Jacob Robles
|
b458521bc1
|
Land #11864, Add RCE vector to Jenkins ACL bypass
|
2019-05-23 04:43:07 -07:00 |
|
William Vu
|
653e1f5f32
|
Land #11861, WebLogic AsyncResponseService updates
|
2019-05-22 12:33:24 -07:00 |
|
Shelby Pace
|
2d4ab992ef
|
Land #11805, add bsd targets to sshexec
|
2019-05-20 13:33:43 -07:00 |
|
bwatters-r7
|
76ee5556b8
|
Land #11833, moodle_cmd_exec nil check
Merge branch 'land-11833' into upstream-master
|
2019-05-20 11:10:19 -07:00 |
|
William Vu
|
32d0c9c697
|
Land #11859, struts2_rest_xstream style fix
|
2019-05-20 10:42:49 -07:00 |
|
Wei Chen
|
8c5fef6081
|
Land #11828, Add CVE-2017-18357: Shopware Object Instantiation
|
2019-05-17 16:25:07 -07:00 |
|
Shelby Pace
|
c517a43683
|
Land #11802, add GetSimple CMS RCE module
|
2019-05-16 09:33:27 -07:00 |
|
William Vu
|
e5bbc107ba
|
Land #11598, Postgres COPY FROM PROGRAM exploit
|
2019-05-06 23:17:53 -07:00 |
|
asoto-r7
|
f90489dbef
|
Land PR#11780, exploit/multi/misc/weblogic_deserialize_asyncresponseservice
|
2019-05-06 13:39:30 -07:00 |
|
Shelby Pace
|
07ee5721be
|
Land #11779, add Rails Doubletap Dev mode RCE
|
2019-05-01 06:38:41 -07:00 |
|
Wei Chen
|
a7f0c223cd
|
Land #11784, Fix NoMethodError in jira_plugin_upload exploit module
|
2019-04-29 09:02:34 -07:00 |
|
Shelby Pace
|
962902cbef
|
Land #11697, add Pimcore unserialize RCE
|
2019-04-29 06:55:48 -07:00 |
|
Brent Cook
|
a406fb2a72
|
Land #11769, make sure Notes fields show up in info
|
2019-04-24 11:12:56 -07:00 |
|
Brent Cook
|
7c4502122e
|
Land #11764, update tested versions for xor_x11_suid_server module
|
2019-04-24 03:14:17 -07:00 |
|
asoto-r7
|
dca368736c
|
Land #11717, exploit/multi/http/confluence_widget_connector
|
2019-04-18 10:17:00 -07:00 |
|
Brent Cook
|
f5057fb18c
|
Land #11729, Add Libreoffice macro exec exploit module
|
2019-04-17 11:42:26 -07:00 |
|
Shelby Pace
|
c648d2c9e6
|
Land #11657, add Horde form file upload
|
2019-04-09 11:50:36 -07:00 |
|
Shelby Pace
|
8f8f31dfd6
|
Land #11587, add Wordpress core RCE module
|
2019-04-04 13:25:48 -07:00 |
|
Adam Cammack
|
bcbecddd12
|
Land #11681, Remove trailing space in metadata
|
2019-04-03 12:37:39 -07:00 |
|
surefire
|
6dbecac2e9
|
Land #11136, exploit/multi/misc/weblogic_deserialize_unicastref
|
2019-04-01 16:17:59 -07:00 |
|
William Vu
|
bad97a70c4
|
Land #11636, postgres_createlang version check fix
|
2019-04-01 14:01:05 -07:00 |
|
surefire
|
77313e2f41
|
Land #11134, exploit/multi/misc/weblogic_serialize_marshalledobject
|
2019-04-01 12:14:35 -07:00 |
|
Brent Cook
|
a5568ea17a
|
Land #11579, Add support for splunk 7.2.4 to splunk_upload_app_exec
|
2019-03-29 14:24:48 -07:00 |
|
William Vu
|
b196d08339
|
Land #11635, Authors check for msftidy
|
2019-03-29 08:51:00 -07:00 |
|
Wei Chen
|
4af8881c48
|
Land #11592, Add CMS Made Simple (CMSMS) Showtime2 File Upload RCE
|
2019-03-27 13:23:35 -07:00 |
|
