 RAMELLA Sébastien
|
483282b05e
|
fix. spelling typo
|
2020-12-16 09:01:33 +04:00 |
|
|
RAMELLA Sébastien
|
e3178c48c4
|
add. fortios path traversal (cve-2018-13379)
|
2020-12-15 19:09:37 +04:00 |
|
|
Tim W
|
a30cdfc892
|
Fix #14254, Add CVE-2020-1054, win32k DrawIconEx OOB Write LPE
|
2020-12-14 14:54:54 +00:00 |
|
|
Christophe De La Fuente
|
98d6364248
|
Land #14482, Use CVE-2020-5752 path traversal bypass for CVE-2019-3999
|
2020-12-14 15:10:09 +01:00 |
|
|
Shelby Pace
|
83943adf8b
|
Land #14466, add Aerospike UDF rce
|
2020-12-10 11:07:56 -06:00 |
|
|
Brendan Coles
|
a9e231ad0a
|
Use CVE-2020-5752 path traversal bypass for CVE-2019-3999
|
2020-12-10 12:14:47 +00:00 |
|
|
Shelby Pace
|
d337d832b8
|
Land #14422, add GitLab file read/rce
|
2020-12-09 11:34:14 -06:00 |
|
|
Tim W
|
fb9b1c5de4
|
Land #14409, add weak services technique to the service permissions LPE
|
2020-12-09 17:16:53 +00:00 |
|
|
Spencer McIntyre
|
59339f3337
|
Land #14418, Wordpress plugin Email Subscribers & Newsletters sqli (CVE-2019-20361)
|
2020-12-09 10:29:32 -05:00 |
|
|
Spencer McIntyre
|
90a99ae7c3
|
Land #14423, Expand wordpress_scanner to look for themes & plugins
|
2020-12-09 09:12:28 -05:00 |
|
|
Spencer McIntyre
|
6d7c6c054a
|
Update the module docs with more details for the registry technique
|
2020-12-08 17:39:34 -05:00 |
|
|
Shelby Pace
|
8e1cab0131
|
Land #14339, add flexdotnetcms rce
|
2020-12-07 14:28:01 -06:00 |
|
|
alanfoster
|
835059f00c
|
[CVE-2020-10977] Gitlab arbitrary file read to RCE
|
2020-12-07 01:26:54 +00:00 |
|
|
Brendan Coles
|
6cdb484d7c
|
Add Aerospike Database UDF Lua Code Execution exploit
|
2020-12-05 14:15:22 +00:00 |
|
|
h00die
|
b21fccebaa
|
updates from review
|
2020-12-04 21:50:31 -05:00 |
|
|
Grant Willcox
|
5961bf700d
|
Land #14314, Pulse Secure Connect Client Credentials Gatherer
|
2020-12-04 10:04:43 -06:00 |
|
|
bwatters
|
5d7014bf39
|
Land #14298, Windows post-exploitation gather module - Memory dumping via Avast AvDump utility
Merge branch 'land-14298' into upstream-master
|
2020-12-02 08:30:38 -06:00 |
|
|
dwelch-r7
|
3824f3923f
|
Land #14394, Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion
Apache Tomcat - AJP 'Ghostcat' File Read/Inclusion
|
2020-11-30 05:15:29 +00:00 |
|
|
Quentin Kaiser
|
985aa59e2b
|
Update documentation with scenarios of each branch (9.0.x, 9.1.x) running on Windows 10 with different privileges (unprivileged user, system) where applicable.
|
2020-11-27 17:15:19 +01:00 |
|
|
Tim W
|
87eba681e0
|
Land #14365, Update TP-Link AC1750 Pwn2Own 2019 module
|
2020-11-26 19:55:00 +00:00 |
|
|
Pedro Ribeiro
|
a99ce581dd
|
Update TP-Link AC1750 Pwn2Own 2019 module
|
2020-11-26 12:56:02 +00:00 |
|
|
Graeme Robinson
|
8e534ffc22
|
Split scenarios to separate blocks for each target
As suggested in https://github.com/rapid7/metasploit-framework/pull/14216#discussion_r512868894.
|
2020-11-26 13:46:01 +01:00 |
|
|
Graeme Robinson
|
536e1a1a02
|
Fix typo in documentation
|
2020-11-26 13:46:01 +01:00 |
|
|
Graeme Robinson
|
c280bb67e7
|
Wrap at 140 characters to appease msftidy_docs.rb.
