159b2bb6dc
Land #19805 , new module for LibreNMS Authenticated RCE
2025-01-20 15:33:37 +01:00
54bd55b186
Update vulnerable version
2025-01-18 10:18:10 +09:00
ca304ae5c4
Avoid to split payload
2025-01-17 21:21:48 +09:00
4e53c967c2
Update message
2025-01-16 12:59:18 +09:00
9bd8590b99
Merge pull request #19793 from sfewer-r7/CVE-2024-55956
...
Cleo LexiCom, VLTrader, and Harmony Unauthenticated Remote Code Execution (CVE-2024-55956)
2025-01-15 15:04:45 -06:00
0630187870
Land #19798 , fixing link and code cleanup
...
Fix nsfw link in mssql_clr_payload, and rubocop the module
2025-01-15 16:41:34 +01:00
10be7a80cf
Update document
2025-01-13 10:56:16 +09:00
93bb7fa6c5
Add LibreNMS Authenticated RCE (CVE-2024-51092)
2025-01-12 12:28:07 +09:00
58c359293d
Merge pull request #19796 from h00die/move_acronis
...
move acronis_cyber_protect_unauth_rce_cve_2022_3405 inside the http folder
2025-01-09 18:33:22 -08:00
ce9f1b9101
fix nsfw link
2025-01-09 21:23:38 -05:00
5374c7b362
Merge pull request #19676 from h00die/needrestart
...
Ubuntu needrestart LPE (CVE-2024-48990)
2025-01-09 17:02:54 -08:00
a6ba7bf9c2
Merge pull request #19734 from h00die/runc_arch
...
arch linux compatibility for runc priv esc
2025-01-09 16:45:02 -08:00
1a839c0b33
move acronis_cyber_protect_unauth_rce_cve_2022_3405 inside the http folder
2025-01-09 16:30:51 -05:00
437c9fc99e
review of ubuntu_needrestart_lpe
2025-01-09 16:23:09 -05:00
5cfaf4871d
Land #19738 , Pandora FMS auth RCE (CVE-2024-11320)
...
Land #19738 , Pandora FMS auth RCE (CVE-2024-11320)
2025-01-09 17:16:58 +01:00
fea171357a
Land #19771 , Add Selenium Firefox RCE module (CVE-2022-28108)
...
Land #19771 , Add Selenium Firefox RCE module (CVE-2022-28108)
2025-01-08 13:44:33 +01:00
0ff2835bb7
Merge pull request #19770 from h00die-gr3y/netis-unauth-rce
...
Netis Router Exploit Chain Reactor [CVE-2024-48455, CVE-2024-48456 and CVE-2024-48457]
2025-01-07 17:24:37 -08:00
7ead96a740
Land #19769 , Add Selenium Chrome RCE module (CVE-2022-28108)
...
Land #19769 , Add Selenium Chrome RCE module (CVE-2022-28108)
2025-01-07 11:10:37 +01:00
9a6d074463
Apply suggestions from code review
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2025-01-07 09:25:41 +01:00
3ff685b70e
fix three typos
2025-01-06 09:42:21 +00:00
fe7334fae2
add in CVE-2024-55956 exploit
2025-01-06 09:26:44 +00:00
710ae1198a
Apply suggestions from #19769
2025-01-04 10:12:57 +09:00
3b947cf1c5
Update vulnerable version
2025-01-02 09:57:00 +09:00
e70b6c777f
Merge pull request #19663 from sfewer-r7/CVE-2024-0012
...
Exploit module for PAN-OS management interface unauth RCE (CVE-2024-0012 + CVE-2024-9474)
2024-12-30 10:29:10 -08:00
f436f44d83
Merge pull request #19698 from h00die/obsidian
...
obsidian community plugin persistence module
2024-12-30 09:06:58 -08:00
38d8d35dc5
Update doc
2024-12-30 13:50:13 +09:00
bbc282e90c
Improve check
2024-12-30 13:36:15 +09:00
6e0c945a42
Improve check for version 4
2024-12-30 13:00:25 +09:00
862f2ee6c6
Added documentation and some small module updates
2024-12-29 20:05:05 +00:00
68ae0d40ea
Add timeout option
2024-12-29 13:02:32 +09:00
e4111cdc97
Update to use FETCH_DELETE
2024-12-29 12:33:39 +09:00
86bd1c2938
Minor improve
...
* enable fetch_delete
* avoid using single quotes
* update doc
2024-12-29 12:19:19 +09:00
af432a3b72
Improve stability
2024-12-29 12:00:09 +09:00
90d9bb769d
Update vulnerable version
2024-12-28 15:53:31 +09:00
7ecc1cb87b
Update vulnerable version
2024-12-28 14:39:24 +09:00
340d4bcd58
Add selenium firefox rce module
2024-12-28 12:27:18 +09:00
e3d68d4164
Update author and fix version detection
2024-12-28 11:18:41 +09:00
64b1832567
Update not to use selenium-webdriver
2024-12-27 13:00:20 +09:00
82ebdf1f9d
Improve docs
2024-12-26 23:54:47 +09:00
acbcd9f3b1
Fix ubuntu version
2024-12-26 23:51:40 +09:00
06af9b0b3d
Add selenium chrome rce module
2024-12-26 23:44:11 +09:00
7c8116a2cb
Third release of module + Documentation
2024-12-22 11:41:05 +00:00
7ddffc790c
Merge pull request #19460 from gardnerapp/game_overlay
...
Land #19460 , CVE-2023-2640, CVE-2023-32629 Game Overlay Ubuntu Privilege Escalation
2024-12-18 14:44:57 -06:00
b7f477172f
Update docs to reflect recent changes
2024-12-18 14:08:10 -06:00
531ed162db
Land #19733 , exploit module for CVE-2022-40471 - unauthenticated RCE
2024-12-18 12:44:34 +01:00
65bb3cc990
typo 2
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-12-17 17:26:20 +00:00
3ed2b5916a
fix typo
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-12-17 17:26:00 +00:00
6f9982db54
Land #19647 Added module for WSO2 API Manager RCE
...
Adds an exploit module for a vulnerability in the 'Add API Documentation' feature of WSO2 API Manager and allows malicious users with specific permissions to upload arbitrary files to a user-controlled server location. This flaw allows for RCE on the target system.
2024-12-16 07:27:23 -08:00
af462f7dcf
arch linux compatibility for runc priv esc
2024-12-16 05:52:29 -05:00
d196591845
Modified documentation
2024-12-16 15:47:30 +05:30
Martin Sutovsky