a406fb2a72
Land #11769 , make sure Notes fields show up in info
2019-04-24 11:12:56 -07:00
878ef81ea6
Land #11714 , DUMP_OUTPUT fix for SA-CORE-2019-003
2019-04-11 10:25:51 -07:00
ae55bf9738
Land #11607 , Add webmin CVE
2019-03-21 09:35:52 -07:00
058cfc1ce9
Land #11385 , Add Webmin Upload Exec
2019-03-15 06:20:41 -07:00
3d9f1eef17
Land #11545 , Add elFinder Command Injection
2019-03-11 13:04:59 -07:00
a03a4d957a
Land #11534 , fix module title for sonicwall_xmlrpc_rce
2019-03-06 15:48:49 -08:00
2f24f2dfcf
Land #11481 , Drupal SA-CORE-2019-003/CVE-2019-6340
2019-03-05 19:10:46 -08:00
bacf6d07e0
Land #11483 , update various modules to reflect current best practices
...
Merge remote-tracking branch 'upstream/pr/11483' into upstream-master
2019-02-25 12:21:57 -08:00
9c5725b25c
Land #11234 , @bcoles revisionism
2019-01-11 18:17:42 -08:00
67cddffc51
Land #11049 , Add Emacs movemail local exploit
2018-12-03 14:41:28 -08:00
d8e0b17777
Land #10973 , Rework DisclosureDate check in msftidy, including ISO 8601 support
2018-11-19 08:50:32 -08:00
69e72e6a1f
Land #10847 - Add blueimp's jQuery (Arbitrary) File Upload
...
CVE-2018-9206
2018-11-05 09:39:35 -08:00
9b495913dc
Land #10873 , Add notes to exploit modules
2018-11-02 12:13:37 -07:00
549c835af5
Land #10836 , Add Morris worm sendmail debug mode exploit
2018-11-02 09:22:22 -07:00
f0096227e7
Land #10505 , post-auth and default creds info
2018-10-24 17:09:28 -05:00
5f25c977ec
Land #10837 , QNX qconn module rename (redux)
2018-10-22 14:19:45 -07:00
43b0e56b09
Land #10817 , QNX qconn module rename
2018-10-22 14:19:44 -07:00
12cb3b4d3e
Land #10750 , formatting and AKA reference fixes
2018-10-05 01:34:14 -07:00
b42af6cd96
Land #10728 , metadata updates for @rastating
2018-10-02 11:46:30 -07:00
1ee8734717
Land #10570 , AKA Metadata Refactor
2018-09-17 20:31:07 -07:00
2ee6a49a27
Land #10649 , https://seclists.org references
2018-09-17 15:09:39 -07:00
eb39f6da51
Land #10564 , Add Ghostscript exploit from taviso
2018-09-05 19:09:11 -07:00
bf7c530f7e
Land #10456 , known_hosts fix for SSH modules
2018-08-16 13:43:26 -07:00
0bc84bb6c6
Land #10305 , SonicWall XML-RPC RCE
2018-07-30 12:15:59 -07:00
4ec22c0ceb
Land #10376 , Handle connection errors and fail_with in check
2018-07-26 09:28:58 -07:00
8e5639a081
Land #10374 , Net::SSH::CommandStream fixes
2018-07-25 16:23:47 -07:00
465dceb182
Land #10299 , Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
d480ee8e20
Land #10275 , Update missing CVE references for exploit modules
2018-07-12 11:24:01 -05:00
f14597bcb2
Land #10199 , Kace Systems Management Command Injection
2018-06-26 10:11:07 -07:00
7f372d178d
Land #10059 , CVE-2018-1111 exploit
2018-06-12 13:04:36 -07:00
3bc5b0bdcb
Land #9991 , Remove need for temp file with xdebug_unauth_exec
2018-05-15 11:58:15 -07:00
a74b2b5716
Land #9970 , final update to Drupalgeddon 2
2018-05-04 09:40:31 -05:00
935fa6414e
Land #9968 , second round of Drupalgeddon 2 updates
2018-05-04 09:38:34 -05:00
3b8280c33f
Land #9918 , XDebug Unauthenticated OS command execution
2018-04-30 09:42:26 -05:00
492b6003b5
Land #9931 , minor fixes for #9876 (Drupalgeddon 2)
2018-04-26 08:29:59 -07:00
d340ef2632
Land #9876 , Drupalgeddon 2
2018-04-26 08:29:59 -07:00
ef4fd1dc75
Land #9742 , QNX exploit improvements
2018-04-03 09:13:57 -05:00
3b87bf5a03
Land #9666 , Add 2017-8917 RCE for Joomla 3.7.0
2018-03-29 09:17:54 -07:00
4e8fe54c6c
Land #9524 , prefer 'shell' channels over 'exec' channels for ssh CommandStream
2018-02-22 08:27:36 -08:00
a87ae41d81
Land #9446 , Post API fix for setuid_nmap
2018-01-26 18:08:47 -06:00
2f9eebe28b
remove plugin dir
2018-01-15 14:48:59 +01:00
7e2c7837e5
Land #9325 , Add CVE-2017-6090 phpCollab 2.5.1 file upload exploit module
...
Land #9325
2018-01-10 17:39:50 -06:00
b1f3f471f3
Update phpcollab_upload_exec code (also module documentation)
2018-01-10 17:38:52 -06:00
dd737c3bc8
Land #9317 , remove multiple deprecated modules
...
Land #9317
The following modules are replaced by the following:
auxiliary/scanner/discovery/udp_probe
is replaced by:
auxiliary/scanner/discovery/udp_sweep
exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload
is replaced by:
exploit/multi/http/wp_ninja_forms_unauthenticated_file_upload
exploit/windows/misc/regsvr32_applocker_bypass_server
is replaced by:
exploits/multi/script/web_delivery
2018-01-10 15:47:20 -06:00
c9d6d0a7a7
-51
2018-01-04 12:25:31 -06:00
16d709f180
changes+filedropper
2018-01-03 14:09:30 -06:00
8f0e41e159
requested changes
2018-01-01 17:30:43 -06:00
c47d09717d
pfsense graph sploit
2018-01-01 03:18:51 -06:00
e6de25d63b
Land #9316 Cambium modules and mixins, tx @juushya
...
These cover several of the CVEs mentioned in
https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
2017-12-26 12:39:51 -06:00
8b0f2214b1
few more updates
2017-12-23 03:04:11 +05:30
Brent Cook