ff15b581ed
resolved: issues
2025-06-29 12:34:38 +05:30
e77abd9bbc
added: automatic admin_allow_langedit permission checking and enabling capability
2025-06-28 16:20:49 +05:30
93a8334699
fixed: build issue
2025-06-27 20:16:07 +05:30
840ae0f317
resolved: issues
2025-06-27 19:42:35 +05:30
016f4ea142
resolved: issues
2025-06-26 10:26:05 +05:30
d787444137
Add exploit module for ISPConfig language_edit.php PHP Code Injection (CVE-2023-46818)
...
- Adds modules/exploits/linux/http/ispconfig_lang_edit_php_code_injection.rb
- Adds documentation for the module in documentation/modules/exploit/linux/http/ispconfig_lang_edit_php_code_injection.md
- Module targets ISPConfig < 3.2.11p1 with admin_allow_langedit enabled
- References and implementation based on PoC and advisories at https://github.com/SyFi/CVE-2023-46818
2025-06-25 22:27:52 +05:30
00c88caffb
Updates incorrect arch values in modules
2025-06-25 16:57:27 +01:00
04a18fb3ca
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
fde78bf73f
Land #20324 , adds exploit for UNC path in .url files (CVE-2025-33053)
...
Adds exploit module for Internet Shortcut UNC path vulnerability (CVE-2025-33053)
2025-06-25 11:23:23 +02:00
6d843385ec
Merge pull request #20301 from msutovsky-r7/exploit/cve-2021-25094
...
Adds module for Tatsu WP plugin (CVE-2021-25094)
2025-06-25 10:58:22 +02:00
40ca2b3b1b
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
13cd2d2e51
Minor code changes, updates documentation
2025-06-24 16:22:42 +02:00
fa0d01f55c
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-06-24 19:24:06 +07:00
a454217bd4
Update info -d markdown
2025-06-24 11:21:49 +01:00
dd6bb2c8dc
Remove debug statements
2025-06-24 12:10:46 +02:00
3d9cc6063d
Adds SMB server to send payload
2025-06-24 12:10:19 +02:00
6aa24a0762
Adds researchers in author section, base for WebDAV server
2025-06-23 15:38:09 +02:00
37388ca1be
Adds sentinel values to modules missing notes
2025-06-23 12:24:58 +01:00
ade9b54d94
Runs Style/TrailingCommaInArguments Rubocop against modules
2025-06-23 09:30:35 +01:00
e1dec29ef9
exploit/windows/browser/ms08_070_visual_studio_msmask: Cleanup and add documentation
2025-06-23 00:38:44 +10:00
b8c375d087
Merge pull request #20337 from bcoles/exploit-linux-http-opentsdb_key_cmd_injection
...
opentsdb_key_cmd_injection: Set Arch to ARCH_CMD
2025-06-22 14:51:04 +01:00
cede07596f
opentsdb_key_cmd_injection: Set Arch to ARCH_CMD
2025-06-22 12:39:04 +10:00
0307bab692
Update opennms_horizon_authenticated_rce.rb
...
Fix Arch
2025-06-21 20:37:33 +03:00
a4b14d8b64
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
42f31c0fce
Fixes some conditionals in modules
2025-06-20 14:57:03 +01:00
dd51952b67
Update cve_2025_33053.rb
2025-06-19 21:32:34 +07:00
f3c4d9519f
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-06-19 19:57:08 +07:00
a0f1b0c5b3
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-06-19 19:53:49 +07:00
efc0c2539d
Update cve_2025_33053.rb
2025-06-19 19:53:22 +07:00
600ffdb9b9
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-06-19 19:44:35 +07:00
4fde40a96b
Update modules/exploits/windows/fileformat/cve_2025_33053.rb
...
Co-authored-by: msutovsky-r7 <martin_sutovsky@rapid7.com >
2025-06-19 19:43:56 +07:00
c0dfbf43f2
Merge pull request #20235 from Chocapikk/vbulletin_replace_ad_template_rce
...
vBulletin replaceAdTemplate Remote Code Execution
2025-06-19 14:20:16 +02:00
1d27be2c1d
Final code for CVE-2025-33053 exploit module
2025-06-18 03:53:08 -04:00
20b8a9fcd3
Add some features and fix bugs for CVE-2025-33053 exploit module
2025-06-17 22:59:34 -04:00
58609f3ff9
Add some features and fix bugs for CVE-2025-33053 exploit module
2025-06-17 22:32:57 -04:00
cb7badbfad
Add some features and fix bugs for CVE-2025-33053 exploit module
2025-06-17 21:41:44 -04:00
fda69e0a74
Add some features and fix all errors for CVE-2025-33053 exploit module
2025-06-17 11:15:09 -04:00
20629fe6b8
Add some features and fix all errors for CVE-2025-33053 exploit module
2025-06-17 02:49:10 -04:00
9e5dd0962a
Add some features and delete old files for CVE-2025-33053 exploit module
2025-06-17 01:32:07 -04:00
7ad7c62f03
Add some features and delete old files for CVE-2025-33053 exploit module
2025-06-17 01:20:09 -04:00
f81ddf82f1
Add some features for CVE-2025-33053 exploit module
2025-06-17 01:00:35 -04:00
91d3675c3b
modules/exploits/linux/samba: Resolve RuboCop violations
2025-06-15 00:09:09 +10:00
3abe9b46c0
Addressing comments
2025-06-13 10:32:39 +02:00
1c72a3adc3
Fixes duplicate notes in a couple of modules
2025-06-12 14:32:12 +01:00
663cf4af24
Land #20303 , resolves Rubocop violations in modules/exploits/linux/postgres
...
modules/exploits/linux/postgres: Resolve RuboCop violations
2025-06-12 15:20:05 +02:00
bf68b56f88
modules/exploits/linux/pptp: Resolve RuboCop violations
2025-06-12 21:14:25 +10:00
e0e5e4157a
modules/exploits/linux/postgres: Resolve RuboCop violations
2025-06-12 21:03:41 +10:00
2e3b66612b
Update modules/exploits/multi/http/wp_tatsu_rce.rb
2025-06-12 11:38:01 +02:00
cb9f5e8743
Update modules/exploits/multi/http/wp_tatsu_rce.rb
2025-06-12 11:35:01 +02:00
0b2e4bc337
Adds module for CVE-2021-25094
2025-06-11 19:03:00 +02:00
happybear-21