 wchen-r7
|
f98efb1345
|
Fix typos
|
2016-08-08 15:41:03 -05:00 |
|
|
Quentin Kaiser
|
1320647f31
|
Exploit for Trend Micro Smart Protection Server (CVE-2016-6267).
|
2016-08-08 18:47:46 +00:00 |
|
|
wchen-r7
|
3d1289dac3
|
Land #7185, Add VMware Host Guest Client Redirector DLL Hijack Exploit
|
2016-08-08 11:41:40 -05:00 |
|
|
wchen-r7
|
51c457dfb3
|
Update vmhgfs_webdav_dll_sideload
|
2016-08-08 11:40:03 -05:00 |
|
|
Pedro Ribeiro
|
3b64b891a6
|
Update nuuo_nvrmini_unauth_rce.rb
|
2016-08-05 21:53:25 +01:00 |
|
|
Pedro Ribeiro
|
746ba4d76c
|
Add bugtraq reference
|
2016-08-05 21:53:08 +01:00 |
|
|
Steven Seeley
|
230903562f
|
Add Samsung Security Manager 1.5 ActiveMQ Broker exploit
|
2016-08-05 15:19:22 -05:00 |
|
|
Yorick Koster
|
dae1679245
|
Fixed build warnings
|
2016-08-05 20:40:41 +02:00 |
|
|
Yorick Koster
|
02e065dae6
|
Fixed disclosure date format
|
2016-08-05 20:32:58 +02:00 |
|
|
Yorick Koster
|
97d11a7041
|
Exploit module for CVE-2016-5330 VMware Host Guest Client Redirector DLL hijack
|
2016-08-05 20:19:40 +02:00 |
|
|
Pedro Ribeiro
|
07e210c143
|
Add changes requested to target.uri
|
2016-08-04 17:50:16 +01:00 |
|
|
Pedro Ribeiro
|
2aca610095
|
Add github link
|
2016-08-04 17:38:31 +01:00 |
|
|
Pedro Ribeiro
|
7d8dc9bc82
|
Update nuuo_nvrmini_unauth_rce.rb
|
2016-08-04 17:38:14 +01:00 |
|
|
Pedro Ribeiro
|
b48518099c
|
add exploit for CVE 2016-5674
|
2016-08-04 16:55:21 +01:00 |
|
|
Pedro Ribeiro
|
0deac80d61
|
add exploit for CVE 2016-5675
|
2016-08-04 16:54:38 +01:00 |
|
|
wchen-r7
|
14a387e4eb
|
Land #7163, Add exploit payload delivery via SMB
|
2016-08-03 14:44:59 -05:00 |
|
|
wchen-r7
|
2f6e0fb58c
|
Land #7172, Add exploit for CVE-2016-0189 (MSIE)
|
2016-08-03 14:14:16 -05:00 |
|
|
wchen-r7
|
e16c57ed07
|
Lower rank
|
2016-08-03 14:02:47 -05:00 |
|
|
wchen-r7
|
96dbf627ae
|
Remove unwanted metadata for HttpServer
|
2016-08-03 13:55:58 -05:00 |
|
|
William Webb
|
be4f55aa2f
|
forgot to update ranking
|
2016-08-02 13:30:12 -05:00 |
|
|
William Webb
|
4c15e5e33a
|
Land #7171, Hint about incorrect RAILSVERSION
|
2016-08-01 15:40:27 -05:00 |
|
|
Brent Cook
|
abf435d6c2
|
Land #6960, Auth bypass for Polycom HDX video endpoints
|
2016-08-01 14:02:50 -05:00 |
|
|
Brent Cook
|
5309f2e4fb
|
endpoints, not end points
|
2016-08-01 14:02:17 -05:00 |
|
|
Brent Cook
|
b34201e65c
|
restore session as an instance variable
|
2016-08-01 13:58:54 -05:00 |
|
|
William Webb
|
ba0da52274
|
msftidy cleanup
|
2016-08-01 13:36:05 -05:00 |
|
|
William Webb
|
21e6211e8d
|
add exploit for cve-2016-0189
|
2016-08-01 13:26:35 -05:00 |
|
|
William Vu
|
3b13adba70
|
Hint about incorrect RAILSVERSION
If the secret doesn't match, you might have set the wrong RAILSVERSION.