|
2020-11-26 13:46:01 +01:00 |
|
|
Graeme Robinson
|
4dc564e62b
|
Added documentation for module.
|
2020-11-26 13:46:01 +01:00 |
|
|
Spencer McIntyre
|
95665e916c
|
Land #14416, wordpress plugin 'simple file list' rce
|
2020-11-25 09:58:26 -05:00 |
|
|
Spencer McIntyre
|
94c157bc95
|
Tweak the documentation and module output just a little for clarity
|
2020-11-25 09:58:07 -05:00 |
|
|
cgranleese-r7
|
31426576e0
|
Land #14264, Add exploit/multi/http/kong_gateway_admin_api_rce
|
2020-11-25 11:09:02 +00:00 |
|
|
Grant Willcox
|
efdc7f062e
|
Land #14241, OpenMediaVault 5.5.11 Authenticated Remote Code Execution
|
2020-11-24 13:42:53 -06:00 |
|
|
Grant Willcox
|
bd00ce9177
|
Add in fixes from review
|
2020-11-24 12:08:51 -06:00 |
|
|
h00die
|
ff3ddffcb5
|
fix docs
|
2020-11-22 09:04:23 -05:00 |
|
|
h00die
|
98d00f47f3
|
tidy
|
2020-11-22 07:48:54 -05:00 |
|
|
Jared Stroud
|
c5222bead9
|
adding blog as further references
|
2020-11-21 22:24:35 -05:00 |
|
|
h00die
|
f4c67d713b
|
adjust version number
|
2020-11-21 10:39:03 -05:00 |
|
|
h00die
|
149e30d81a
|
wordpress email and subscription newsletter sqli
|
2020-11-21 10:30:15 -05:00 |
|
|
h00die
|
92c92f1573
|
simple file list rce
|
2020-11-21 08:51:07 -05:00 |
|
|
Spencer McIntyre
|
1031b12c57
|
Land #14206, Rockwell FactoryTalk CVE-2020-12027 RCE
|
2020-11-20 08:49:39 -05:00 |
|
|
Spencer McIntyre
|
cbc5899edf
|
Add module docs for the Service Permissions LPE module
|
2020-11-19 14:17:20 -05:00 |
|
|
Pedro Ribeiro
|
e7196256d4
|
Update rockwell_factorytalk_rce.md
|
2020-11-19 17:53:25 +07:00 |
|
|
William Vu
|
d3f16c7061
|
Land #14361, COOKIE for sharepoint_ssi_viewstate
|
2020-11-18 15:55:19 -06:00 |
|
|
William Vu
|
dcd8ec1d70
|
Lock JDK to 8u131 to be safe
|
2020-11-18 15:17:12 -06:00 |
|
|
William Vu
|
20a90557bf
|
Update module doc
|
2020-11-18 15:08:12 -06:00 |
|
|
William Vu
|
bcdf5aa586
|
Clarify Windows target setup further
|
2020-11-18 14:25:10 -06:00 |
|
|
William Vu
|
4d610b5500
|
Clarify using the generic installer for examples
|
2020-11-18 14:06:13 -06:00 |
|
|
William Vu
|
83beae731f
|
Add WebLogic Administration Console Handle RCE
CVE-2020-14882
CVE-2020-14883
|
2020-11-18 10:56:02 -06:00 |
|
|
William Vu
|
f73a88a39c
|
Land #14396, hadoop_unauth_exec clarification
|
2020-11-16 12:44:13 -06:00 |
|
|
Tod Beardsley
|
0feff932f2
|
Change docs to reflect the truth of the "vuln"
|
2020-11-16 11:38:00 -06:00 |
|
|
SunCSR Team
|
2d99a07b12
|
Update and rename documentation/modules/exploit/windows/http/tomcat_ghostcat.md to documentation/modules/auxiliary/admin/http/tomcat_ghostcat.md
|
2020-11-16 21:03:00 +07:00 |
|
|
SunCSR Team
|
1bd6b75394
|
Create tomcat_ghostcat.md
|
2020-11-16 15:08:14 +07:00 |
|
|
SunCSR Team
|
c7f6188c70
|
Delete tomcat_ghostcat.md
|
2020-11-16 15:06:28 +07:00 |
|