35e4d829d8
Land #17164 , add THEME_DIR option to wp_crop_rce
2022-10-25 12:23:50 -05:00
7c64b0ba93
add option in documentation and add notes
2022-10-25 12:22:00 -05:00
3bf4bd7d7d
Land #17162 , add RCE module for CVE-2022-35914
...
This PR adds an RCE module for the php code injection
present in GLPI versions 10.0.2 and below
2022-10-24 12:18:34 -04:00
4cfbae63ac
Land #17114 , Add exploit for CVE-2022-41352 (zimbra cpio)
2022-10-20 15:10:42 +02:00
c89569d88c
Fix the doc to make msftidy_docs.rb happy
2022-10-20 14:33:40 +02:00
73c879a854
Add docs
2022-10-19 17:59:54 -05:00
d8a5629cf4
Add Zimbra-installation notes
2022-10-19 10:05:20 -07:00
56d6f7747b
Remove some old code and update documentation with version info
2022-10-19 10:02:29 -07:00
c43272985e
Land #17141 , Zimbra Postfix priv esc
2022-10-19 10:33:37 +02:00
fa67b6973d
Documentation fix to follow the template
2022-10-18 16:09:57 +02:00
dea3f72f6b
Resolve feedback - get rid of unnecessary directory, add CVE number, let the user choose the path
2022-10-17 15:00:56 -07:00
26ed9bb053
Update documentation/modules/exploit/linux/http/fortinet_authentication_bypass_cve_2022_40684.md
...
Co-authored-by: Brendan <bwatters@rapid7.com >
2022-10-17 22:49:57 +02:00
aece783cee
Added reference to user auto-detect method
2022-10-17 01:11:27 +02:00
0b09e564f1
Improved documentation
2022-10-16 14:25:54 +02:00
835b44ca7a
Added documentation
2022-10-16 13:42:21 +02:00
a2a2dcbf6f
Check in zimbra_postfix_priv_esc.rb
2022-10-14 13:21:41 -07:00
a3e32ffafa
Add TARGET 0 to documentation
2022-10-12 20:00:33 -05:00
e9f54aa5b8
Update documentation with better wording, and add randomization of parameter name to module along with cleanup code for deleting uploaded files
2022-10-12 19:16:52 -05:00
9652823393
Reverted check method to upload shell
2022-10-12 19:16:44 -05:00
3c27c8e5aa
Condensed payload, changed base64 encoding to hex
2022-10-12 19:12:35 -05:00
e4eac96b4b
Add Module for pfSense pfBlockerNG unauth RCE as root
2022-10-12 19:12:22 -05:00
f92d913f0c
Land #17116 , Adding CVE-2022-22947 Spring Cloud Gateway RCE Exploit
2022-10-12 11:53:47 -05:00
487a26ee0f
Add in some missing info to examples, set default port, and update IOCs to note we include some IOCs in the logs
2022-10-12 11:19:47 -05:00
9abaa00b9e
Adding some changes to documentation as per review comments
2022-10-12 11:36:35 -04:00
e75438d0b2
Documentation fix and minor fixes
...
Fixed the documentation according to msftidy's suggestion and removed a few unessary parts of code
2022-10-11 18:17:52 -04:00
45aa09411e
First round of edits from review
2022-10-11 15:46:04 -05:00
412a07df54
Fixed #16674
2022-10-07 14:35:21 -04:00
c8cd6a7864
Adding CVE-2022-22947 Spring Cloud Gateway RCE Exploit
...
CVE-2022-22947 exploits Spring Cloud Gateway. The module has been tested with Spring Cloud gateway version 3.1.0 on Linux kali 5.18.0-kali5-amd64
2022-10-06 15:48:36 -04:00
48dd4693df
Add docs for CVE-2022-41352 (zimbra cpio), and fix some text
2022-10-06 10:46:48 -07:00
0145264046
Land #17093 , add Enlightenment priv esc module
...
This PR adds a local priv esc for Enlightenment on Ubuntu
which exploit a simple cmd injection
2022-10-04 14:09:18 -04:00
63af4e3702
Land #17067 , add remote mouse rce
2022-10-04 11:40:33 -05:00
b7073df1e0
review comments
2022-10-03 16:53:14 -04:00
68b2aec6fb
review comments
2022-10-03 15:25:53 -04:00
c6e18ee469
cve-2022-1329
2022-10-02 15:59:58 -04:00
e78babea90
cve-2022-37706
2022-10-01 11:24:29 -04:00
76c6632305
Land #16673 , qdPM 9.1 - Authenticated Remote Code Execution (CVE-2020-7246)
...
Merge branch 'land-16673' into upstream-master
2022-09-29 09:46:27 -05:00
379f303ea8
Land #17061 , Mobile Mouse Server RCE
...
This PR includes a module that uses default
configuration in Unified Remote to spawn a
run prompt and return a shell.
2022-09-28 10:48:41 -04:00
e27dbd2787
Land #16794,Add exploit for CVE-2022-34918
...
Merge branch 'land-16794' into upstream-master
2022-09-27 16:37:52 -05:00
391a27b08c
remote mouse rce
2022-09-27 16:37:42 -04:00
a39b1c9fe5
msftidy_docs
2022-09-26 15:56:43 -04:00
61f576d3e1
mobile mouse server exploit
2022-09-26 15:45:42 -04:00
0908006466
Land #16985 , wifi mouse rce - CVE-2022-3218
2022-09-23 14:46:49 -05:00
b62f163696
Update documentation on module and exploit a little more to make things a bit clearer
2022-09-23 14:08:18 -05:00
2b5e85cd27
Land #17012 , Veritas Backup Agent RCE
...
This module exploits a chain of the vulnerabilities CVE-2021-27876,
CVE-2021-27877 and CVE-2021-27878 in Veritas Backup Exec Agent which
leads to remote code execution with privileges of system or root user
2022-09-23 12:31:46 -04:00
d5dcca899d
Fix description scenario
2022-09-23 10:51:36 +03:00
eb516f402e
wifi mouse doc updates
2022-09-21 16:38:50 -04:00
32402c0e6d
wifi mouse doc updates
2022-09-21 16:35:08 -04:00
605db0160d
Fix up documentation
2022-09-21 15:02:04 -05:00
415383b48d
Land #17042 , Add exploit for CVE-2022-36804
2022-09-21 13:07:32 -04:00
4943d86ec6
Land #16989 , Unified Remote RCE
2022-09-21 14:06:33 +02:00
space-r7