Jack Heysel a73a7531a9 Land #18827, Add module for BoidCMS CVE-2023-38836 ...

This is an authenticated RCE against BoidCMS versions 2.0.0 and earlier.
The underlying issue is that the file upload check allows a php file to
be uploaded and executes as a media file if the GIF header is present in
the PHP file.

2024-02-29 21:31:44 -08:00

..

aix

Add invscout RPM Privilege Escalation

2023-05-17 20:17:55 +10:00

android

tests passing

2023-04-04 10:24:09 +01:00

apple_ios

Add additional reliability and stability notes to modules

2024-01-22 23:29:57 +00:00

bsd/finger

…

bsdi/softcart

…

dialup/multi/login

…

firefox/local

…

freebsd

Fixed root password resetting

2023-09-29 11:40:03 -04:00

hpux/lpd

…

irix/lpd

…

linux

Land #18832, Add exploit module CVE-2023-47218

2024-02-21 08:48:30 -08:00

mainframe/ftp

…

multi

Land #18827, Add module for BoidCMS CVE-2023-38836

2024-02-29 21:31:44 -08:00

netware

…

openbsd/local

modules: Check datastore ForceExploit before checking if session is root

2023-02-02 18:17:02 +11:00

osx

feedback_assistant_root: Check if OSX version is blank in check method

2023-04-28 19:52:15 +10:00

qnx

modules: Check datastore ForceExploit before checking if session is root

2023-02-02 18:17:02 +11:00

solaris

Mark unix encoders as compatible with linux

2024-01-19 13:40:43 -05:00

unix

Add additional reliability and stability notes to modules

2024-01-22 23:29:57 +00:00

windows

Use Rex Post MySQL Client for lib, specs & modules

2024-02-28 18:19:50 +00:00

example_linux_priv_esc.rb

small updates to example modules

2023-05-07 13:02:30 -04:00

example_webapp.rb

review comments

2023-05-08 15:25:31 -04:00

example.py

…

example.rb

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00