 jheysel-r7
|
e841a45db2
|
Merge pull request #19985 from sjanusz-r7/add-pfsense-login-scanner
Add pfSense Login Scanner module
|
2025-03-28 11:12:43 -07:00 |
|
|
jheysel-r7
|
5505bb5ef1
|
Merge pull request #19947 from machang-r7/machang-r7-module-cve-2025-27218
Create sitecore_xp_cve_2025_27218.rb
|
2025-03-28 07:40:28 -07:00 |
|
|
sjanusz-r7
|
b5ef4cdd6f
|
Add pfSense login scanner docs
|
2025-03-28 11:35:56 +00:00 |
|
|
Diego Ledda
|
985cea3278
|
Land #19980, Add CMSMadeSimple (CMSMS) File Manager Auth RCE (CVE-2023-36969)
Land #19980, Add CMSMadeSimple (CMSMS) File Manager Auth RCE (CVE-2023-36969)
|
2025-03-28 12:24:30 +01:00 |
|
|
jheysel-r7
|
08e227faca
|
Merge pull request #19934 from sfewer-r7/bugfix-cisco-iosxe-rce
Improve exploit/linux/misc/cisco_ios_xe_rce (CVE-2023-20198 + CVE-2023-20273)
|
2025-03-27 16:51:16 -07:00 |
|
|
Jack Heysel
|
fa0c29837e
|
Update author, rubocop, msftidy_docs
|
2025-03-27 09:36:10 -07:00 |
|
|
Jack Heysel
|
74cc1d313c
|
Add documentation
|
2025-03-27 09:28:44 -07:00 |
|
|
tastyrce
|
8479350b3e
|
Update documentation
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com>
|
2025-03-28 03:17:47 +11:00 |
|
|
tastyrce
|
8423d6ff87
|
Update removal of default page while installation
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-03-27 22:11:21 +11:00 |
|
|
tastyrce
|
9bdff3e803
|
Add extra dependencies during installation
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-03-27 22:10:32 +11:00 |
|
|
jheysel-r7
|
26869588db
|
Merge pull request #19987 from zeroSteiner/fix/mod/ivanti-login
Update the Ivanti and Sonicwall Bruteforce modules
|
2025-03-26 15:06:10 -07:00 |
|
|
Spencer McIntyre
|
30d071e098
|
Make the same changes for sonicwall
|
2025-03-26 17:25:13 -04:00 |
|
|
Spencer McIntyre
|
7476ea9006
|
Brute force modules should be named service_login
|
2025-03-26 16:14:16 -04:00 |
|
|
Diego Ledda
|
9c42bdd103
|
Land #19974, GLPI Inventory Plugin Unauth Blind Boolean SQLi (CVE-2025-24799)
Land #19974, GLPI Inventory Plugin Unauth Blind Boolean SQLi (CVE-2025-24799)
|
2025-03-25 19:45:54 +01:00 |
|
|
Spencer McIntyre
|
bf1f919d9f
|
Merge pull request #19957 from msutovsky-r7/auxmodule-eramba-update
Auxmodule eramba update
|
2025-03-25 13:54:24 -04:00 |
|
|
tastyrce
|
162e73a62e
|
add module documentation
|
2025-03-22 04:57:38 -04:00 |
|
|
Jack Heysel
|
cde6034614
|
Account for all vulnerable version DB schemas
|
2025-03-20 13:09:17 -07:00 |
|
|
Martin Sutovsky
|
d922976ea4
|
Adding more clear installation steps
|
2025-03-20 19:54:57 +01:00 |
|
|
Martin Sutovsky
|
df027f3fdd
|
Update documentation, adding more precise check, removing unnecessary characters
|
2025-03-20 15:18:55 +01:00 |
|
|
bwatters-r7
|
ec67435de9
|
Rebase and squash for CVE-2024-30085
|
2025-03-20 09:03:28 -05:00 |
|
|
Jack Heysel
|
e3d9561be1
|
GLPI Inventory Plugin Unauthenticated Blind Boolean SQLi (CVE-2025-24799)
|
2025-03-19 12:50:40 -07:00 |
|
|
Christophe De La Fuente
|
d4fd890fed
|
Add the smb_to_ldap relay module and documentation
|
2025-03-14 15:28:39 +01:00 |
|
|
msutovsky-r7
|
9961bfbc58
|
Land #19950, module for InvoiceShelf unauthenticated PHP deserialization
InvoiceShelf unauthenticated PHP deserialization vulnerability [CVE-2024-55556]
|
2025-03-14 10:21:56 +01:00 |
|
|
Martin Sutovsky
|
9886f78575
|
Upgrade Eramba RCE module
|
2025-03-13 12:34:50 +01:00 |
|
|
h00die-gr3y
|
e341398871
|
small update on module and documentation
|
2025-03-10 19:35:37 +00:00 |
|
|
H00die.Gr3y
|
44bdc5b44f
|
Update documentation/modules/exploit/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.md
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-03-10 19:29:12 +01:00 |
|
|
h00die-gr3y
|
281b728000
|
initial module and documentation
|
2025-03-07 17:34:22 +00:00 |
|
|
sfewer-r7
|
efb0d5da4c
|
fix typo, C1000v should be CSR1000v. Be consistant with IOS XE and not IOS-XE.
