ErikWynter
40ef9d496a
add docs for wd_mycloud_unauthenticated_cmd_injection
2023-07-28 10:16:50 +03:00
Christophe De La Fuente
c7f8ce5acd
Land #18199 , VMWare vRealize Network Insight pre-authenticated RCE CVE-2023-20887
2023-07-25 17:45:30 +02:00
Jack Heysel
586971c1fd
Fix incomplete copy pasta in docs
2023-07-21 14:38:07 -04:00
Jack Heysel
ee26e7f926
Rubocop fixes
2023-07-20 16:40:28 -04:00
Jack Heysel
421b06119f
Update docs
2023-07-20 14:55:27 -04:00
Jack Heysel
d03157fcc1
Installation instructions
2023-07-19 14:23:17 -04:00
h00die
530934f78a
review comments
2023-07-19 11:42:47 -04:00
space-r7
7af22bfd41
Land #18077 , add Symmetricom unauth cmd injection
2023-06-13 17:07:16 -05:00
space-r7
0d85c9e380
add module documentation
2023-06-13 13:14:51 -05:00
h00die-gr3y
4479d94658
Updates based on review comments from space-r7 and jvoisin
2023-06-12 19:28:08 +00:00
h00die-gr3y
7cd3854208
Removed Webshell upload and updated documentation
2023-06-12 13:58:59 +00:00
h00die-gr3y
db8a49cc99
Updated documentation
2023-06-10 12:14:05 +00:00
h00die-gr3y
417c9fa591
init commit module and documentation
2023-06-10 09:42:32 +00:00
space-r7
c9af514be4
Land #18063 , add TerraMaster webshell upload
2023-06-09 17:55:32 -05:00
h00die-gr3y
0bcd930f61
Updated NAS model and version check
2023-06-08 09:12:45 +00:00
h00die-gr3y
b3b0cb4ccf
Updates based on space-r7 comments
2023-06-08 07:39:44 +00:00
h00die-gr3y
46fcdb76d5
Updates based on jvoisin comments
2023-06-07 08:27:55 +00:00
h00die-gr3y
2e34d69133
Added documentation
2023-06-06 12:18:59 +00:00
h00die-gr3y
52745a96d7
Added documentation
2023-06-05 17:18:57 +00:00
Christophe De La Fuente
a485a786ef
Land #17881 , Zyxel chained RCE using LFI and weak password derivation algorithm
2023-05-10 11:49:51 +02:00
h00die-gr3y
51ab9746fb
Updates based on cdelafuente-r7 comments
2023-05-06 19:05:21 +00:00
h00die-gr3y
c39751094a
Updates based on review comments
2023-04-21 11:46:53 +00:00
h00die-gr3y
4131f1abf1
Fixed some bugs in module and added documentation
2023-04-20 08:23:55 +00:00
bwatters
6ae00877ed
Land #17854 , VMware Workspace One Access mr_me Hekate RCE
...
Merge branch 'land-17854' into upstream-master
2023-04-18 09:49:41 -05:00
Jack Heysel
78e80f8e32
docs fix
2023-04-17 16:41:35 -04:00
Jack Heysel
162fe21659
Documentation copy pasta correction
2023-04-17 16:39:57 -04:00
jheysel-r7
d4b668e27b
Update documentation/modules/exploit/linux/http/vmware_workspace_one_access_vmsa_2022_0011_chain.md
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2023-04-17 16:36:31 -04:00
Jack Heysel
08788d3d82
Update logging with rc script info
2023-04-13 14:28:15 -04:00
Jack Heysel
056b0a0e8b
LPE and doc updates
2023-04-07 10:41:10 -04:00
Jack Heysel
b7456e20d5
VMware Workspace One Access mr_me Hekate exploit
2023-04-05 23:10:34 -04:00
h00die-gr3y
bcef7ee357
updated module and documentation with SUDO option
2023-03-26 18:31:25 +00:00
h00die-gr3y
0c87b0b7cf
removed Windows reference from documentation
2023-03-23 10:34:51 +00:00
h00die-gr3y
820e625baa
updated documentation
2023-03-22 21:17:54 +00:00
h00die-gr3y
8226fb9022
fixed small typos documentation
2023-03-22 20:04:34 +00:00
h00die-gr3y
28459c286a
init commit module and documentation
2023-03-22 18:40:50 +00:00
Grant Willcox
7217a60e41
Update documentation to provide better installation instructions
2023-03-14 10:13:27 -05:00
Grant Willcox
4a4b2a28d2
Update documentation to provide better installation instructions
2023-03-14 09:21:08 -05:00
Grant Willcox
3bd4c15704
Correct architecture and do final fixes
2023-03-13 15:46:42 -05:00
Jack Heysel
2a9ddae531
Updated description
2023-03-09 17:43:14 -05:00
Jack Heysel
06e7c3d702
Responded to comments updated docs
2023-03-09 17:39:53 -05:00
Grant Willcox
100cfbccf9
Fix up some more slight things in documentation. Also tidy up some things in the module
2023-03-08 17:25:56 -06:00
Grant Willcox
eeb30d2426
Fix up some typos etc from review in documentation
2023-03-08 16:44:06 -06:00
Jack Heysel
dfae7e2fc4
FortiNAC keyUploap.jsp arbitrary file write CVE-2022-39952
2023-03-08 14:06:28 -05:00
Jack Heysel
3abd62076c
Land #17624 , Oracle E-Business Suite Module
...
This pull request adds an exploit module for CVE-2022-21587
an arbitrary file upload vulnerability in Oracle Web Applications
Desktop Integrator as shipped with 12.2.3 through to 12.2.11
which results in RCE
2023-02-28 17:04:20 -05:00
Jack Heysel
5311a491e9
Froxlor 2.0.7 is actually vulnerable too
2023-02-24 13:18:34 -05:00
space-r7
9621f77bac
Land #17640 , add Froxlor RCE
2023-02-22 12:11:38 -06:00
sfewer-r7
690abcfe1f
improve the documentation, mention some steps required during setup.
2023-02-22 09:42:11 +00:00
Jack Heysel
f6ec3855b3
Removed space at EOL
2023-02-22 00:35:42 -05:00
Jack Heysel
0c8df1a67b
Updated docs and module suggetsions
2023-02-22 00:33:40 -05:00
Grant Willcox
38d8b70873
Make msftidy_docs.rb happy and then also clarify where to find software download links
2023-02-17 14:56:51 -06:00