Diego Ledda c007d3a89f Merge pull request #20674 from msutovsky-r7/exploit/win/cve-2025-59287 ...

Adds module for unauthenticated deserialization in WSUS (CVE-2025-59287)

2025-11-12 12:40:32 +01:00

..

advantech_iview_networkservlet_cmd_inject.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

advantech_iview_unauth_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

ajaxpro_deserialization_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_activemq_traversal_upload.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

apache_tika_jp2_jscript.md

tika 1.15-1.17

2019-07-30 16:55:06 -04:00

cayin_xpost_sql_rce.md

review comments

2020-06-17 11:47:11 -04:00

commvault_rce_cve_2025_57790_cve_2025_57791.md

Update commvault_rce_cve_2025_57790_cve_2025_57791.md

2025-09-15 11:37:57 -05:00

desktopcentral_deserialization.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

disk_pulse_enterprise_get.md

replace bold options with h3

2025-11-07 15:42:23 -05:00

diskboss_get_bof.md

Minor documentation improvements

2017-01-11 08:00:12 +01:00

disksavvy_get_bof.md

Add module for DiskSavvy Enterprise (EDB-40854)

2017-01-19 20:34:00 +01:00

disksorter_bof.md

Rename disksorter_bof.rb.md to disksorter_bof.md

2017-04-24 21:58:37 +01:00

dlink_central_wifimanager_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

dnn_cookie_deserialization_rce.md

replace bold options with h3

2025-11-07 15:42:23 -05:00

dup_scout_enterprise_login_bof.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

dupscts_bof.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

easychatserver_seh.md

fix some module documentation

2017-07-23 07:46:52 -07:00

easyfilesharing_post.md

fix some module documentation

2017-07-23 07:46:52 -07:00

ektron_xslt_exec_ws.md

replace bold options with h3

2025-11-07 15:42:23 -05:00

exchange_chainedserializationbinder_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

exchange_ecp_dlp_policy.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

exchange_ecp_viewstate.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

exchange_proxylogon_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

exchange_proxynotshell_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

exchange_proxyshell_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

file_sharing_wizard_seh.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

flexdotnetcms_upload_exec.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

forticlient_ems_fctid_sqli.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

fortilogger_arbitrary_fileupload.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

geutebrueck_gcore_x64_rce_bo.md

catch false positive spaces at eol from code indent

2020-01-28 14:28:18 -05:00

git_lfs_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

gitstack_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

gladinet_viewstate_deserialization_cve_2025_30406.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

hp_imc_java_deserialize.md

replace bold options with h3

2025-11-07 15:42:23 -05:00

hpe_sim_76_amf_deserialization.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

ivanti_avalanche_filestoreconfig_upload.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

ivanti_epm_recordgoodapp_sqli_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

kentico_staging_syncserver.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

lg_simple_editor_rce_uploadvideo.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

lg_simple_editor_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

magicinfo_traversal.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manage_engine_opmanager_rce.md

Add markdown docs.

2017-06-20 17:45:44 -05:00

manageengine_adaudit_plus_authenticated_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manageengine_adaudit_plus_cve_2022_28219.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manageengine_admanager_plus_cve_2023_29084_auth_cmd_injection.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manageengine_adselfservice_plus_cve_2021_40539.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manageengine_adselfservice_plus_cve_2022_28810.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manageengine_adshacluster_rce.md

Fixed #16674

2022-10-07 14:35:21 -04:00

manageengine_appmanager_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

manageengine_connectionid_write.md

catch false positive spaces at eol from code indent

2020-01-28 14:28:18 -05:00

manageengine_endpoint_central_saml_rce_cve_2022_47966.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manageengine_servicedesk_plus_cve_2021_44077.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

moveit_cve_2023_34362.md

more adjustments

2025-11-07 15:42:27 -05:00

netgear_nms_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

netmotion_mobility_mvcutil_deserialization.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

northstar_c2_xss_to_agent_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

nscp_authenticated_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

oats_weblogic_console.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

octopusdeploy_deploy.md

replace bold options with h3

2025-11-07 15:42:23 -05:00

pgadmin_binary_path_api.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

php_cgi_arg_injection_rce_cve_2024_4577.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

plesk_mylittleadmin_viewstate.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

plex_unpickle_dict_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

prtg_authenticated_rce_cve_2023_32781.md

replace bold options with h3

2025-11-07 15:42:23 -05:00

prtg_authenticated_rce.md

replace bold options with h3

2025-11-07 15:42:23 -05:00

rejetto_hfs_rce_cve_2024_23692.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

serviio_checkstreamurl_cmd_exec.md

sample output to scenarios conversion in docs

2017-05-31 21:21:38 -04:00

sharepoint_data_deserialization.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

sharepoint_dynamic_proxy_generator_unauth_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

sharepoint_ssi_viewstate.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

sharepoint_toolpane_rce.md

reword the language around our usage of CVE-2025-53770 to make it clear that this module is leveraging the authentication bypass for both CVE-2025-49706 and CVE-2025-53771, and the unsafe deserialization for CVE-2025-49704.

2025-08-06 15:33:57 +01:00

sharepoint_unsafe_control.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

sharepoint_workflows_xoml.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

sitecore_xp_cve_2021_42237.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

sitecore_xp_cve_2025_27218.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

sitecore_xp_cve_2025_34510.md

Apply suggestions from code review

2025-09-11 09:40:34 -07:00

sitecore_xp_cve_2025_34511.md

Apply suggestions from code review

2025-09-11 09:40:34 -07:00

smartermail_rce.md

remove 4 space indents in options

2025-11-07 15:42:27 -05:00

softing_sis_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

ssrs_navcorrector_viewstate.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

syncbreeze_bof.md

Land #9269, add new target for Sync Breeze Enterprise GET BoF

2018-01-11 16:53:02 -06:00

telerik_rau_deserialization.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

telerik_report_server_deserialization.md

Finish up and document the deserialization RCE

2024-06-12 08:58:37 -04:00

tomcat_cgi_cmdlineargs.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

trendmicro_officescan_widget_exec.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

vxsrchs_bof.md

Fix md header in vxsrchs_bof doc

2018-02-02 13:24:35 -05:00

ws_ftp_rce_cve_2023_40044.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wsus_deserialization_rce.md

Adds MITRE reference, updates docs

2025-11-10 18:32:13 +01:00

zentao_pro_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

zoho_password_manager_pro_xml_rpc_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00