Yann Castel
|
dca4f3f471
|
fix download link
|
2021-06-17 15:19:42 +02:00 |
|
Yann Castel
|
0fda6b348d
|
initial commit
|
2021-06-17 15:15:59 +02:00 |
|
William Vu
|
637e9cff48
|
Update vmware_vrops_mgr_ssrf_rce documentation
|
2021-05-06 18:30:20 -05:00 |
|
Christophe De La Fuente
|
7f667fab4e
|
Update documentation
|
2021-05-04 14:12:48 +02:00 |
|
Mehmet INCE
|
e3662034ea
|
Update documentation/modules/exploit/linux/http/gravcms_exec.md
Making consistent with documentation template.
Co-authored-by: cdelafuente-r7 <56716719+cdelafuente-r7@users.noreply.github.com>
|
2021-05-03 20:38:17 +03:00 |
|
Mehmet INCE
|
686f8c309a
|
Fix the module documentation
|
2021-05-03 12:17:24 +03:00 |
|
Mehmet INCE
|
9e04805c0e
|
Adding check method to gravcms exec
|
2021-05-03 11:14:43 +03:00 |
|
Mehmet INCE
|
e3d05395de
|
Add GravCMS exec
|
2021-05-03 11:14:42 +03:00 |
|
William Vu
|
a2047071e2
|
Refine vmware_vrops_mgr_ssrf_rce module doc again
I've used this Markdown trick before, but I wasn't sure it'd work here.
|
2021-05-02 21:18:53 -05:00 |
|
William Vu
|
8b4a763eb1
|
Add words to vmware_vrops_mgr_ssrf_rce module doc
I had dropped this sentence for brevity, but now I realize it's useful.
|
2021-05-02 17:24:58 -05:00 |
|
William Vu
|
a79ddb5b3c
|
Fix "apache_ofbiz_deserialiation" typo in its doc
|
2021-05-01 17:23:52 -05:00 |
|
Spencer McIntyre
|
994825dcc9
|
Land #15090, Add exploit for CVE-2021-22502
|
2021-04-29 14:09:28 -04:00 |
|
Shelby Pace
|
a4af80d3e1
|
Land #15005, add VMware vRealize SSRF RCE
|
2021-04-27 09:19:55 -05:00 |
|
Shelby Pace
|
363db0e271
|
Land #14977, add Apache Druid js rce
|
2021-04-26 12:01:19 -05:00 |
|
Li Hua
|
9b984ddbed
|
Update microfocus_obr_cmd_injection.md
|
2021-04-25 11:02:54 +08:00 |
|
Pedro Ribeiro
|
651a34af53
|
add sploit for MF OBR cmd injection
|
2021-04-23 21:04:36 +07:00 |
|
William Vu
|
a62d1dfbcd
|
Add some details back in
|
2021-04-21 16:02:21 -05:00 |
|
William Vu
|
5111caf536
|
Address @gwillcox-r7 review
New words from @gwillcox-r7.
|
2021-04-21 13:10:21 -05:00 |
|
William Vu
|
d4041cb5f4
|
Add module doc
|
2021-04-21 10:42:10 -05:00 |
|
Grant Willcox
|
e0f13e44d1
|
Land #14699, Add Nagios XI snmptrap RCE and docs (CVE-2020-5792)
|
2021-04-20 14:30:45 -05:00 |
|
Grant Willcox
|
13d3e4ae89
|
Add in CentOS 7 with NagiosXI 5.6.5 scenario
|
2021-04-20 14:12:56 -05:00 |
|
Grant Willcox
|
f241a050b8
|
Apply review comments and fixes to documentation and the module
|
2021-04-20 12:38:34 -05:00 |
|
Grant Willcox
|
4ac9304ca2
|
Land #14968 - Add Nagios XI Mibs.php Authenticated RCE module and docs (CVE-2020-5791)
|
2021-04-16 14:37:15 -05:00 |
|
Grant Willcox
|
496e074ec8
|
Add in fixes to documentation and module from review
|
2021-04-16 13:14:17 -05:00 |
|
William Vu
|
9e6f425427
|
Move exploit/linux/http/citrix_dir_traversal_rce
To exploit/freebsd/http/citrix_dir_traversal_rce. It's actually FreeBSD.
