 sfewer-r7
|
6d9d9a70d4
|
add some comments to clarify what CVE-2025-49706 is
|
2025-07-25 11:01:22 +01:00 |
|
|
sfewer-r7
|
a81710486e
|
add in a reference to the new technical analysis from the origional finder
|
2025-07-24 12:15:24 +01:00 |
|
|
Stephen Fewer
|
899e275155
|
Make the double quotes optional, reports of Server 2016 not using these, but Server 2019 is. Thanks @w0rk3r for the bug report and fix.
Co-authored-by: Jonhnathan <26856693+w0rk3r@users.noreply.github.com>
|
2025-07-23 23:51:42 +01:00 |
|
|
sfewer-r7
|
b8cf458706
|
the check routine was getting the /_layouts/15/error.aspx page, this will not be accessable unless Forms Based Authentication (FBA) is enabled on the site. A better choice is /_layouts/15/start.aspx as this is accessible regardless of FBA being enabled. Thanks @alexey-at-work-bc for identifying this and sugesting a fix.
|
2025-07-23 23:03:43 +01:00 |
|
|
sfewer-r7
|
7838e06f4f
|
reimplement the gadget chain using the Metasploit Msf::Util::DotNetDeserialization routines
|
2025-07-23 17:36:56 +01:00 |
|
|
sfewer-r7
|
d2a1f7bae9
|
add in exploit for CVE-2025-53770 and CVE-2025-53771, Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution (aka ToolShell)
|
2025-07-23 12:40:14 +01:00 |
|
|
jenkins-metasploit
|
0a1cbf131d
|
automatic module_metadata_base.json update
|
2025-07-22 15:27:53 +00:00 |
|
|
jheysel-r7
|
05f2012ccc
|
Merge pull request #20338 from Chocapikk/xorcom
Add auxiliary and exploit modules for Xorcom CompletePBX 5.2.35 CVEs (2025-2292, 30004, 30005)
|
2025-07-22 08:19:36 -07:00 |
|
|
Valentin Lobstein
|
56f6a65e21
|
Update lib/msf/core/exploit/remote/http/xorcom_complete_pbx.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-19 04:04:25 +02:00 |
|
|
Valentin Lobstein
|
4a1f9e541e
|
Update lib/msf/core/exploit/remote/http/xorcom_complete_pbx.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-19 04:04:14 +02:00 |
|
|
jenkins-metasploit
|
6dcefab6ab
|
automatic module_metadata_base.json update
|
2025-07-18 23:45:22 +00:00 |
|
|
jheysel-r7
|
00c8c773a3
|
Merge pull request #20375 from Chocapikk/wp_photo_gallery_sqli
WP Photo Gallery by 10Web Unauthenticated SQLi (CVE-2022-0169)
|
2025-07-18 16:37:14 -07:00 |
|
|
Metasploit
|
b6a04c2b97
|
Bump version of framework to 6.4.76
|
2025-07-17 08:28:35 -05:00 |
|
|
adfoster-r7
|
8fe815da6f
|
Merge pull request #20394 from cgranleese-r7/update-docs-to-reflect-new-default-prompt
Updates docs to reflect new default prompt
6.4.75
|
2025-07-17 12:53:02 +01:00 |
|
|
cgranleese-r7
|
adff497bd2
|
Updates msf5 as well
|
2025-07-17 11:51:29 +01:00 |
|
|
jenkins-metasploit
|
2601c0720b
|
automatic module_metadata_base.json update
|
2025-07-17 10:06:42 +00:00 |
|
|
Diego Ledda
|
18d61d3763
|
Merge pull request #20356 from msutovsky-r7/exploit/pandorafms_netflow_rce
Add module for authenticated PandoraFMS command injection (CVE-2025-5306)
|
2025-07-17 11:58:54 +02:00 |
|
|
adfoster-r7
|
cf134986df
|
Merge pull request #20395 from sjanusz-r7/bump-rex-socket
Bump rex-socket to 0.1.63
|
2025-07-17 10:47:18 +01:00 |
|
|
Diego Ledda
|
ca9535e39a
|
Update pandora_fms_auth_netflow_rce.md
|
2025-07-17 11:29:07 +02:00 |
|
|
sjanusz-r7
|
99c9e8c8e7
|
Fix acceptance tests prompt matching
|
2025-07-17 10:18:25 +01:00 |
|
|
sjanusz-r7
|
3bb3429d86
|
Bump rex-socket to 0.1.63
|
2025-07-17 10:10:12 +01:00 |
|
|
cgranleese-r7
|
469f102596
|
Updates docs to reflect new default prompt
|
2025-07-17 09:53:40 +01:00 |
|
|
cgranleese-r7
|
f16de58f5a
|
Merge pull request #20390 from adfoster-r7/pin-stringio-version
Pin StringIO version
|
2025-07-17 09:33:44 +01:00 |
|
|
cgranleese-r7
|
73470fece3
|
Merge pull request #20392 from zeroSteiner/fix/issue/20355