The difference is secret_token (Rails 3) vs. secret_key_base (Rails 4).
|
2016-08-01 09:36:25 -07:00 |
|
|
James Lee
|
d46c3a1d8c
|
Collector looks like hex, store it as a string
|
2016-07-29 21:57:51 -05:00 |
|
|
Andrew Smith
|
1d6fa11c4f
|
Addition of SMB delivery module
|
2016-07-29 14:58:30 -04:00 |
|
|
wchen-r7
|
1e1866f583
|
Fix #7158, tiki_calendar_exec incorrectly reports successful login
Fix #7158
|
2016-07-28 17:03:31 -05:00 |
|
|
Vex Woo
|
864989cf6c
|
For echo command
|
2016-07-26 20:27:23 -05:00 |
|
|
Brendan
|
4720d77c3a
|
Land #6965, centreon useralias exec
|
2016-07-26 15:02:36 -07:00 |
|
|
Mehmet Ince
|
dadafd1fdf
|
Use data:// instead of bogus web server and check() improvements.
|
2016-07-26 13:31:46 +03:00 |
|
|
wchen-r7
|
1016cb675d
|
Land #7107, Use VHOST info for redirection in firefox_proto_crmfrequest
|
2016-07-24 15:50:21 -05:00 |
|
|
wchen-r7
|
72caeaa72f
|
Fix redirect url
|
2016-07-24 15:49:03 -05:00 |
|
|
Mehmet Ince
|
780e83dabb
|
Fix for Opt params and Space limits
|
2016-07-22 20:48:15 +03:00 |
|
|
Mehmet Ince
|
7e9c5f9011
|
Fix for double space and indentation
|
2016-07-21 20:27:52 +03:00 |
|
|
Mehmet Ince
|
634ee93de4
|
Add Drupal CODER remote command execution
|
2016-07-21 20:23:54 +03:00 |
|
|
William Vu
|
32f1c83c9e
|
Switch to single quotes
Might as well, since we're avoiding escaping.
|
2016-07-21 00:10:17 -05:00 |
|
|
William Vu
|
2e631cab5b
|
Prefer quoting over escaping
Having to escape backslashes in a single-quoted string sucks.
|
2016-07-21 00:02:08 -05:00 |
|
|
William Vu
|
c6b309d5c9
|
Fix drupal_restws_exec check method false positive
|
2016-07-20 23:28:49 -05:00 |
|
|
William Vu
|
8bd6db8bd7
|
Land #7108, Drupal RESTWS exploit
|
2016-07-20 13:49:37 -05:00 |
|
|
William Vu
|
b49a847c98
|
Fix additional things
|
2016-07-20 13:49:23 -05:00 |
|
|
Mehmet Ince
|
51bb950201
|
Avoid return where not required
|
2016-07-20 21:27:51 +03:00 |
|
|
Mehmet Ince
|
b0a0544627
|
Remove random string from URI
|
2016-07-20 20:50:10 +03:00 |
|
|
Pedro Ribeiro
|
c93e88f3a3
|
Make changes requested by wvu-r7
|
2016-07-20 14:21:04 +02:00 |
|
|
James Lee
|
b057a9486c
|
Don't use ssh agent
|
2016-07-19 17:07:22 -05:00 |
|
|
James Lee
|
ff63e6e05a
|
Land #7018, unvendor net-ssh
|
2016-07-19 17:06:35 -05:00 |
|
|
Mehmet Ince
|
089816236d
|
Remove double spaces and fix checkcode
|
2016-07-20 00:01:25 +03:00 |
|
|
Mehmet Ince
|
9c8e351ba8
|
Use vars_get un send_request_cgi
|
2016-07-19 20:12:14 +03:00 |
|