 jheysel-r7
|
5505bb5ef1
|
Merge pull request #19947 from machang-r7/machang-r7-module-cve-2025-27218
Create sitecore_xp_cve_2025_27218.rb
|
2025-03-28 07:40:28 -07:00 |
|
|
Diego Ledda
|
985cea3278
|
Land #19980, Add CMSMadeSimple (CMSMS) File Manager Auth RCE (CVE-2023-36969)
Land #19980, Add CMSMadeSimple (CMSMS) File Manager Auth RCE (CVE-2023-36969)
|
2025-03-28 12:24:30 +01:00 |
|
|
jheysel-r7
|
08e227faca
|
Merge pull request #19934 from sfewer-r7/bugfix-cisco-iosxe-rce
Improve exploit/linux/misc/cisco_ios_xe_rce (CVE-2023-20198 + CVE-2023-20273)
|
2025-03-27 16:51:16 -07:00 |
|
|
Jack Heysel
|
fa0c29837e
|
Update author, rubocop, msftidy_docs
|
2025-03-27 09:36:10 -07:00 |
|
|
Jack Heysel
|
74cc1d313c
|
Add documentation
|
2025-03-27 09:28:44 -07:00 |
|
|
tastyrce
|
8479350b3e
|
Update documentation
Co-authored-by: cgranleese-r7 <69522014+cgranleese-r7@users.noreply.github.com>
|
2025-03-28 03:17:47 +11:00 |
|
|
tastyrce
|
8423d6ff87
|
Update removal of default page while installation
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-03-27 22:11:21 +11:00 |
|
|
tastyrce
|
9bdff3e803
|
Add extra dependencies during installation
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-03-27 22:10:32 +11:00 |
|
|
Spencer McIntyre
|
bf1f919d9f
|
Merge pull request #19957 from msutovsky-r7/auxmodule-eramba-update
Auxmodule eramba update
|
2025-03-25 13:54:24 -04:00 |
|
|
tastyrce
|
162e73a62e
|
add module documentation
|
2025-03-22 04:57:38 -04:00 |
|
|
Martin Sutovsky
|
d922976ea4
|
Adding more clear installation steps
|
2025-03-20 19:54:57 +01:00 |
|
|
Martin Sutovsky
|
df027f3fdd
|
Update documentation, adding more precise check, removing unnecessary characters
|
2025-03-20 15:18:55 +01:00 |
|
|
bwatters-r7
|
ec67435de9
|
Rebase and squash for CVE-2024-30085
|
2025-03-20 09:03:28 -05:00 |
|
|
Martin Sutovsky
|
9886f78575
|
Upgrade Eramba RCE module
|
2025-03-13 12:34:50 +01:00 |
|
|
h00die-gr3y
|
e341398871
|
small update on module and documentation
|
2025-03-10 19:35:37 +00:00 |
|
|
H00die.Gr3y
|
44bdc5b44f
|
Update documentation/modules/exploit/linux/http/invoiceshelf_unauth_rce_cve_2024_55556.md
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-03-10 19:29:12 +01:00 |
|
|
h00die-gr3y
|
281b728000
|
initial module and documentation
|
2025-03-07 17:34:22 +00:00 |
|
|
sfewer-r7
|
efb0d5da4c
|
fix typo, C1000v should be CSR1000v. Be consistant with IOS XE and not IOS-XE.