Remove the version from the default prompt
|
2025-07-17 09:17:49 +01:00 |
|
|
cgranleese-r7
|
170cb151bb
|
Merge pull request #20391 from zeroSteiner/fix/issue/20366
Add a missing keyword for option validation
|
2025-07-17 09:01:45 +01:00 |
|
|
Chocapikk
|
7431958e5c
|
Update url reference
|
2025-07-16 22:59:48 +02:00 |
|
|
Chocapikk
|
4e70dfe70d
|
Rename mixin
|
2025-07-16 22:40:27 +02:00 |
|
|
Chocapikk
|
1863eddcd4
|
chore: add magic encoding comment to Ruby files
|
2025-07-16 22:32:20 +02:00 |
|
|
Chocapikk
|
1fb6d488a8
|
Rename file
|
2025-07-16 22:30:28 +02:00 |
|
|
Chocapikk
|
efa49d2aa2
|
refactor(wp_photo_gallery): drop unused action + guard against LocalJumpError in SQLi helper
|
2025-07-16 22:04:13 +02:00 |
|
|
Chocapikk
|
7ddae3ec3f
|
refactor(xorcom): rename helper to completepbx? + pass creds to completepbx_login
|
2025-07-16 21:48:34 +02:00 |
|
|
Spencer McIntyre
|
28108517a7
|
Remove the version from the default prompt
Fixes #20355
|
2025-07-16 15:40:54 -04:00 |
|
|
Spencer McIntyre
|
be10b827b8
|
Add a missing keyword for option validation
|
2025-07-16 15:34:14 -04:00 |
|
|
Chocapikk
|
b06903810c
|
feat(xorcom): add shared CompletePBX mixin, refactor modules, update docs
|
2025-07-16 21:25:17 +02:00 |
|
|
Valentin Lobstein
|
136cc0ab3d
|
Update modules/auxiliary/scanner/http/xorcom_completepbx_diagnostics_file_read.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-16 19:33:44 +02:00 |
|
|
Valentin Lobstein
|
131ce6cb3f
|
Update modules/auxiliary/scanner/http/xorcom_completepbx_diagnostics_file_read.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-16 19:33:31 +02:00 |
|
|
Valentin Lobstein
|
daf6cb3c84
|
Update modules/exploits/linux/http/xorcom_completepbx_scheduler.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-16 19:33:23 +02:00 |
|
|
Valentin Lobstein
|
65b7415bcc
|
Update modules/exploits/linux/http/xorcom_completepbx_scheduler.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-16 19:33:15 +02:00 |
|
|
Valentin Lobstein
|
82d558bf2a
|
Update modules/exploits/linux/http/xorcom_completepbx_scheduler.rb
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-16 19:33:04 +02:00 |
|
|
Valentin Lobstein
|
eb81de6620
|
Update documentation/modules/auxiliary/scanner/http/xorcom_completepbx_diagnostics_file_read.md
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-16 19:32:52 +02:00 |
|
|
adfoster-r7
|
850b93445c
|
Pin StringIO version
|
2025-07-16 18:04:23 +01:00 |
|
|
adfoster-r7
|
8fdf0eacbc
|
Merge pull request #20389 from cdelafuente-r7/enh/gems_version_bump
Bump data_models gem to 6.0.10 and model gem to 5.0.4
|
2025-07-16 16:43:57 +01:00 |
|
|
Christophe De La Fuente
|
0f86dd7c5f
|
Bump data_models gem to 6.0.10 and model gem to 5.0.4
|
2025-07-16 17:14:48 +02:00 |
|
|
Martin Sutovsky
|
f773e3aef9
|
Updates docs
|
2025-07-16 12:25:28 +02:00 |
|
|
jenkins-metasploit
|
87122cbe94
|
automatic module_metadata_base.json update
|
2025-07-16 10:17:45 +00:00 |
|
|
Simon Janusz
|
166479f6bc
|
Merge pull request #20388 from jheysel-r7/fix/regression/ad_cs_cert_template
Fix the UPDATE Action in the ad_cs_cert_template Module
|
2025-07-16 11:09:27 +01:00 |
|
|
Jack Heysel
|
e328a8f8c4
|
Fix update action in ad_cs_cert_template
|
2025-07-15 17:20:36 -07:00 |
|
|
jenkins-metasploit
|
04c7945d4a
|
automatic module_metadata_base.json update
|
2025-07-15 17:48:05 +00:00 |
|
|
jheysel-r7
|
914f874e12
|
Merge pull request #20216 from sjanusz-r7/add-graphql-aux-scanner-module
Add GraphQL Auxiliary Scanner module
|
2025-07-15 10:39:44 -07:00 |
|
|
jenkins-metasploit
|
60a6658f0e
|
automatic module_metadata_base.json update
|
2025-07-11 15:26:36 +00:00 |
|