94e5e49052
ubuntu needrestart lpe
2024-11-22 15:44:45 -05:00
d5b71aa581
automatic module_metadata_base.json update
2024-11-22 14:28:34 +00:00
502e415344
Merge pull request #19630 from remmons-r7/cups_ipp_rce
...
Exploit module for IPP attributes remote code execution - OpenPrinting CUPS
2024-11-22 09:22:21 -05:00
d3b7683532
Land #19672 , Added mwalas-r7 to the mail map
2024-11-22 10:06:39 +00:00
4d25cd90c6
Added mwalas-r7 to the mail map
2024-11-22 10:25:53 +01:00
74cfde39f0
Merge pull request #2 from smcintyre-r7/pr/collab/19630
...
Cups Exploit Updates
2024-11-21 14:28:40 -06:00
0ec9b1bcb9
Fix a multicast socket issue
2024-11-21 15:14:46 -05:00
24d3ef16cf
Remove some unnecessary code, switch to passive stance
2024-11-21 15:08:43 -05:00
d75ed350db
automatic module_metadata_base.json update
2024-11-21 17:59:45 +00:00
d95d549992
Land #19531 ProjectSend r1335 - r1605 RCE module
2024-11-21 09:53:36 -08:00
68eb6599fd
Create projectsend_unauth_rce
2024-11-21 09:34:58 -08:00
b79c0037f6
automatic module_metadata_base.json update
2024-11-21 12:42:37 +00:00
d9d7f1a898
Merge pull request #19654 from h00die/strapi
...
strapi 3.0.0 beta 17.4 password reset (CVE-2019-18818)
2024-11-21 12:35:30 +00:00
bc7adfbe41
Bump version of framework to 6.4.38
2024-11-21 03:32:51 -06:00
3419bfec43
automatic module_metadata_base.json update
2024-11-20 22:41:34 +00:00
afbbba09e8
Land #19584 Judge0 sandbox escape CVE-2024-28185, CVE-2024-28189
2024-11-20 14:35:38 -08:00
da6f8cd552
Add Judge0 module and document
2024-11-20 14:15:38 -08:00
d69c146fb0
automatic module_metadata_base.json update
2024-11-20 19:26:21 +00:00
05cbd1d9a3
Land #19593 Add exploit for CVE-2023-28324 (Unauthenticated RCE in Ivanti EPM)
...
This exploits an unauthenticated RCE in Ivanti's EPM where a .NET remoting client can invoke a method that results in an OS command being executed in the context of NT AUTHORITY\SYSTEM.
2024-11-20 11:18:58 -08:00
e52edf447c
Implement feedback from the PR
2024-11-20 13:51:39 -05:00
e6615d3a74
Merge pull request #19659 from sjanusz-r7/fix-irb-deadlock-error
...
Fix IRB deadlock recursive locking on Ctrl+C
2024-11-19 16:11:09 +00:00
1d7e6050d3
automatic module_metadata_base.json update
2024-11-19 16:05:05 +00:00
f7e210d3e9
Merge pull request #19624 from cdelafuente-r7/fix/mod/ms_icpr
...
Fix a crash when generating CSRs with OpenSSL 3.4.0
2024-11-19 10:58:52 -05:00
09db1811f1
Merge pull request #19662 from sjanusz-r7/fix-no-readline-crash
...
Load Readline without a conditional
2024-11-19 13:25:41 +00:00
523a172e23
Load Readline without a conditional
2024-11-19 13:02:06 +00:00
e199dd7ca7
Merge pull request #19657 from sjanusz-r7/deprecate-real-readline
...
Deprecate real-readline option
2024-11-19 12:50:15 +00:00
fefc8438f5
Deprecate real-readline option
2024-11-19 12:38:05 +00:00
519c18a858
Update specs for auxiliary/admin/dcerpc/icpr_cert
2024-11-18 21:28:55 +01:00
2177fdadbd
automatic module_metadata_base.json update
2024-11-18 16:32:34 +00:00
7bab1c1980
Fix specs and add algorithm argument
2024-11-18 17:17:58 +01:00
1ed2d7e258
Merge pull request #19658 from cdelafuente-r7/fix/mod/get_ticket/file_read
...
Fix `auxiliary/admin/kerberos/get_ticket` issue on Windows
2024-11-18 16:08:27 +00:00
bc45734fed
Fix IRB deadlock recursive locking on Ctrl+C
2024-11-18 14:37:01 +00:00
26e424a921
automatic module_metadata_base.json update
2024-11-18 14:32:24 +00:00
2970c99471
Use binread instead
2024-11-18 15:32:08 +01:00
dd7e1786e1
Merge pull request #19643 from smashery/dcsync_individual
...
DCsync individual accounts and groups
2024-11-18 09:25:21 -05:00
7c512b7054
Read the certificate in binary mode
2024-11-18 15:11:36 +01:00
20b8fc61a8
Updated ruby_smb module with SAMR group membership query ability
2024-11-18 10:08:00 +11:00
dfebca457c
strapi review
2024-11-16 15:47:54 -05:00
219981227d
Update documentation/modules/auxiliary/scanner/http/strapi_3_password_reset.md
...
Co-authored-by: adfoster-r7 <60357436+adfoster-r7@users.noreply.github.com >
2024-11-16 15:36:00 -05:00
6629d5dff2
strapi password reset
2024-11-15 15:12:34 -05:00
acc9940cdb
automatic module_metadata_base.json update
2024-11-15 14:30:41 +00:00
5d9add4450
Merge pull request #19640 from jheysel-r7/pyload_js2py_cve_2024_39205
...
Pyload RCE (CVE-2024-39205) with js2py sandbox escape (CVE-2024-28397)
2024-11-15 09:24:37 -05:00
786e8551ee
automatic module_metadata_base.json update
2024-11-15 12:55:28 +00:00
d039bead93
Merge pull request #19601 from sjanusz-r7/add-teamcity-login-scanner
...
Add JetBrains TeamCity HTTP Login Scanner
2024-11-15 12:49:10 +00:00
de39b693b7
Merge pull request #19645 from adeherdt-r7/MS-9862-rails-upgrade-preparation-migration-manager
...
MS-9862 Ruby on Rails Upgrade Preparation : Migration
2024-11-15 08:44:05 +01:00
717940590a
Clearer datastore option description
2024-11-15 11:11:41 +11:00
9409749a21
Land #19650 , Fix crash when using modules
2024-11-14 21:26:46 +00:00
6be0182b1f
Fix crash when using modules
2024-11-14 21:19:41 +00:00
92e42a63ea
Rubocop
2024-11-14 12:47:35 -08:00
4e1f33336c
Ofuscation and Gemfile update
2024-11-14 12:44:19 -08:00
h00die