3c64b8fde9
Land #13094 , Vesta Control Panel v-list-user-backups RCE
2020-04-13 16:56:08 -05:00
c151b93ba4
Fix up clarity and spelling issues in module and documentation
2020-04-13 16:28:39 -05:00
b7a1fbdde2
Fixed documentation and login method
2020-04-13 18:55:56 +03:00
51f4383ffb
Explain CVEs and "fix" CMDSTAGER::FLAVOR
2020-04-13 10:37:19 -05:00
a87eb8a153
Uncomment CVE references
2020-04-13 10:25:38 -04:00
706a395bc0
Fixed 2nd round of suggested changes
2020-04-13 11:22:02 +03:00
0c3080c318
Add ThinkPHP Multiple PHP Injection RCEs
2020-04-13 02:21:01 -05:00
d906c3dc77
Fixed reviews suggestions
2020-04-11 14:38:19 +03:00
eb7d2f821d
Adding CVE number
...
Signed-off-by: Mehmet İnce <mehmet@mehmetince.net >
2020-04-11 12:22:17 +03:00
5d04c2b4a5
Adding documentation and module description
...
Signed-off-by: Mehmet İnce <mehmet@mehmetince.net >
2020-04-11 12:22:17 +03:00
7c2f65da36
Adding vestacp exec
...
Signed-off-by: Mehmet İnce <mehmet@mehmetince.net >
2020-04-11 12:22:17 +03:00
7934d1de09
Land #13098 , add Pandora FMS module
2020-04-06 11:42:24 -05:00
a3c07b7cc1
use nospace opt, fix regex, iterate id_agente
2020-04-06 11:34:13 -05:00
9474b5fda1
Land #13187 , Add LPE Exploit For CVE-2020-0796 (AKA: SMBGhost) (take2)
...
Merge branch 'land-13187' into upstream-master
2020-04-03 11:25:48 -05:00
182bd67287
Land #13187 , Add LPE Exploit For CVE-2020-0796 (AKA: SMBGhost)
...
Merge branch 'land-13187' into upstream-master
2020-04-03 11:19:50 -05:00
94f18cc67a
Add the AKA reference to CoronaBlue for accuracy
2020-04-03 11:01:43 -04:00
bea42876ee
Land #13067 , PlaySMS template injection RCE
2020-04-03 10:22:35 -04:00
bd835e8f2d
Cleanup more status methods and move the module
2020-04-03 10:21:27 -04:00
126b9e2172
Address PR comments for CVE-2020-0796
2020-04-03 08:56:53 -04:00
b343ac6452
Don't delay the session and update module doc
2020-04-02 17:34:20 -05:00
79142cf445
Move module to unix/webapp
2020-04-02 17:22:34 -05:00
f9c8f62491
Fix PHP payload so we can get a session
...
It's ENCODER, not ENCODE, so the payload wasn't being encoded, leaving
semicolons unencoded and causing a 500 error on the server.
Also preferred payload.encoded over payload.encode and removed a stray
brace that wasn't causing any issues.
2020-04-02 17:16:19 -05:00
276475c308
Check compression in the check method for SMBGhost
2020-04-02 17:35:17 -04:00
3392fa18d4
Add the x64 LPE exploit for CVE-2020-0796
2020-04-02 17:22:00 -04:00
a375c18d77
Land #13123 , VMware Fusion OS X LPE CVE-2020-3950
2020-04-02 11:53:43 -05:00
5aab28a1a6
Fix command separator conflict
2020-04-02 11:30:59 -05:00
859eda92bb
Land #12759 , Apache Solr Remote Code Execution via Velocity Template
...
Merge branch 'land-12759' into upstream-master
2020-04-02 11:23:33 -05:00
7ed37c2e77
Fix module and get it working on 10.1.6
2020-04-02 11:06:21 -05:00
3e166f2d3f
Grammatical changes for docs and status updates
2020-04-02 10:26:50 -05:00
e8d134fc56
Land #12096 , DNN cookie desrialization exploit
2020-04-02 15:57:46 +01:00
954f123e7e
remove extra lines
2020-03-30 22:25:16 -04:00
1b658aa85f
11.5.3 cleanup and reliability
2020-03-30 22:22:01 -04:00
b87ed645d9
Updated to use php payload
...
Now, this module will work on the Windows platform also because it's not dependent on the OS now.
2020-03-31 01:16:20 +05:30
1e90c6117c
Land #13152 , IBM PA/TM1 CVE-2019-4716 exploit
2020-03-30 10:50:50 -05:00
d904eed010
add badchars for various targets
2020-03-30 12:49:58 +07:00
861b79bce7
Added new targets and made documentation consistent
2020-03-29 00:33:24 +08:00
0291adf4c7
add 11.5.3 exploit
2020-03-28 11:55:55 -04:00
59c2079aa4
split AIX and Linux cmd targets
2020-03-28 14:35:24 +07:00
46286f8981
change to payload.encoded
2020-03-28 14:30:20 +07:00
2ac177cb39
make changes for ARCH_CMD, add multiple targets
2020-03-28 14:22:21 +07:00
6a6b99885d
Add ARCH_CMD, tested and working
2020-03-28 13:55:09 +07:00
5ac0145bb4
Update modules/exploits/multi/misc/ibm_tm1_unauth_rce.rb
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2020-03-28 11:04:31 +07:00
92fb321f9f
Satify the msftidy_docs.
2020-03-28 11:46:55 +08:00
4b1762081f
Renane module to redis_extension_cmd_exec.
...
Fix #12143
2020-03-28 11:37:18 +08:00
a4e11fd311
spaces EOL SMH
2020-03-27 18:01:44 -04:00
e9e142b573
shoutout
2020-03-27 18:01:43 -04:00
7bc30ecf39
add version check
2020-03-27 18:01:43 -04:00
eda3653a51
tidy
2020-03-27 18:01:43 -04:00
4f6e2fe84e
vmware fusion osx lpe
2020-03-27 18:01:43 -04:00
5f0c9942d2
Land #12756 , add dlink dwl2600 exploit
2020-03-27 12:38:35 -05:00
gwillcox-r7