 cgranleese-r7
|
d25fd0825c
|
Merge pull request #20458 from adfoster-r7/fix-rendering-issue-on-kerberos-docs
Fix rendering issue on kerberos docs
|
2025-08-11 13:10:59 +01:00 |
|
|
adfoster-r7
|
093d9f9a99
|
Fix rendering issue on kerberos docs
|
2025-08-11 12:13:53 +01:00 |
|
|
msutovsky-r7
|
9caa2be9a2
|
Land #20399, adds module for Pandora ITSM authenticated RCE (CVE-2025-4653)
Pandora ITSM auth RCE [CVE-2025-4653]
|
2025-08-07 08:37:45 +02:00 |
|
|
Brendan
|
b6dc0860e7
|
Merge pull request #20409 from sfewer-r7/sharepoint-hax
Exploit module for Microsoft SharePoint ToolPane Unauthenticated RCE (CVE-2025-53770 and CVE-2025-53771)
|
2025-08-06 14:24:28 -05:00 |
|
|
sfewer-r7
|
0a923a611d
|
reword the language around our usage of CVE-2025-53770 to make it clear that this module is leveraging the authentication bypass for both CVE-2025-49706 and CVE-2025-53771, and the unsafe deserialization for CVE-2025-49704.
|
2025-08-06 15:33:57 +01:00 |
|
|
msutovsky-r7
|
c99702c8bf
|
Land #20446, adds module for ICTBroadcast Unauthenticated RCE (CVE-2025-2611)
Add ICTBroadcast Unauthenticated Remote Code Execution (CVE-2025-2611)
|
2025-08-05 09:29:36 +02:00 |
|
|
Chocapikk
|
6ff04da954
|
Add LPE suggestions in documentation
|
2025-08-04 18:33:28 +02:00 |
|
|
Chocapikk
|
7d744c2a45
|
Update documentation
|
2025-08-04 17:51:42 +02:00 |
|
|
Valentin Lobstein
|
c8f756dd37
|
Update documentation/modules/exploit/linux/http/ictbroadcast_unauth_cookie.md
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com>
|
2025-08-04 17:02:12 +02:00 |
|
|
msutovsky-r7
|
5fd6184494
|
Land #20423, adds malicious XDG Desktop fileformat module
Add Malicious XDG Desktop File module
|
2025-08-04 11:44:02 +02:00 |
|
|
bcoles
|
a7ab23d083
|
Add Malicious XDG Desktop File module
|
2025-08-04 19:23:02 +10:00 |
|
|
Chocapikk
|
50ef5edd90
|
Add Unauthenticated ICTBroadcast Remote Code Execution (CVE-2025-2611)
|
2025-08-02 19:46:14 +02:00 |
|
|
Jack Heysel
|
de15d1e449
|
Minor doc update
|
2025-07-30 15:08:14 -07:00 |
|
|
Jack Heysel
|
e88883c82b
|
ESC9, ESC10 ESC16 exploit support
|
2025-07-30 15:08:14 -07:00 |
|
|
Jack Heysel
|
8179de6cea
|
ESC9 ESC10 and ESC16 detection
|
2025-07-30 11:46:57 -07:00 |
|
|
h00die-gr3y
|
4b52708357
|
update module + documentation based on review comments
|
2025-07-30 11:39:20 +00:00 |
|
|
msutovsky-r7
|
f4622d802e
|
Land #20406, adds malicious Windows Script Host VBScript fileformat module
Add Malicious Windows Script Host VBScript (.vbs) File module
|
2025-07-28 13:58:07 +02:00 |
|
|
msutovsky-r7
|
12340ef6b5
|
Land #20398, adds malicious Windows Script Host JScript fileformat module
Add Malicious Windows Script Host JScript (.js) File module
|
2025-07-28 13:51:26 +02:00 |
|
|
sfewer-r7
|
3237151512
|
add in the documentation
|
2025-07-25 14:40:12 +01:00 |
|
|
bcoles
|
cbc03eaeeb
|
Add Malicious Windows Script Host VBScript (.vbs) File module
|
2025-07-25 18:46:47 +10:00 |
|
|
bcoles
|
44c61a7e4d
|
Add Malicious Windows Script Host JScript (.js) File module
|
2025-07-25 18:43:33 +10:00 |
|
|
msutovsky-r7
|
afeded56aa
|
Land #20384, adds module for malicious Windows Registration Entries files
Add Malicious Windows Registration Entries (.reg) File module
|
2025-07-24 12:29:34 +02:00 |
|
|
jheysel-r7
|
05f2012ccc
|
Merge pull request #20338 from Chocapikk/xorcom
Add auxiliary and exploit modules for Xorcom CompletePBX 5.2.35 CVEs (2025-2292, 30004, 30005)
|
2025-07-22 08:19:36 -07:00 |
|
|
h00die-gr3y
|
58704e9eab
|
init module + documentation
