3ead0fdf42
Add check for is_uac_enabled?
2025-04-16 17:59:53 -07:00
9a95f60df6
Updated service_permissions with action to exploit CVE-2025-21293
2025-04-16 10:55:05 -07:00
5505bb5ef1
Merge pull request #19947 from machang-r7/machang-r7-module-cve-2025-27218
...
Create sitecore_xp_cve_2025_27218.rb
2025-03-28 07:40:28 -07:00
fa0c29837e
Update author, rubocop, msftidy_docs
2025-03-27 09:36:10 -07:00
74cc1d313c
Add documentation
2025-03-27 09:28:44 -07:00
ec67435de9
Rebase and squash for CVE-2024-30085
2025-03-20 09:03:28 -05:00
37c148cc7c
CVE-2024-47407
...
CVE-2024-47407
2024-11-13 03:55:17 +00:00
ce9f1b9101
fix nsfw link
2025-01-09 21:23:38 -05:00
58702f238c
Land #19574 , Windows Access Mode Mismatch LPE in ks.sys (CVE-2024-35230)
...
Land #19574 , Windows Access Mode Mismatch LPE in ks.sys (CVE-2024-35230)
2024-12-04 16:39:43 +01:00
e52edf447c
Implement feedback from the PR
2024-11-20 13:51:39 -05:00
81b83f2fd6
Updated docs and check
2024-11-06 09:13:51 -08:00
7a5bc60aab
Windows Access Mode Mismatch LPE in ks.sys [CVE-2024-35250]
2024-11-05 15:31:44 -08:00
9f41937c7a
Finish up the exploit module
2024-10-28 17:20:35 -04:00
0bf524482c
Land #19345 , Post module Windows LPE CVE-2024-30088
2024-09-17 08:13:21 -04:00
7bfd814297
Removed memory polling
2024-08-30 12:52:18 -07:00
fabb5d1f78
Land #19422 , pgAdmin 8.4 RCE / CVE-2024-3116
2024-08-28 18:54:53 +01:00
aaf95f9134
Apply suggestions from code review
2024-08-28 18:46:08 +01:00
7e9f52dd0b
Github release
2024-08-26 23:02:53 +02:00
b3605bd951
Documentation
2024-08-26 19:59:17 +02:00
bde9fca9e4
Apply suggestions from code review
2024-08-22 02:35:21 -04:00
31348dac33
Windows LPE CVE-2024-30088
2024-08-21 23:16:37 -07:00
35da4662ed
Land #19351 , DIAEnergie SQL Injection
2024-08-21 09:44:15 -04:00
8732d7cd58
LG Simple Editor Command Injection (CVE-2023-40504) Module
...
Exploit Module and Documentation for the LG Simple Editor Command Injection (CVE-2023-40504)
2024-08-07 05:16:25 +01:00
80961b0fef
Merge branch 'rapid7:master' into my_awesome_branch
2024-08-01 22:57:36 -05:00
48c69b99fb
Land #19344 , FortiClient EMS FCTID SQLi to RCE fix for 7.2.x
2024-07-31 09:43:19 -04:00
2d9aed7ec3
fixed typo
2024-07-30 13:39:03 -04:00
cd1c100bd8
DIAEnergie SQL Injection (CVE-2024-4548) Module Documentation
2024-07-30 13:21:34 -04:00
14945679ba
Updated email generation part.
2024-07-25 23:54:27 -04:00
c8feb5c5e6
Updated formatting
2024-07-24 22:40:00 -04:00
c05aebe248
Formatting
2024-07-24 11:16:26 -07:00
e9cbb9287c
Add support for 7.2.x
2024-07-24 10:45:38 -07:00
9bfaf6343a
Updated the module to take advantage of the check method
2024-07-23 23:48:32 -04:00
2bdba1a48d
Documentation for the MyPRO Command Injection (CVE-2023-28384) Module.
2024-07-22 16:46:37 -04:00
636c72965c
Land #19084 , Add CVE-2022-1373 and CVE-2022-2334 exploit chain
...
Merge branch 'land-19084' into upstream-master
2024-07-19 12:22:25 -05:00
ecb628eaab
Add module and documentation
2024-06-20 15:30:54 +02:00
dc70aa0896
Land #19247 , PHP CGI Arg injection RCE
...
XAMPP installs running on Windows system configured to use Japanese or
Chinese (simplified or traditional) locales are vulnerable to a PHP CGI
argument injection vulnerability. This exploit module returns a session
running in the context of the Administrator user
2024-06-17 11:27:38 -07:00
d7531ef74c
fix typo in documentation
...
Co-authored-by: jheysel-r7 <Jack_Heysel@rapid7.com >
2024-06-13 15:09:56 +01:00
18fe758416
Finish up and document the deserialization RCE
2024-06-12 08:58:37 -04:00
2d63038196
Update documentation/modules/exploit/windows/http/rejetto_hfs_rce_cve_2024_23692.md
...
fix a typo in the documentation.
Co-authored-by: Julien Voisin <jvoisin@users.noreply.github.com >
2024-06-11 16:23:56 +01:00
bf9b3f1d2a
add documentation
2024-06-10 17:41:55 +01:00
c8208704be
add in exploit module for CVE-2024-23692
2024-06-06 18:04:14 +01:00
a89d418725
review of northstar c2
2024-05-16 15:17:28 -04:00
19af4ae4e6
mermaid flow chart
2024-04-24 16:54:02 -04:00
9fb217fb59
northstar c2 exploit
2024-04-24 16:54:02 -04:00
488653d942
Land #19082 , FortiNet FortiClient EMS SQLi to RCE [CVE-2023-48788]
2024-04-19 15:03:22 -04:00
6b2bdc893b
chore: remove repetitive words
...
Signed-off-by: fanqiaojun <fanqiaojun@yeah.net >
2024-04-15 11:06:50 +08:00
50a303a6e5
Update references and documentation
2024-04-13 18:21:05 +08:00
6268235cd3
Add CVE-2022-1373 and CVE-2022-2334 exploit chain
2024-04-13 18:10:45 +08:00
dae9657433
FortiClient EMS Exploit Module
2024-04-12 10:00:07 -07:00
e58c6b9df2
Land #18721 , SharePoint Unauth RCE Exploit Chain (CVE-2023-29357 & CVE-2023-24955)
...
Merge branch 'land-18721' into upstream-master
2024-03-26 12:42:22 -05:00
Jack Heysel