77a93e452f
Land #18507 , Exploit & Auxiliary modules for CVE-2023-20198 and CVE-2023-20273 (Cisco IOS XE)
...
Merge branch 'land-18507' into upstream-master
2023-11-08 09:05:40 -06:00
25ef7d1272
add the RCE exploit
2023-11-06 17:12:40 +00:00
1cde6198b5
Land #18481 , MagnusBilling unauthenticated RCE [CVE-2023-30258]
2023-11-03 20:42:27 +01:00
d26742a266
Add check code annotations, update AJP link
2023-11-02 08:53:56 -04:00
9c67b92a4d
Rename the other TMUI RCE module
2023-11-01 16:55:42 -04:00
7b53592b4f
Add module docs
2023-11-01 16:55:41 -04:00
ad6e4618df
third release module with minor text changes
2023-10-31 09:29:13 +00:00
bfff35eb63
second release module with php fix
2023-10-31 09:05:51 +00:00
5c89df694c
added documentation
2023-10-24 18:34:29 +00:00
97f9edb5f7
review
2023-10-23 06:35:23 -04:00
00b534dbed
review
2023-10-17 13:17:10 -04:00
b94d278003
vmware aria ssh keys exploit
2023-10-16 14:47:04 -04:00
ba82b59ec2
vmware aria ssh keys exploit
2023-10-16 13:43:15 -04:00
f394b4a8ed
vmware aria ssh keys exploit
2023-10-16 13:42:58 -04:00
263eaf7d95
vmware aria ssh keys exploit
2023-10-16 13:42:27 -04:00
b3b1595ef4
vmware aria ssh keys exploit
2023-10-16 13:06:17 -04:00
05dd2e1473
Land #18351 , Apache Superset RCE (CVE-2023-37941)
2023-10-12 17:10:10 -04:00
7ffc1ca491
undo some spelling fixes when upstream has those issues
2023-10-11 06:30:11 -04:00
557a15a115
spelling fixes on docs
2023-10-10 14:46:18 -04:00
fe9afc94c7
Update documentation/modules/exploit/linux/http/kibana_upgrade_assistant_telemetry_rce.md
2023-10-06 16:45:52 -04:00
931a67d290
kibana telemetry rce rewritten to use fetch payloads
2023-10-06 09:55:10 -04:00
5e0538a239
review comments round 1
2023-10-05 13:12:33 -04:00
88eb44be64
kibana telemetry rce
2023-10-02 16:53:20 -04:00
1e69086d24
Land #18365 , TOTOLINK X5000R Wireless GigaBit Router Unauthenticed RCE [CVE-2023-30013]
2023-09-21 11:27:19 +02:00
6e11f4353b
Updates addressing cdelafuente-r7 comments
2023-09-20 22:14:48 +00:00
525c957af2
Land #18333 , Lexmark Device Embedded Web Server RCE (CVE-2023-26068)
2023-09-19 10:32:59 +02:00
f9cdfef304
Move module and documentation from multi/http to linux/http
...
* Update documentation scenarios for Docker on Debian 10 and Kali Linux 6.4
* Slightly modify the documentation scenario for Docker on Windows 10
2023-09-17 22:42:26 +08:00
e34ed10eca
superset rce more stable
2023-09-15 16:29:05 -04:00
46832abd49
Land #18358 , Add a Thrift RPC client
...
This PR adds a Thrift RPC client and updates
two modules to make use of the new addition.
2023-09-14 19:01:13 -04:00
21cab0eccd
updated documentation
2023-09-14 18:38:34 +00:00
784f3118f0
third release module and documentation
2023-09-14 17:59:59 +00:00
619a46d450
working hashes for apache superset rce
2023-09-14 13:21:01 -04:00
686d704b37
superset rce wip
2023-09-13 15:26:29 -04:00
e82bff37e1
Land #18330 , Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035)
2023-09-13 10:15:59 +01:00
b83a49e573
Thanks to Spencer improved execute_command method
2023-09-12 15:14:10 -04:00
fbf95ecd92
Add and use a Thrift client object
2023-09-11 14:37:38 -04:00
f1aea836f3
Land #18273 , Add VMware vRealize Log Insight RCE
...
Add VMware vRealize Log Insight unauthenticated RCE exploit
2023-09-08 17:17:23 -04:00
21dde19511
Make some final tweaks
...
Change strings to reference `VMware` using the proper case. Don't
include CmdStager (because it's unnecessary). Set PrependFork to fix
shell payloads. Move CamelCase options to advanced.
2023-09-08 16:55:42 -04:00
57f3b8a352
Land #18350 , Add opentsdb_key_cmd_injection exploit module and docs
2023-09-08 16:50:46 +01:00
18103b032d
Add docs for opentsdb_key_cmd_injection
2023-09-08 16:08:18 +01:00
7302394ffa
Land #18316 , Kibana Timelion Prototype Pollution RCE (CVE-2019-7609)
2023-09-08 11:50:47 +01:00
2cda3fab50
Update options
2023-09-07 19:50:10 +02:00
15908b9721
Merge branch 'ivanti-sentry-misc-log-service' of github.com:jheysel-r7/metasploit-framework into ivanti-sentry-misc-log-service
2023-09-07 12:40:26 -04:00
fd6a2fa64a
Updated docs
2023-09-07 12:19:11 -04:00
7944df2b87
Apply suggestions from code review
...
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com >
2023-09-07 11:46:24 -04:00
482fdefb2c
Land #18313 , SolarView Compact unauth RCE module
...
This PR adds a SolarView Compact unauth RCE module.
2023-09-05 17:49:28 -04:00
03ccb3cce0
Apply grammatical suggestions from code review
2023-09-05 17:06:01 -04:00
7b8debd58f
Tidy up, last minute rubocop
2023-08-31 02:17:35 -04:00
9779b1eeae
Lexmark Device Embedded Web Server RCE (CVE-2023-26068)
2023-08-30 20:30:14 -04:00
8217745a85
Land #18257 , Apache nifi h2 rce (CVE-2023-34468)
2023-08-30 13:37:37 +02:00
bwatters