jvazquez-r7
|
6574db5dbb
|
Fix the 64 bits code
|
2014-10-30 17:01:59 -05:00 |
|
jvazquez-r7
|
ac939325ce
|
Add module first version
|
2014-10-29 21:11:57 -05:00 |
|
Deral Heiland
|
64a59e805c
|
Fix a simple typo
|
2014-10-29 12:40:24 -04:00 |
|
Deral Heiland
|
1bf1be0e46
|
Updated to module based feedback from wchen-r7
|
2014-10-29 11:42:07 -04:00 |
|
Juan Escobar
|
2e53027bb6
|
Fix value of X7C2P cookie and typo
|
2014-10-29 08:32:36 -05:00 |
|
Juan Escobar
|
9f21ac8ba2
|
Fix issues reported by wchen-r7
|
2014-10-28 21:31:33 -05:00 |
|
Meatballs
|
4f61710c9a
|
Merge remote-tracking branch 'upstream/master' into psexec_refactor_round2
|
2014-10-28 20:26:44 +00:00 |
|
William Vu
|
71a6ec8b12
|
Land #4093, cups_bash_env_exec CVE-2014-6278
|
2014-10-28 12:47:51 -05:00 |
|
Brendan Coles
|
57baf0f393
|
Add support for CVE-2014-6278
|
2014-10-28 17:10:19 +00:00 |
|
William Vu
|
3de5c43cf4
|
Land #4050, CUPS Shellshock
Bashbleeded!!!!!!!!!!!
|
2014-10-28 11:59:31 -05:00 |
|
Brendan Coles
|
78b199fe72
|
Remove CVE-2014-6278
|
2014-10-28 16:18:24 +00:00 |
|
Joe Vennix
|
c6bbc5bccf
|
Merge branch 'landing-4055' into upstream-master
|
2014-10-28 11:18:20 -05:00 |
|
Deral Heiland
|
9021e4dae6
|
Xerox Workcentre firmware injection exploit
|
2014-10-28 11:15:43 -04:00 |
|
jvazquez-r7
|
5e0993d756
|
Add OJ as author
|
2014-10-28 09:58:34 -05:00 |
|
Brendan Coles
|
a060fec760
|
Detect version in check()
|
2014-10-28 12:28:18 +00:00 |
|
Juan Escobar
|
2ba2388889
|
Fix issues reported by jvasquez
|
2014-10-27 19:15:39 -05:00 |
|
jvazquez-r7
|
373ce8d340
|
Use perl encoding
|
2014-10-27 15:30:02 -05:00 |
|
Luke Imhoff
|
216360d664
|
Add missing require
MSP-11145
|
2014-10-27 15:19:59 -05:00 |
|
jvazquez-r7
|
9da83b6782
|
Update master changes
|
2014-10-27 14:35:30 -05:00 |
|
Spencer McIntyre
|
04a99f09bb
|
Land #4064, Win32k.sys NULL Pointer Dereference
|
2014-10-27 14:01:07 -04:00 |
|
William Vu
|
950fc46e4b
|
Normalize description
|
2014-10-27 12:09:39 -05:00 |
|
Spencer McIntyre
|
830f631da4
|
Make the check routine less strict
|
2014-10-27 12:51:20 -04:00 |
|
sinn3r
|
aa5dc0a354
|
100 columns per line
|
2014-10-27 10:24:11 -05:00 |
|
sinn3r
|
7e56948191
|
Update description about pureftpd_bash_env_exec
Make exploitable requirements more obvious
|
2014-10-27 10:23:06 -05:00 |
|
Spencer McIntyre
|
46b1abac4a
|
More robust check routine for cve-2014-4113
|
2014-10-27 11:19:12 -04:00 |
|
jvazquez-r7
|
4406972b46
|
Do version checking minor cleanup
|
2014-10-27 09:32:42 -05:00 |
|
Juan Escobar
|
848f24a68c
|
update module description
|
2014-10-27 02:07:16 -05:00 |
|
root
|
d66dc88924
|
Add PHP Code Execution for X7 Chat 2.0.5
|
2014-10-27 01:01:31 -05:00 |
|
jvazquez-r7
|
c319ea91b3
|
Delete verbose print
|
2014-10-26 17:31:19 -05:00 |
|
jvazquez-r7
|
34697a2240
|
Delete 'callback3' also from 32 bits version
|
2014-10-26 17:28:35 -05:00 |
|
Spencer McIntyre
|
7416c00416
|
Initial addition of x64 target for cve-2014-4113
|
2014-10-26 16:54:42 -04:00 |
|
Brendan Coles
|
554935e60b
|
Add check() and support CVE-2014-6278
|
2014-10-26 18:11:36 +00:00 |
|
jvazquez-r7
|
a75186d770
|
Add module for CVE-2014-4113
|
2014-10-23 18:51:30 -05:00 |
|
sinn3r
|
7cb4320a76
|
Land #3561 - unix cmd generic_sh encoder
|
2014-10-23 15:48:00 -05:00 |
|
sinn3r
|
13fd6a3374
|
Land #4046 - Centreon SQL and Command Injection
|
2014-10-23 13:17:00 -05:00 |
|
sinn3r
|
ce841e57e2
|
Rephrase about centreon.session
|
2014-10-23 13:15:55 -05:00 |
|
sinn3r
|
889045d1b6
|
Change failure message
|
2014-10-23 12:55:27 -05:00 |
|
Spencer McIntyre
|
f886ab6f97
|
Land #4020, Jenkins-CI CSRF token support
|
2014-10-20 19:03:24 -04:00 |
|
jvazquez-r7
|
c77a0984bd
|
Land #3989, @us3r777's exploit for CVE-2014-7228, Joomla Update unserialize
the commit.
empty message aborts
|
2014-10-20 13:39:08 -05:00 |
|
jvazquez-r7
|
4e6f61766d
|
Change module filename
|
2014-10-20 13:31:22 -05:00 |
|
jvazquez-r7
|
e202bc10f0
|
Fix title
|
2014-10-20 13:30:44 -05:00 |
|
jvazquez-r7
|
f07c5de711
|
Do code cleanup
|
2014-10-20 13:27:48 -05:00 |
|
sinn3r
|
dbaf9c5857
|
Land #4001 - HP Data Protector EXEC_INTEGUTIL Remote Code Execution
|
2014-10-20 11:44:21 -05:00 |
|
Tod Beardsley
|
6812b8fa82
|
Typo and grammar
|
2014-10-20 11:02:09 -05:00 |
|
jvazquez-r7
|
052a9fec86
|
Delete return
|
2014-10-20 10:52:33 -05:00 |
|
jvazquez-r7
|
199f6eba76
|
Fix check method
|
2014-10-20 10:46:40 -05:00 |
|
us3r777
|
16101612a4
|
Some changes to use primer
Follow wiki How-to-write-a-module-using-HttpServer-and-HttpClient
|
2014-10-20 17:26:16 +02:00 |
|
us3r777
|
1e143fa300
|
Removed unused variables
|
2014-10-20 16:58:41 +02:00 |
|
Spencer McIntyre
|
005baa7f7e
|
Retry the script page request to get the token
After logging in to Jenkins the script console page
needs to be requested again to get the CSRF token.
|
2014-10-19 14:04:16 -04:00 |
|
Brendan Coles
|
0ede70e7f6
|
Add exploit module for CUPS shellshock
|
2014-10-19 17:58:49 +00:00 |
|