|
2025-03-04 09:09:32 +00:00 |
|
|
sfewer-r7
|
edd36a8182
|
update the docs for exploit/linux/misc/cisco_ios_xe_rce after retesting the changes
|
2025-03-03 20:39:53 +00:00 |
|
|
sfewer-r7
|
e71a851e3f
|
mention that the C8000v series appliance version 17.6.5 was observed to not be vulnerable to CVE-2023-20273. Inspecting the Lua code shows this appliance has additional command injection filtering in place (see pexec_setsid in /usr/binos/openresty/nginx/conf/pexec.lua) which prevents the injection from working
|
2025-03-03 20:22:46 +00:00 |
|
|
msutovsky-r7
|
3c4d0aae2f
|
Land #19899, D-Tale remote code execution module
Add D-Tale RCE module (CVE-2024-3408, CVE-2025-0655)
|
2025-03-03 13:04:45 +01:00 |
|
|
Takah1ro
|
47351e4959
|
Use FETCH_DELETE as default
|
2025-03-03 20:52:55 +09:00 |
|
|
Takah1ro
|
65d2b6380b
|
Update vulnerable version
|
2025-03-02 12:14:25 +09:00 |
|
|
Takah1ro
|
77c3ce52e0
|
Improve:
* Support the prior to 3.13.0 versions
* CVE-2024-3408 bypass for authentication
|
2025-03-01 11:58:28 +09:00 |
|
|
Diego Ledda
|
8dd032e529
|
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin
Land #19897, Invoice Ninja unauthenticated RCE (CVE-2024-55555) and Laravel Crypto Killer mixin
|
2025-02-25 13:14:18 +01:00 |
|
|
Diego Ledda
|
1c27e2a958
|
docs: update docs for rubocop
|
2025-02-25 12:15:52 +01:00 |
|
|
H00die.Gr3y
|
2d55f5c16e
|
Update documentation/modules/exploit/linux/http/invoiceninja_unauth_rce_cve_2024_55555.md
Co-authored-by: Diego Ledda <diego_ledda@rapid7.com>
|
2025-02-24 15:51:06 +01:00 |
|
|
h00die-gr3y
|
41e690445e
|
simplified some code sections
|
2025-02-23 12:59:52 +00:00 |
|
|
h00die-gr3y
|
ece33ee8ec
|
added documentation
|
2025-02-23 09:54:26 +00:00 |
|
|
Takah1ro
|
4d4b88c94e
|
Add D-Tale unauth RCE module (CVE-2025-0655)
|
2025-02-23 09:33:42 +09:00 |
|
|
h00die-gr3y
|
215957465c
|
added default options and updated documentation
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
15c20272ea
|
removed linux dropper code and tested with PR 19850
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
fcc929e228
|
updated documentation with Linux Dropper (x86_64) target scenario
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
f857e5fe67
|
fixed code review and updated documentation
|
2025-02-20 13:19:41 -06:00 |
|
|
h00die-gr3y
|
682be79920
|
first release module and documentation
|
2025-02-20 13:19:41 -06:00 |
|
|
Martin Sutovsky
|
bd42b23ef0
|
Land #19883, module for unauthenticated RCE in InvokeAI
|
2025-02-18 14:01:11 +01:00 |
|
|
msutovsky-r7
|
05c9550d43
|
Land #19877, BeyondTrust Privileged Remote Access & Remote Support RCE Module
Exploit module for BeyondTrust Privileged Remote Access & Remote Support (CVE-2024-12356, CVE-2025-1094)
|
2025-02-17 17:43:15 +01:00 |
|
|
Takah1ro
|
611556571f
|
Update document
|
2025-02-17 20:32:43 +09:00 |
|
|
Takah1ro
|
b454a32f3c
|
Fix typo and update document
|
2025-02-17 12:52:50 +09:00 |
|
|
Takah1ro
|
0945fbba81
|
Add InvokeAI unauth RCE module (CVE-2024-12029)
|
2025-02-16 15:49:56 +09:00 |
|
|
sfewer-r7
|
d93a99c504
|
rename the module
|
2025-02-13 12:51:46 +00:00 |
|
|
sfewer-r7
|
37276446a6
|
improve the description for this option
|
2025-02-12 17:22:43 +00:00 |
|
|
sfewer-r7
|
c9be9b65ec
|
fix typos in docs
|
2025-02-12 17:22:17 +00:00 |
|
|
Martin Sutovsky
|
984f0dbb15
|
Land #19868, NetAlertX RCE module
|
2025-02-11 08:23:57 +01:00 |
|
|
Takah1ro
|
9f43fcc7ad
|
Update FETCH_COMMAND default to curl
|
2025-02-10 22:00:52 +09:00 |
|
|
Takah1ro
|
8d59201447
|
Update document
|
2025-02-10 21:38:14 +09:00 |
|
|
Takah1ro
|
7149d3f332
|
Leave cleanup as an option
|
2025-02-10 21:31:50 +09:00 |
|
|
Takah1ro
|
b02838a8dd
|
NetAlertx -> NetAlertX
|
2025-02-10 12:52:26 +09:00 |
|
|
Takah1ro
|
00f4f80530
|
Add NetAlertx rce module (CVE-2024-46506)
|
2025-02-08 14:40:31 +09:00 |
|
|
sfewer-r7
|
c6d03069a9
|
add in the documentation
|
2025-01-31 11:02:01 +00:00 |
|