jheysel-r7 7972017936 Merge pull request #20397 from vognik/CVE-2025-34300 ...

Add Lighthouse Studio unauthenticated RCE (CVE-2025-34300)

2025-09-08 16:48:29 -07:00

..

acronis_cyber_protect_unauth_rce_cve_2022_3405.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

adobe_coldfusion_rce_cve_2023_26360.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

agent_tesla_panel_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

apache_activemq_upload_jsp.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_apisix_api_default_token_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_commons_text4shell.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_couchdb_erlang_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_druid_cve_2023_25194.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_flink_jar_upload_exec.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_nifi_processor_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

apache_normalize_path_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_ofbiz_forgot_password_directory_traversal.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_rocketmq_update_config.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

apache_solr_backup_restore.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atlassian_confluence_namespace_ognl_injection.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atlassian_confluence_rce_cve_2023_22515.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atlassian_confluence_rce_cve_2023_22527.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atlassian_confluence_rce_cve_2024_21683.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atlassian_confluence_unauth_backup.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atlassian_confluence_webwork_ognl_injection.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atlassian_crowd_pdkinstall_plugin_upload_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

atutor_upload_traversal.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

avideo_wwbnindex_unauth_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

axis2_deployer.md

sample output to scenarios conversion in docs

2017-05-31 21:21:38 -04:00

baldr_upload_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

bitbucket_env_var_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

builderengine_upload_exec.md

Add doc and make minor changes

2017-05-16 14:47:19 -05:00

cacti_package_import_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

cacti_pollers_sqli_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

caidao_php_backdoor_exec.md

module doc standardizations

2020-01-20 21:26:59 -05:00

carrental_fileupload_rce.md

Made all changes as requested

2025-04-14 23:40:25 +05:30

churchinfo_upload_exec.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

cisco_dcnm_upload_2019.md

module doc standardizations

2020-01-20 21:26:59 -05:00

cleo_rce_cve_2024_55956.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

clinic_pms_fileupload_rce.md

Modified documentation

2024-12-16 15:47:30 +05:30

clinic_pms_sqli_to_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

clipbucket_fileupload_exec.md

fix install lines

2020-03-24 09:36:17 -04:00

cmsms_file_manager_auth_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

cmsms_object_injection_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

cmsms_showtime2_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

cmsms_upload_rename_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

cockpit_cms_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

coldfusion_ckeditor_file_upload.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

confluence_widget_connector.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

connectwise_screenconnect_rce_cve_2024_1709.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

crushftp_rce_cve_2023_43177.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

cve_2021_35464_forgerock_openam.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

cve_2023_38836_boidcms.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

dotcms_file_upload_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

drupal_drupageddon.md

drupageddon docs

2016-09-15 13:29:06 -04:00

fortra_goanywhere_mft_rce_cve_2024_0204.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

fortra_goanywhere_rce_cve_2023_0669.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

freenas_exec_raw.md

remove and check for instruction text

2020-03-24 09:15:04 -04:00

gambio_unauth_rce_cve_2024_23759.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

geoserver_unauth_rce_cve_2024_36401.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

getsimplecms_unauth_code_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

gibbon_auth_rce_cve_2024_24725.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

git_lfs_clone_command_exec.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

git_submodule_command_exec.md

rename module docs so they are viewable

2017-08-29 18:09:30 -05:00

git_submodule_url_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

gitea_git_fetch_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

gitea_git_hooks_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

gitlab_exif_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

gitlab_file_read_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

gitlab_github_import_rce_cve_2022_2992.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

gitlist_arg_injection.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

glassfish_deployer.md

fix install lines

2020-03-24 09:36:17 -04:00

gogs_git_hooks_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

horde_csv_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

horde_form_file_upload.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

horizontcms_upload_exec.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

ibm_openadmin_tool_soap_welcomeserver_exec.md

Add documentation

2017-06-01 06:03:10 +00:00

invision_customcss_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

ivanti_epmm_rce_cve_2025_4427_4428.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

jenkins_metaprogramming.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

jenkins_script_console.md

adds more future proofing to implementation

2023-06-21 14:19:24 +01:00

jenkins_xstream_deserialize.md

Add docs

2017-11-07 10:58:28 -05:00

jetbrains_teamcity_rce_cve_2023_42793.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

jetbrains_teamcity_rce_cve_2024_27198.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

jira_plugin_upload.md

Fixed typos and errors in documentation

2018-02-25 15:29:24 -05:00

kong_gateway_admin_api_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

langflow_unauth_rce_cve_2025_3248.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

liferay_java_unmarshalling.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

lighthouse_studio_unauth_rce_CVE_2025_34300.md

Update documentation/modules/exploit/multi/http/lighthouse_studio_unauth_rce_CVE_2025_34300.md

