a4ed143af6
Land #12364 , add vBulletin widgetconfig RCE
2019-12-10 12:12:47 -06:00
fdce27c675
Land #12632 , lots more module docs
2019-12-05 15:00:45 -05:00
196029b959
Update ms04_007_killbill.md
2019-12-04 01:41:07 -07:00
31abd7d676
Update ms15_100_mcl_exe.md
2019-12-04 01:13:18 -07:00
5ab266e049
Update ms06_040_netapi.md
2019-12-02 22:29:45 -07:00
e732291be9
h00die
2019-12-02 22:28:16 -07:00
c66f3c4388
Update ms06_040_netapi.md
2019-12-02 20:51:45 -07:00
7dfe86034c
update ms04_007_killbill.md and update ms06_040_netapi.md
2019-12-02 19:08:14 -07:00
3881743847
Create ms06_040_netapi.md
2019-12-02 19:03:15 -07:00
41569b78ba
Land #12503 , Add exploit module for Ajenti 2.1.31
2019-12-01 16:13:06 +00:00
373d147efd
Land #12555 - Wordpress Plainview Activity Monitor RCE
2019-11-29 11:10:24 +01:00
7473a79cb3
Create ms04_007_killbill.md
2019-11-28 11:33:42 -07:00
5e2c0604ab
Create ms15_100_mcl_exe.md and Create ms10_092_schelevator.md
2019-11-27 18:12:57 -07:00
b22d2a1685
Update prints in DOUBLEPULSAR exploit check method
...
vprint_good should be print_warning, and most vprints should be print,
even if in check, since check is critical functionality.
2019-11-25 18:33:46 -06:00
eb2817b51f
fix. typo into the documentation.
2019-11-22 20:10:29 +04:00
73950eef50
Land #12516 , Add Windows Escalate UAC Protection Bypass
2019-11-18 14:25:07 -06:00
f93fda79f6
Add Module Documentation
2019-11-18 20:25:56 +03:00
5a6e4c031d
Land #12494 , Add Windows backup system sdclt uac bypass module
2019-11-18 01:47:11 -06:00
1e95e1c956
Fix up required reg additions for different windows versions
...
Add module docs
2019-11-15 12:20:50 -06:00
1d6e0a8638
Further correct target documentation
2019-11-15 11:23:28 -06:00
6e904ea105
Fix/clarify target documentation for BlueKeep
2019-11-15 11:14:00 -06:00
cb6d85bee2
Add suggestion about GROOMBASE
2019-11-14 11:08:14 -06:00
fc64ac42af
State 2008 caveat in module description and doc
2019-11-14 10:57:42 -06:00
5c6686a105
Land #12532 , Add FusionPBX Command exec.php Command Execution
...
Add FusionPBX Command exec.php Command Execution
2019-11-13 11:33:21 -06:00
66ad5deb47
Land #12531 , Add FusionPBX Operator Panel exec.php Command Execution
...
Add FusionPBX Operator Panel exec.php Command Execution
2019-11-13 11:31:30 -06:00
71cbefa5e8
Land #12534 , Add FreeSWITCH Event Socket Command Execution
...
Add FreeSWITCH Event Socket Command Execution
2019-11-13 11:27:53 -06:00
1ebef8bcb2
Land #12529 , add CMSMS object inject exploit
2019-11-13 08:37:05 -06:00
baf27f9654
Land #12542 , add Bludit File Upload Exploit
2019-11-12 15:44:34 -06:00
3c1fa90a75
Land #12515 , Pulse Secure VPN RCE
2019-11-12 02:55:01 -06:00
a8e289ee9c
Code-block env(1)
2019-11-12 02:46:18 -06:00
a267ad9d64
Reference env(1) as the reason we have useful RCE
2019-11-12 02:17:58 -06:00
a17b2c2041
Add module doc
2019-11-12 02:10:10 -06:00
3b57705a1f
Land #11390 , Add exploit module for Xorg X11 Server Local Privilege Escalation on AIX
...
Merge branch 'land-11390' into upstream-master
2019-11-11 15:42:54 -06:00
717a31c7c3
Fix typos and format
2019-11-11 14:47:56 -06:00
820aa4f46c
Update documents with vimeo video example and update SideEffects value
...
in the module cache.
2019-11-11 14:28:07 -06:00
1d7cdac421
Add Wordpress Plainview Activity Monitor RCE
...
Description:
```
Plainview Activity Monitor Wordpress plugin is vulnerable to OS
command injection which allows an attacker to remotely execute
commands on underlying system. Application passes unsafe user supplied
data to ip parameter into activities_overview.php.
Privileges are required in order to exploit this vulnerability, but
this plugin version is also vulnerable to CSRF attack and Reflected
XSS. Combined, these three vulnerabilities can lead to Remote Command
Execution just with an admin click on a malicious link.
```
2019-11-10 08:27:45 +01:00
876a307816
Land #9396 , Linux net snmpd rw access
2019-11-07 02:52:47 +00:00
f0443deb2a
resolved merge conflicts for payload 1.3.79 integration
2019-11-06 21:15:11 -05:00
3d14b88a50
Land #12507 , add rConfig Command Injection module
2019-11-06 13:45:15 -06:00
06f7027fd8
udapted docs
2019-11-06 15:57:33 +09:00
553601210a
Add CVE-2019-16113: Bludit Directory Traversal Image Upload Exploit
2019-11-05 08:57:15 -06:00
7620cefca4
start of janus table
2019-11-04 23:31:45 +09:00
4f2fab797f
janus upgrades
2019-11-04 23:31:45 +09:00
a307f4f41a
Apply suggestions from code review
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-03 00:32:10 +01:00
1a4777670b
Apply suggestions from code review
...
Co-Authored-By: bcoles <bcoles@gmail.com >
2019-11-03 00:30:18 +01:00
6dc94bbca9
Update documentation
2019-11-02 22:37:56 +00:00
f5afbe7104
Update documentation
2019-11-02 22:35:58 +00:00
0d1dd242ea
Fix typos
2019-11-02 22:09:23 +00:00
e0faff6944
Add documentation
2019-11-02 22:03:10 +00:00
89b277c360
Add documentation
2019-11-01 23:38:59 +00:00
Shelby Pace