7b8debd58f
Tidy up, last minute rubocop
2023-08-31 02:17:35 -04:00
9779b1eeae
Lexmark Device Embedded Web Server RCE (CVE-2023-26068)
2023-08-30 20:30:14 -04:00
7fa2586e34
Land #18247 , Netgear NMS RCE CVE-2023-38096/8
2023-08-28 11:23:08 +02:00
b10d677308
Doc update.
2023-08-25 21:18:48 +02:00
b830587a60
Land #18310 , elasticsearch enum module enhancements
...
elasticsearch enum module enhancements
2023-08-24 18:31:48 -04:00
67768567ac
review comments
2023-08-24 17:24:20 -04:00
43401dd872
review comments
2023-08-24 16:23:41 -04:00
0fe335aff2
Update documentation/modules/exploit/windows/http/netgear_nms_rce.md
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2023-08-24 16:10:30 +00:00
a037d16b66
Land #18233 , Chamilo unauthenticed RCE [CVE-2023-34960]
2023-08-24 11:49:40 +02:00
3879fbed95
elasticsearch enum module enhancements
2023-08-23 18:09:28 -04:00
79a4cfa9cb
elasticsearch enum module enhancements
2023-08-23 18:07:52 -04:00
8796d5e2d4
elasticsearch enum module enhancements
2023-08-23 18:06:41 -04:00
e760e781df
Land #18307 , Fix exploit/linux typos in Subrion RCE docs
2023-08-23 20:37:46 +01:00
36327e1ff4
elasticsearch enum module enhancements
2023-08-23 15:19:06 -04:00
c216c5a184
Fix lines in SmarterMail RCE docs for linting with msftidy_docs
2023-08-23 23:07:07 +08:00
94b7e77d11
Fix exploit/linux typos in Subrion RCE docs
2023-08-23 22:44:49 +08:00
f64b67968f
Final minor updates
2023-08-23 11:38:07 +00:00
1db284dcaa
Apply suggestions from code review
...
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com >
2023-08-22 18:46:25 +02:00
f3c8ca94ff
Land #18297 , fix broken mysql_authbypass_hashdump
...
This PR fixes the broken mysql_authbypass_hashdump module.
2023-08-18 17:08:31 -04:00
5fdc9924d5
Land #18123 , add exploit for Jorani unauth RCE
...
This PR adds a module that chains together a log poisoning LFI,
redirection bypass and a path traversal vulnerability to obtain unauth RCE.
2023-08-18 16:44:42 -04:00
4ddd789f51
Apply suggestions from code review
2023-08-18 15:33:59 -04:00
4a76371b01
Fix broken mysql_authbypass_hashdump module
2023-08-17 23:41:43 +01:00
89f8deb672
Land #18253 , Add CVE-2023-34634, Greenshot Fileformat exploit
2023-08-17 15:30:02 +01:00
8717e66b14
Land #18280 , Add Maltrail Unauth RCE Module
...
This PR adds a module for an unauthenticated RCE vulnerability
in Maltrail, a malicious traffic detection system. This vuln
does not have a CVE associated with it.
2023-08-16 17:29:05 -04:00
a91f928d62
Update documentation/modules/exploit/unix/http/maltrail_rce.md
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2023-08-16 18:45:37 +00:00
900e418796
Land #18226 , H2 Web Interface RCE
...
This PR adds a module to exploit an RCE feature in
the H2 databases Web Interface.
2023-08-15 16:23:09 -04:00
53bd5bfb0a
Fix a typo in the docs
2023-08-15 10:23:28 -04:00
6cf136ec3a
Land #18263 , Add RaspAP Unauth Command Injection
...
This PR adds an unauthenticated command injection
module for the RaspAP webgui application.
2023-08-14 23:25:23 -04:00
99e78a4c00
Update documentaion file
2023-08-14 21:01:10 -04:00
4b7d98df07
Add Maltrail Unauthenticated RCE exploit
2023-08-10 23:02:20 +02:00
da9200819d
Update scenarios for new targets
2023-08-10 00:55:52 +02:00
214c788ce7
Land #18232 , metabase setup token rce (cve-2023-38646)
2023-08-09 09:44:53 +01:00
3be876b9dc
Update pam_username_bof.md
2023-08-09 00:24:53 -05:00
9516592eb6
metabase setup token rce
2023-08-08 17:16:56 -04:00
ec5317a789
h2 doc addition
2023-08-08 17:15:22 -04:00
97daf47269
h2 web interface shell
2023-08-08 17:15:22 -04:00
41f0c30855
Add RaspAP Unauthenticated Command Injection (CVE-2022-39986) Exploit
2023-08-04 21:22:07 +02:00
e8456a6625
Add documentation and fix null filename catch
2023-08-03 18:30:20 -05:00
4a7836055e
Land #18211 , Subrion CMS v4.2.1 RCE
2023-08-03 19:03:44 +02:00
00006fffae
Land #18240 , Citrix RCE - CVE-2023-3519
2023-08-03 18:55:48 +02:00
67e1c57b7c
Fix some buffer encoding issues
2023-08-03 12:47:14 -04:00
31da1f890d
Merge branch 'rapid7:master' into subrion_cms_file_upload_rce
2023-08-03 18:29:21 +06:30
49c5b1df64
Land #18203 , Fix libssh_auth_bypass crash on newer versions of Ruby
2023-08-03 12:51:36 +01:00
329920eeb2
Add Netgear NMS RCE (CVE-2023-38096/8) exploit
2023-08-02 18:03:57 +02:00
19dcc2d674
Move module and documentation from linux/http to multi/http
2023-08-02 10:10:27 -04:00
692c625752
Add module docs
2023-08-01 12:28:13 -04:00
11fb61c3b6
Merge branch 'rapid7:master' into subrion_cms_file_upload_rce
2023-08-01 14:24:37 +03:00
b979217227
Land #18239 , Add version numbers to apache nifi rce module
2023-07-31 22:28:52 +01:00
b2869a5550
version numbers for apache nifi rce
2023-07-31 17:16:26 -04:00
5d9a65eeb0
version numbers for apache nifi rce
2023-07-31 16:14:57 -04:00
Jack Heysel