66ad5deb47
Land #12531 , Add FusionPBX Operator Panel exec.php Command Execution
...
Add FusionPBX Operator Panel exec.php Command Execution
2019-11-13 11:31:30 -06:00
71cbefa5e8
Land #12534 , Add FreeSWITCH Event Socket Command Execution
...
Add FreeSWITCH Event Socket Command Execution
2019-11-13 11:27:53 -06:00
1ebef8bcb2
Land #12529 , add CMSMS object inject exploit
2019-11-13 08:37:05 -06:00
baf27f9654
Land #12542 , add Bludit File Upload Exploit
2019-11-12 15:44:34 -06:00
3c1fa90a75
Land #12515 , Pulse Secure VPN RCE
2019-11-12 02:55:01 -06:00
a8e289ee9c
Code-block env(1)
2019-11-12 02:46:18 -06:00
a267ad9d64
Reference env(1) as the reason we have useful RCE
2019-11-12 02:17:58 -06:00
a17b2c2041
Add module doc
2019-11-12 02:10:10 -06:00
3b57705a1f
Land #11390 , Add exploit module for Xorg X11 Server Local Privilege Escalation on AIX
...
Merge branch 'land-11390' into upstream-master
2019-11-11 15:42:54 -06:00
717a31c7c3
Fix typos and format
2019-11-11 14:47:56 -06:00
820aa4f46c
Update documents with vimeo video example and update SideEffects value
...
in the module cache.
2019-11-11 14:28:07 -06:00
1d7cdac421
Add Wordpress Plainview Activity Monitor RCE
...
Description:
```
Plainview Activity Monitor Wordpress plugin is vulnerable to OS
command injection which allows an attacker to remotely execute
commands on underlying system. Application passes unsafe user supplied
data to ip parameter into activities_overview.php.
Privileges are required in order to exploit this vulnerability, but
this plugin version is also vulnerable to CSRF attack and Reflected
XSS. Combined, these three vulnerabilities can lead to Remote Command
Execution just with an admin click on a malicious link.
```
2019-11-10 08:27:45 +01:00
876a307816
Land #9396 , Linux net snmpd rw access
2019-11-07 02:52:47 +00:00
f0443deb2a
resolved merge conflicts for payload 1.3.79 integration
2019-11-06 21:15:11 -05:00
3d14b88a50
Land #12507 , add rConfig Command Injection module
2019-11-06 13:45:15 -06:00
06f7027fd8
udapted docs
2019-11-06 15:57:33 +09:00
553601210a
Add CVE-2019-16113: Bludit Directory Traversal Image Upload Exploit
2019-11-05 08:57:15 -06:00
7620cefca4
start of janus table
2019-11-04 23:31:45 +09:00
4f2fab797f
janus upgrades
2019-11-04 23:31:45 +09:00
a307f4f41a
Apply suggestions from code review
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-03 00:32:10 +01:00
1a4777670b
Apply suggestions from code review
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-03 00:30:18 +01:00
6dc94bbca9
Update documentation
2019-11-02 22:37:56 +00:00
f5afbe7104
Update documentation
2019-11-02 22:35:58 +00:00
0d1dd242ea
Fix typos
2019-11-02 22:09:23 +00:00
e0faff6944
Add documentation
2019-11-02 22:03:10 +00:00
89b277c360
Add documentation
2019-11-01 23:38:59 +00:00
08d51acd18
Update targets
2019-11-01 20:33:23 +00:00
73a8381639
Add documentation
2019-11-01 20:12:03 +00:00
af0761bcfd
Add CMS Made Simple object injection exploit module
2019-11-01 12:11:38 +01:00
294cbcffb6
Land #12382 , Add Linux Micro Focus (HPE) Data Protector omniresolve Privesc (CVE-2019-11660)
2019-11-01 08:06:01 +00:00
0b4a0b3148
Land #12476 , add Nostromo dir traversal RCE
2019-10-31 08:24:41 -05:00
a55c5c6765
Update documentation/modules/exploit/multi/http/nostromo_code_exec.md
...
s/Nostrom/Nostromo/
Co-Authored-By: Shelby Pace <40177151+space-r7@users.noreply.github.com >
2019-10-30 15:38:50 +01:00
f3bc8580c0
Add documentation
2019-10-29 15:59:18 +00:00
f03f5e4904
Documentation updated based on latest module version.
2019-10-29 16:13:25 +01:00
3483c50a86
Add Windows backup system sdclt uac bypass module
2019-10-25 15:01:56 -05:00
fcc9ad628c
Land #12473 , add xscreensaver log privesc
2019-10-23 13:27:45 -05:00
991ccdbda5
Land #12106 , Add Linux PTRACE_TRACEME local root exploit
2019-10-23 14:01:14 +00:00
2d829f9d46
first upgrade on futex
2019-10-22 21:05:55 -04:00
e8469dca93
Land #11025 , add Xorg SUID Modulepath Privesc
2019-10-22 14:11:00 -05:00
1ceaa1d7ba
add documentation
2019-10-22 10:43:35 -05:00
39db3be145
Update tested versions
2019-10-22 06:35:57 +00:00
3565b0efb8
Land #12365 , Total.js CMS widget creation RCE
2019-10-21 15:22:09 -05:00
295d609595
Add CVE-2019-16278 exploit documentation.
2019-10-21 21:15:04 +02:00
cdf5ef5e2d
Add documentation
2019-10-21 06:16:09 +00:00
861dc9969f
fix. typo in documentation file.
2019-10-18 16:07:55 +04:00
25f60b07ed
compliance for the framework
2019-10-18 15:51:58 +04:00
37011c5ec0
update author and add documentation
2019-10-17 22:28:17 +08:00
a3331dba9f
Move totaljs cms module and doc
2019-10-15 10:11:14 -05:00
8f01ea3c49
update docs description
2019-10-10 13:38:37 +08:00
ad98c2e81c
Fix misnamed BlueKeep exploit documentation
...
Should be an underscore, not a hyphen.
2019-10-09 11:27:50 -05:00
sinn3r