fabb5d1f78
Land #19422 , pgAdmin 8.4 RCE / CVE-2024-3116
2024-08-28 18:54:53 +01:00
aaf95f9134
Apply suggestions from code review
2024-08-28 18:46:08 +01:00
d0d4c3083a
Fixing error message
2024-08-28 18:33:31 +02:00
2b7cf76fc8
Fixing wrong SideEffects and Reliability values
2024-08-28 18:20:20 +02:00
251c1c0c1e
Adding check for host operating system
2024-08-28 18:17:36 +02:00
6326cac8d4
Fixing nil safe issue
2024-08-26 23:23:43 +02:00
7e9f52dd0b
Github release
2024-08-26 23:02:53 +02:00
d1ce041fd0
Inital commit and Rubocop fixes
2024-08-26 19:27:20 +02:00
35da4662ed
Land #19351 , DIAEnergie SQL Injection
2024-08-21 09:44:15 -04:00
362b2427dc
Error handling and code cleanup
...
Error handling and code cleanup
2024-08-19 22:47:19 +01:00
39d615e8d2
Added TARGETURI option
...
Added TARGETURI option
2024-08-13 20:29:30 +01:00
8e4503061a
Removed debugging code
...
Removed debugging code
2024-08-07 15:23:15 +01:00
8732d7cd58
LG Simple Editor Command Injection (CVE-2023-40504) Module
...
Exploit Module and Documentation for the LG Simple Editor Command Injection (CVE-2023-40504)
2024-08-07 05:16:25 +01:00
35cbf63890
Minor fixes
...
Specified a default payload
Randomized date and time
Wrapped cleanup in an ensure block
2024-08-02 16:58:24 +01:00
80961b0fef
Merge branch 'rapid7:master' into my_awesome_branch
2024-08-01 22:57:36 -05:00
48c69b99fb
Land #19344 , FortiClient EMS FCTID SQLi to RCE fix for 7.2.x
2024-07-31 09:43:19 -04:00
341142dc23
DIAEnergie SQL Injection (CVE-2024-4548) Module
2024-07-30 13:28:10 -04:00
2989c9ed1b
Land #19337 , MySCADA MyPRO Command Injection module
2024-07-26 10:07:19 -04:00
14945679ba
Updated email generation part.
2024-07-25 23:54:27 -04:00
2ffe027eab
Responded to comments
2024-07-25 09:14:27 -07:00
90ed8ae797
Revised the code to make it cleaner
2024-07-24 22:40:26 -04:00
c05aebe248
Formatting
2024-07-24 11:16:26 -07:00
e9cbb9287c
Add support for 7.2.x
2024-07-24 10:45:38 -07:00
62a3f73e70
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
c1bf8df690
Updated the module to take advantage of the check method
2024-07-23 23:52:05 -04:00
d7e50cb126
mySCADA MyPRO <= v8.28.0 Command Injection (CVE-2023-28384) exploit module
2024-07-22 16:49:40 -04:00
e6f2352248
WIP
2024-07-19 14:43:13 -07:00
636c72965c
Land #19084 , Add CVE-2022-1373 and CVE-2022-2334 exploit chain
...
Merge branch 'land-19084' into upstream-master
2024-07-19 12:22:25 -05:00
2f238fcd24
Code review
2024-06-21 10:13:08 +02:00
ecb628eaab
Add module and documentation
2024-06-20 15:30:54 +02:00
08575d0895
Land #19176 , Add missing Arch parameter
...
Adding Arch parameter to dnn_cookie_deserialization_rce module
2024-06-18 17:07:08 -04:00
c1826cd2f3
Land #18829 , Allow multiple HttpServers in module
...
Adding multiple HttpServer services in a module is sometimes complex
since they share the same methods. This usually this causes issues where
on_request_uri needs to be overridden to handle requests coming from
each service. This updates the cmdstager and the Java HTTP ClassLoader
mixins, since these are commonly used in the same module. This also
updates the manageengine_servicedesk_plus_saml_rce_cve_2022_47966 module
to make use of these new changes
2024-06-18 09:51:38 -07:00
29307b1321
Appease msftidy
2024-06-18 09:23:41 -04:00
dc70aa0896
Land #19247 , PHP CGI Arg injection RCE
...
XAMPP installs running on Windows system configured to use Japanese or
Chinese (simplified or traditional) locales are vulnerable to a PHP CGI
argument injection vulnerability. This exploit module returns a session
running in the context of the Administrator user
2024-06-17 11:27:38 -07:00
8fc6e20cec
Update other modules to use java_class_loader_start_service and cmdstager_start_service
2024-06-14 12:57:42 +02:00
fb44c7e6ff
fix typo in module description
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-06-13 15:10:14 +01:00
18fe758416
Finish up and document the deserialization RCE
2024-06-12 08:58:37 -04:00
cac5863e75
Update the exploit module to use the scanner
2024-06-12 08:58:37 -04:00
0e1e6c4fb2
Exploit improvements
...
* Delete the report the exploit creates
* Report credentials that are used to authenticate
* Use the specified username and password if provided
2024-06-12 08:58:37 -04:00
c120a30ba4
Enumerate and select a random category
2024-06-12 08:58:37 -04:00
b8d3cd6708
Initial module for CVE-2024-4358
2024-06-12 08:58:37 -04:00
ab0079c0ee
Update modules/exploits/windows/http/rejetto_hfs_rce_cve_2024_23692.rb
...
improve documentation guidance to mention upgrading to a newer supported version (as 2.x is no longer supported)
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-06-11 16:26:04 +01:00
bf9b3f1d2a
add documentation
2024-06-10 17:41:55 +01:00
c6de00968f
typo
2024-06-10 17:17:39 +01:00
3a19a54c59
remove dead link
2024-06-10 17:17:28 +01:00
998724f683
first commit for cve-2024-4577
2024-06-07 15:44:05 +01:00
e325d23526
first commit for cve-2024-4577
2024-06-07 15:43:40 +01:00
c8208704be
add in exploit module for CVE-2024-23692
2024-06-06 18:04:14 +01:00
1281f4726f
Land #19209 , update fileformat modules to show the default template datastore values
2024-05-31 15:12:48 +01:00
847b29178a
change nil guards to default values, nil or blank guards for certain datastore options
2024-05-29 09:34:58 -05:00
adfoster-r7