|
2021-04-15 19:13:25 -05:00 |
|
Grant Willcox
|
832ca92f42
|
Land #14700, Add Nagios XI Plugins Filename Authenticate RCE module and docs (CVE-2020-35578)
|
2021-04-14 16:58:55 -05:00 |
|
Grant Willcox
|
61395f3cb1
|
Update scenarios in documentation and also update the module to handle cases where the version number may not be in a format that Rex::Text can immediately handle.
|
2021-04-14 16:32:53 -05:00 |
|
Grant Willcox
|
154e237edd
|
Add in fixes to documentation and module that were covered in the review process
|
2021-04-14 15:33:42 -05:00 |
|
Grant Willcox
|
a59e7e196d
|
Land #14701, Rename Nagios XI authenticated RCE module and integrate Nagios XI mixin
|
2021-04-13 18:58:29 -05:00 |
|
Grant Willcox
|
9379f0356b
|
Add in 5.6.5 exploitation scenario to documentation
|
2021-04-13 17:42:47 -05:00 |
|
Grant Willcox
|
0aada27128
|
Update the documentation to account for the fact that the plugin name has to be check_ping and also update the module to randomize some of the fields where possible.
|
2021-04-13 17:15:34 -05:00 |
|
Grant Willcox
|
cdd589f592
|
Update documentation to wrap some overly long lines to meet msftidy_docs.rb requirements.
|
2021-04-13 16:36:38 -05:00 |
|
Grant Willcox
|
ead9d73dc5
|
Add in fixes from review to documentation and module
|
2021-04-13 16:34:13 -05:00 |
|
je5442804
|
942d9e6bf2
|
Update apache_druid_js_rce.md
|
2021-04-10 10:43:00 +08:00 |
|
Shelby Pace
|
a36030bcb7
|
add AutoCheck and usage of TARGETURI option
remove CheckCmd from docs
|
2021-04-09 12:08:25 -05:00 |
|
je5442804
|
2d1b73f1f2
|
Update apache_druid_js_rce.md
|
2021-04-09 19:48:45 +08:00 |
|
je5442804
|
d6f1bd7dec
|
Update docs-docker setup
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 08:29:58 +08:00 |
|
je5442804
|
d49b28eeb7
|
Update docs
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 08:29:30 +08:00 |
|
je5442804
|
f30a2fd756
|
Update docs
Co-authored-by: Shelby Pace <40177151+space-r7@users.noreply.github.com>
|
2021-04-09 08:29:15 +08:00 |
|
adfoster-r7
|
258b9d3e28
|
Land #14998, Change CVE references from CVE Details to NVD
|
2021-04-07 10:10:55 +01:00 |
|
William Vu
|
4020813b42
|
Correct broken or redundant CVE references
|
2021-04-05 13:06:50 -05:00 |
|
Shelby Pace
|
cfc6b0a8ba
|
Land #14971, add Apache OFBiz SOAP Deser rce
|
2021-04-05 11:44:40 -05:00 |
|
Shelby Pace
|
a803e1e932
|
remove spare comma
|
2021-04-05 09:33:20 -05:00 |
|
kalba-security
|
34a5f7906c
|
Rebase so we can use the latest mixin code,update the version range, update docs
|
2021-04-01 13:29:44 -04:00 |
|
kalba-security
|
faab100d9a
|
Add Nagios XI Mibs.php Authenticated RCE module and docs
|
2021-04-01 13:06:33 -04:00 |
|
kalba-security
|
f76f58eb51
|
Rebase, use latest mixin code in check, update version and docs
|
2021-04-01 12:43:44 -04:00 |
|
kalba-security
|
dd5c747584
|
Add Nagios XI snmptrap RCE and docs
|
2021-04-01 12:26:06 -04:00 |
|
kalba-security
|
02b9e5c939
|
rebase, use latest mixin code, correct vulnerable versions, update docs
|
2021-04-01 12:18:46 -04:00 |
|
kalba-security
|
3b7e612541
|
Add Nagios XI Plugins Filename Authenticate RCE module and docs
|
2021-04-01 11:23:52 -04:00 |
|
kalba-security
|
2df90d8d23
|
Rebase, rename module to nagios_xi_plugins_check_plugin_authenticated_rce, update check to take advantage of mixin, minor improvements
|
2021-04-01 11:07:49 -04:00 |
|