Jeffrey Martin
|
0a6dbdb2ae
|
Land #11637, Fix a git snafu when landing
|
2019-03-26 16:45:58 -07:00 |
|
asoto-r7
|
c2b4cfaa7c
|
Land #11131, Weblogic_serialize_rawobject CVE-2015-4852
|
2019-03-26 15:13:34 -07:00 |
|
William Vu
|
37135cd48e
|
Land #11606, jenkins_metaprogramming fixes
|
2019-03-21 09:23:45 -07:00 |
|
Jacob Robles
|
c4ac4eb5a7
|
Land #11466, Add Jenkins ACL bypass and metaprogramming RCE
|
2019-03-18 05:24:33 -07:00 |
|
Brent Cook
|
8d01b4de83
|
Land #11382, Added BMC Patrol Agent Command Exec Module
|
2019-03-15 11:24:56 -07:00 |
|
Brent Cook
|
bacf6d07e0
|
Land #11483, update various modules to reflect current best practices
Merge remote-tracking branch 'upstream/pr/11483' into upstream-master
|
2019-02-25 12:21:57 -08:00 |
|
Wei Chen
|
8df9fc9473
|
Land #11072, Add nuuo_nvrmini_upgrade_rce
|
2019-02-06 20:32:33 -08:00 |
|
Pearce Barry
|
a6a391de0a
|
Land #11349, Add Evince CBT File Command Injection module
|
2019-02-06 15:56:45 -08:00 |
|
Jeffrey Martin
|
649e528875
|
Land #11330, Fix HTTP/SMB mixin order to restore SSL option
|
2019-01-29 15:56:24 -08:00 |
|
William Vu
|
9c5725b25c
|
Land #11234, @bcoles revisionism
|
2019-01-11 18:17:42 -08:00 |
|
Jacob Robles
|
7711d2a700
|
Land #11206, add coldfusion ckeditor file upload
|
2019-01-10 05:30:05 -08:00 |
|
Shelby Pace
|
3fae01b403
|
Land #10444, add Consul rexec RCE module
|
2018-12-28 07:16:49 -08:00 |
|
Shelby Pace
|
11abb03056
|
Land #10443, add Consul service RCE module
|
2018-12-28 06:37:21 -08:00 |
|
Brent Cook
|
9150d3c4b9
|
Land #11156, Add CmdStager to erlang_cookie_rce
|
2018-12-21 12:46:53 -08:00 |
|
Jacob Robles
|
a0df69c94f
|
Land #11089, Erlang cookie rce exploit module
|
2018-12-19 06:16:51 -08:00 |
|
Wei Chen
|
76ec4781a3
|
Land #11127, Fix TARGETURI support in struts2_namespace_ognl
|
2018-12-15 07:35:20 -08:00 |
|
William Vu
|
d5309999db
|
Land #11107, double negative logic cleanup
|
2018-12-11 18:32:32 -08:00 |
|
Shelby Pace
|
b0569e7242
|
Land #10960, add wp duplicator code inject module
|
2018-12-11 10:06:00 -08:00 |
|
Shelby Pace
|
8afbb1a21e
|
Land #10737, add TeamCity XML-RPC exploit module
|
2018-11-27 13:02:45 -08:00 |
|
Brendan Coles
|
3f8c2268a6
|
Land #11015, Fix payload and console check for Xorg_privesc Linux targets
|
2018-11-24 20:43:34 -08:00 |
|
Brent Cook
|
a334878fd1
|
Land #10916, Xorg SUID privesc
|
2018-11-21 18:24:03 -08:00 |
|
Brent Cook
|
d8e0b17777
|
Land #10973, Rework DisclosureDate check in msftidy, including ISO 8601 support
|
2018-11-19 08:50:32 -08:00 |
|
Jacob Robles
|
77da5b145e
|
Land #10828, git submodule url exec CVE-2018-17456
|
2018-11-14 10:51:16 -08:00 |
|
Shelby Pace
|
a90bea2551
|
Land #9631, add Jira plugin upload module
|
2018-11-13 13:36:30 -08:00 |
|
Brendan Coles
|
6be18e6165
|
Land #10917, Add support for unix/cmd payloads to multi/ssh/sshexec
|
2018-11-06 22:31:51 -08:00 |
|