e78babea90
cve-2022-37706
2022-10-01 11:24:29 -04:00
76c6632305
Land #16673 , qdPM 9.1 - Authenticated Remote Code Execution (CVE-2020-7246)
...
Merge branch 'land-16673' into upstream-master
2022-09-29 09:46:27 -05:00
379f303ea8
Land #17061 , Mobile Mouse Server RCE
...
This PR includes a module that uses default
configuration in Unified Remote to spawn a
run prompt and return a shell.
2022-09-28 10:48:41 -04:00
e27dbd2787
Land #16794,Add exploit for CVE-2022-34918
...
Merge branch 'land-16794' into upstream-master
2022-09-27 16:37:52 -05:00
a39b1c9fe5
msftidy_docs
2022-09-26 15:56:43 -04:00
61f576d3e1
mobile mouse server exploit
2022-09-26 15:45:42 -04:00
0908006466
Land #16985 , wifi mouse rce - CVE-2022-3218
2022-09-23 14:46:49 -05:00
b62f163696
Update documentation on module and exploit a little more to make things a bit clearer
2022-09-23 14:08:18 -05:00
2b5e85cd27
Land #17012 , Veritas Backup Agent RCE
...
This module exploits a chain of the vulnerabilities CVE-2021-27876,
CVE-2021-27877 and CVE-2021-27878 in Veritas Backup Exec Agent which
leads to remote code execution with privileges of system or root user
2022-09-23 12:31:46 -04:00
d5dcca899d
Fix description scenario
2022-09-23 10:51:36 +03:00
eb516f402e
wifi mouse doc updates
2022-09-21 16:38:50 -04:00
32402c0e6d
wifi mouse doc updates
2022-09-21 16:35:08 -04:00
605db0160d
Fix up documentation
2022-09-21 15:02:04 -05:00
415383b48d
Land #17042 , Add exploit for CVE-2022-36804
2022-09-21 13:07:32 -04:00
4943d86ec6
Land #16989 , Unified Remote RCE
2022-09-21 14:06:33 +02:00
f2e003cdb0
add documentation
2022-09-20 18:45:48 -05:00
271171f6d2
unified now with invisible feature
2022-09-18 19:02:59 -04:00
52ff168c5e
Land #16914 , Add PAN-OS auth command injection module (CVE-2020-2038)
2022-09-15 17:58:07 +02:00
1c99daa836
Updated error handling
2022-09-13 12:40:59 -04:00
efbe06f944
Add module Veritas Backup Exec Agent Remote Code Execution
2022-09-13 18:18:52 +03:00
66bbe98f5f
wifi remote with better cmd stagers
2022-09-09 05:57:36 -04:00
ae91cfa9c5
unified_remote exploit
2022-09-08 17:09:31 -04:00
2af5b22272
Land #16983 , firefox_xpi_bootstrapped_addon: Add notes, description, references, docs
...
Merge branch 'alnd-16983' into upstream-master
2022-09-08 08:23:32 -05:00
a11569fc53
Land #16944 , add Apach Spark RCE
2022-09-07 13:02:27 -05:00
f71ec84f9e
updated documentation
2022-09-06 19:36:11 +00:00
c6d453f5b9
fix docs
2022-09-05 08:23:40 -04:00
3f7e0667f6
wifi mouse rce
2022-09-05 08:16:49 -04:00
a7d2145e8d
firefox_xpi_bootstrapped_addon: Add notes, description, references, docs
2022-09-05 02:23:37 +10:00
8ba621a291
Land #16923 , Cisco ASA-X with FirePOWER Services Authenticated Command Injection (CVE-2022-20828)
2022-09-02 18:37:37 +02:00
6965115c8e
Land #16786 , Zyxel Firewall LPE (CVE-2022-30526)
2022-08-31 08:40:23 -04:00
e8083c6fb1
commit module and documentation
2022-08-26 15:39:18 +00:00
21c4e3ce3d
commit module and documentation
2022-08-26 15:05:39 +00:00
ae5a9bd41b
Land #16734 , Add rtf support to cve-2022-30190
...
Add rtf support to cve-2022-30190 AKA Follina
2022-08-25 17:26:46 -04:00
68eae1664e
Tweak the follina docs
2022-08-25 17:10:59 -04:00
2369e1562c
Add in documentation on how to install the target from scratch
2022-08-23 11:44:09 -05:00
abd392c372
Add in changes from review
2022-08-23 11:44:03 -05:00
5b61b5097f
RuboCop documentation, add in Verification steps, and fix up minor issues
2022-08-23 11:44:02 -05:00
0e6647c7f9
Add scenarios
2022-08-23 11:43:53 -05:00
97f8ec9367
Documentation, output cleanup
2022-08-23 11:43:51 -05:00
847cd97927
Land #16925 , Fix a payload bug in unrar_cve_2022_30333
2022-08-23 12:59:37 +02:00
13d8c41f98
Clean up and better documentation
2022-08-22 11:46:50 -07:00
07fdc1f1ec
Land #16907 , ms10_092_schelevator: Cleanup
2022-08-22 11:53:02 -04:00
b4fe31757d
Added module for CVE-2022-20828
2022-08-19 12:29:37 -07:00
97bce45e69
Land #16915 , Add exploit for CVE-2022-23277 (Exchange RCE)
2022-08-19 11:11:46 -05:00
666a3efcfd
ms10_092_schelevator: Cleanup
2022-08-19 15:19:28 +10:00
d49b74d164
Land #16809 , Add exploit module for Advantech iView command injection - CVE-2022-2143
2022-08-18 17:19:14 +02:00
7c1dd17c86
Add a missing verison, fix typos
2022-08-17 17:36:31 -04:00
75efe1528c
Added check method, reponded to PR comments
2022-08-17 17:24:03 -04:00
115955591b
Fix up the Unicode coversions and update docs
2022-08-17 13:21:56 -05:00
47f2b52277
Update documentation/modules/exploit/linux/http/panos_auth_rce.md
...
Co-authored-by: Grant Willcox <63261883+gwillcox-r7@users.noreply.github.com >
2022-08-17 13:42:17 -04:00
h00die