|
2025-03-04 09:09:32 +00:00 |
|
|
Martin Sutovsky
|
8d7bbdd84f
|
Sonicwall module
|
2025-03-04 08:20:22 +01:00 |
|
|
jheysel-r7
|
b1d0eedc26
|
Merge pull request #19712 from smashery/naa_creds
NAA creds from SCCM
|
2025-03-03 13:50:31 -08:00 |
|
|
sfewer-r7
|
edd36a8182
|
update the docs for exploit/linux/misc/cisco_ios_xe_rce after retesting the changes
|
2025-03-03 20:39:53 +00:00 |
|
|
sfewer-r7
|
45dfa5fda9
|
update docs for auxiliary/admin/http/cisco_ios_xe_cli_exec_cve_2023_20198 to show it working on C1000v and C8000v targets.
|
2025-03-03 20:23:55 +00:00 |
|
|
sfewer-r7
|
e71a851e3f
|
mention that the C8000v series appliance version 17.6.5 was observed to not be vulnerable to CVE-2023-20273. Inspecting the Lua code shows this appliance has additional command injection filtering in place (see pexec_setsid in /usr/binos/openresty/nginx/conf/pexec.lua) which prevents the injection from working
|
2025-03-03 20:22:46 +00:00 |
|
|
msutovsky-r7
|
3c4d0aae2f
|
Land #19899, D-Tale remote code execution module
Add D-Tale RCE module (CVE-2024-3408, CVE-2025-0655)
|
2025-03-03 13:04:45 +01:00 |
|
|
Takah1ro
|
47351e4959
|
Use FETCH_DELETE as default
|
2025-03-03 20:52:55 +09:00 |
|
|
Takah1ro
|
65d2b6380b
|
Update vulnerable version
|
2025-03-02 12:14:25 +09:00 |
|
|
Takah1ro
|
77c3ce52e0
|
Improve:
* Support the prior to 3.13.0 versions
* CVE-2024-3408 bypass for authentication
|
2025-03-01 11:58:28 +09:00 |
|
|
Jack Heysel
|
d2dd9a6d8f
|
Add docs for ESC4,13 and 15 vulnerable template configuration
|
2025-02-27 22:54:24 -08:00 |
|
|
Diego Ledda
|
8dd032e529
|
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin
|
2025-02-25 13:14:18 +01:00 |
|
|
Diego Ledda
|
1c27e2a958
|
docs: update docs for rubocop
|
2025-02-25 12:15:52 +01:00 |
|
|
Diego Ledda
|
f046e70b76
|
Land #19894, SimpleHelp Path Traversal CVE-2024-57727
Land #19894, SimpleHelp Path Traversal CVE-2024-57727
|
2025-02-25 12:00:34 +01:00 |
|
|
msutovsky-r7
|
576ff2fb5c
|
Land #19878, MyScada MyPro Manager Credential Harverster Module
mySCADA MyPRO Manager Credential Harvester (CVE-2025-24865 & CVE-2025-22896) Module
|
2025-02-25 11:35:59 +01:00 |
|
|
Diego Ledda
|
33d0c0c9fd
|
Land #19881, NetAlertX File Read (CVE-2024-48766)
Land #19881, NetAlertX File Read (CVE-2024-48766)
|
2025-02-25 10:42:52 +01:00 |
|
|
Jack Heysel
|
e4ee651c9b
|
Updated docs, fixed Notes
|
2025-02-24 10:26:01 -08:00 |
|
|
Martin Sutovsky
|
fae3d8390a
|
Calling check method fix & Additional documentation
|
2025-02-24 15:52:00 +01:00 |
|
|
H00die.Gr3y
|
2d55f5c16e
|
Update documentation/modules/exploit/linux/http/invoiceninja_unauth_rce_cve_2024_55555.md
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-02-24 15:51:06 +01:00 |
|
|
h00die-gr3y
|
41e690445e
|
simplified some code sections
|
2025-02-23 12:59:52 +00:00 |
|
|
h00die-gr3y
|
ece33ee8ec
|
added documentation
|
2025-02-23 09:54:26 +00:00 |
|
|
Takah1ro
|
4d4b88c94e
|
Add D-Tale unauth RCE module (CVE-2025-0655)
|
2025-02-23 09:33:42 +09:00 |
|
|
Jack Heysel
|
fc25e177fc
|
SimpleHelp Path Traversal CVE-2024-57727
|
2025-02-21 08:15:46 -08:00 |
|