|
2025-07-20 19:06:01 +00:00 |
|
|
jheysel-r7
|
00c8c773a3
|
Merge pull request #20375 from Chocapikk/wp_photo_gallery_sqli
WP Photo Gallery by 10Web Unauthenticated SQLi (CVE-2022-0169)
|
2025-07-18 16:37:14 -07:00 |
|
|
adfoster-r7
|
8fe815da6f
|
Merge pull request #20394 from cgranleese-r7/update-docs-to-reflect-new-default-prompt
Updates docs to reflect new default prompt
|
2025-07-17 12:53:02 +01:00 |
|
|
cgranleese-r7
|
adff497bd2
|
Updates msf5 as well
|
2025-07-17 11:51:29 +01:00 |
|
|
Diego Ledda
|
18d61d3763
|
Merge pull request #20356 from msutovsky-r7/exploit/pandorafms_netflow_rce
Add module for authenticated PandoraFMS command injection (CVE-2025-5306)
|
2025-07-17 11:58:54 +02:00 |
|
|
Diego Ledda
|
ca9535e39a
|
Update pandora_fms_auth_netflow_rce.md
|
2025-07-17 11:29:07 +02:00 |
|
|
cgranleese-r7
|
469f102596
|
Updates docs to reflect new default prompt
|
2025-07-17 09:53:40 +01:00 |
|
|
Chocapikk
|
b06903810c
|
feat(xorcom): add shared CompletePBX mixin, refactor modules, update docs
|
2025-07-16 21:25:17 +02:00 |
|
|
Valentin Lobstein
|
eb81de6620
|
Update documentation/modules/auxiliary/scanner/http/xorcom_completepbx_diagnostics_file_read.md
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com>
|
2025-07-16 19:32:52 +02:00 |
|
|
Martin Sutovsky
|
f773e3aef9
|
Updates docs
|
2025-07-16 12:25:28 +02:00 |
|
|
jheysel-r7
|
914f874e12
|
Merge pull request #20216 from sjanusz-r7/add-graphql-aux-scanner-module
Add GraphQL Auxiliary Scanner module
|
2025-07-15 10:39:44 -07:00 |
|
|
bcoles
|
c5ec45452a
|
Add Malicious Windows Registration Entries (.reg) File module
|
2025-07-13 23:41:59 +10:00 |
|
|
Chocapikk
|
622072bba4
|
WP Photo Gallery by 10Web Unauthenticated SQLi (CVE-2022-0169)
|
2025-07-10 13:22:19 +02:00 |
|
|
Brendan
|
36675ccd9a
|
Merge pull request #20349 from sfewer-r7/0day-cve-2024-51978
Add auxiliary module for multiple Brother devices authentication bypass (CVE-2024-51978)
|
2025-07-09 13:07:25 -05:00 |
|
|
sfewer-r7
|
34952d73f6
|
display the AuthCookie if one is received
|
2025-07-09 10:15:30 +01:00 |
|
|
msutovsky-r7
|
ffdfa07954
|
Land #20354, adds module for ISPConfig code injection (CVE-2023-46818)
Add module for ISPConfig Code Injection (CVE-2023-46818)
|
2025-07-09 07:47:56 +02:00 |
|
|
Martin Sutovsky
|
ffa2152a6a
|
Updates docs
|
2025-07-07 11:56:53 +02:00 |
|
|
Valentin Lobstein
|
b9ee9ba88c
|
Update wingftp_null_byte_rce.md
|
2025-07-03 19:43:06 +02:00 |
|
|
Valentin Lobstein
|
ef3ddec3dd
|
Update documentation/modules/exploit/multi/http/wingftp_null_byte_rce.md
Co-authored-by: Christophe De La Fuente <56716719+cdelafuente-r7@users.noreply.github.com>
|
2025-07-03 19:41:34 +02:00 |
|
|
Chocapikk
|
5b268bd4b4
|
Fix documentation and typos
|
2025-07-01 22:50:01 +02:00 |
|
|
Chocapikk
|
1a4a15e83b
|
Add WingFTP unauthenticated RCE (CVE-2025-47812)
|
2025-07-01 19:15:15 +02:00 |
|
|
sfewer-r7
|
a7e4b5601f
|
update the docs to use AUTO for the enum option
|
2025-07-01 15:06:44 +01:00 |
|
|
Martin Sutovsky
|
5c8d918e3d
|
Fixes documentation
|
2025-06-28 17:07:44 +02:00 |
|
|
happybear-21
|
840ae0f317
|
resolved: issues
|
2025-06-27 19:42:35 +05:30 |
|
|
Diego Ledda
|
a7b038b822
|
Merge pull request #20341 from msutovsky-r7/exploit/skyvern_ssti_rce
Adds module for Skyvern SSTI (CVE-2025-49619)
|
2025-06-27 14:14:40 +02:00 |
|
|
Martin Sutovsky
|
37e8780a6b
|
Code refactor, docs
|
2025-06-27 10:26:31 +02:00 |
|
|
Martin Sutovsky
|
7b845fa3df
|
Fixed documentation issues
|
2025-06-26 12:08:51 +02:00 |
|