee6a49a27
|
Land #10649, https://seclists.org references
|
2018-09-17 15:09:39 -07:00 |
|
|
Wei Chen
|
3e801c22fb
|
Land #10546, Add Apache Struts exploit: CVE-2018-11776
|
2018-09-07 12:56:02 -07:00 |
|
|
William Vu
|
4360b9e82e
|
Land #10566, struts2_rest_xstream normalize_uri
|
2018-08-30 14:00:53 -07:00 |
|
|
William Vu
|
add03ca7f8
|
Land #10543, struts2_rest_xstream targeting fixes
|
2018-08-28 16:55:02 -07:00 |
|
|
William Vu
|
98ee549705
|
Land #10538, PSH target for struts2_rest_xstream
|
2018-08-28 16:55:01 -07:00 |
|
|
Brent Cook
|
f22e6ec2bf
|
Land #10527, Fix msftdiy EDB link check, enable HTTPS
|
2018-08-27 08:53:05 -07:00 |
|
|
Jacob Robles
|
376a343472
|
Land #10487, add php5 session file target
|
2018-08-27 08:49:42 -07:00 |
|