2025-09-08 16:29:00 -07:00

log4shell_header_injection.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

lucee_scheduled_job.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

magento_unserialize.md

undo some spelling fixes when upstream has those issues

2023-10-11 06:30:11 -04:00

makoserver_cmd_exec.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

manageengine_adselfservice_plus_saml_rce_cve_2022_47966.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

manageengine_servicedesk_plus_saml_rce_cve_2022_47966.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

mantisbt_manage_proj_page_rce.md

Add MSF module for EDB 6768

2018-04-14 08:51:51 -04:00

maracms_upload_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

mediawiki_syntaxhighlight.md

sample output to scenarios conversion in docs

2017-05-31 21:21:38 -04:00

microfocus_obm_auth_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

microfocus_ucmdb_unauth_deser.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

mirth_connect_cve_2023_43208.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

monitorr_webshell_rce_cve_2020_28871.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

monstra_fileupload_exec.md

module options to options

2020-01-16 10:49:22 -05:00

moodle_admin_shell_upload.md

more libs for moodle and teacher priv esc to rce module

2021-09-04 13:31:11 -04:00

moodle_spelling_path_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

moodle_teacher_enrollment_priv_esc_to_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

mybb_rce_cve_2022_24734.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

navigate_cms_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

nostromo_code_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

october_upload_bypass_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

open_web_analytics_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

openfire_auth_bypass_rce_cve_2023_32315.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

openmrs_deserialization.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

opmanager_sumpdu_deserialization.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

oracle_access_manager_rce_cve_2021_35587.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

oracle_weblogic_wsat_deserialization_rce.md

vulnerable application h1 to h2

2020-01-16 10:44:35 -05:00

orientdb_exec.md

module doc standardizations

2020-01-20 21:26:59 -05:00

oscommerce_installer_unauth_code_exec.md

Update oscommerce_installer_unauth_code_exec.md

2018-04-06 13:05:14 +01:00

papercut_ng_auth_bypass.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

pentaho_business_server_authbypass_and_ssti.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

pgadmin_query_tool_authenticated.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

pgadmin_session_deserialization.md

Clean up some of the module's documentation

2024-04-16 13:36:21 -04:00

php_fpm_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

phpmailer_arg_injection.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

phpmyadmin_lfi_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

phpmyadmin_null_termination_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

phpstudy_backdoor_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

pimcore_unserialize_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

playsms_filename_exec.md

module options to options

2020-01-16 10:49:22 -05:00

playsms_template_injection.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

playsms_uploadcsv_exec.md

module options to options

2020-01-16 10:49:22 -05:00

primefaces_weak_encryption_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

processmaker_exec.md

sample output to scenarios

2020-01-16 11:15:06 -05:00

processmaker_plugin_upload.md

Update tested versions

2018-03-20 02:49:56 +00:00

qdpm_authenticated_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

rails_actionpack_inline_exec.md

Add documentation for rails_actionpack_inline_exec

2016-07-07 16:15:51 -05:00

rails_double_tap.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

rails_dynamic_render_code_exec.md

Don't be lazy and spell out "introduction" in docs

2019-09-30 16:58:00 -05:00

rails_web_console_v2_code_exec.md

sample output to scenarios conversion in docs

2017-05-31 21:21:38 -04:00

roundcube_auth_rce_cve_2025_49113.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

rudder_server_sqli_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

shiro_rememberme_v124_deserialize.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

shopware_createinstancefromnamedarguments_rce.md

module doc standardizations

2020-01-20 21:26:59 -05:00

solr_velocity_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

sonicwall_scrutinizer_methoddetail_sqli.md

…

sonicwall_shell_injection_cve_2023_34124.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

spip_bigup_unauth_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

spip_connect_exec.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

spip_porte_plume_previsu_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

spip_rce_form.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

splunk_privilege_escalation_cve_2023_32707.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

splunk_upload_app_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

spring_cloud_function_spel_injection.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

spring_framework_rce_spring4shell.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

struts2_content_type_ognl.md

module doc standardizations

2020-01-20 21:26:59 -05:00

struts2_multi_eval_ognl.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

struts2_namespace_ognl.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

struts2_rest_xstream.md

module doc standardizations

2020-01-20 21:26:59 -05:00

struts_dmi_exec.md

Add mod doc for struts_dmi_rest_exec and update struts_dmi_exec.md

2016-06-08 23:15:44 -05:00

struts_dmi_rest_exec.md

Add mod doc for struts_dmi_rest_exec and update struts_dmi_exec.md

2016-06-08 23:15:44 -05:00

subrion_cms_file_upload_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

sugarcrm_webshell_cve_2023_22952.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

tomcat_jsp_upload_bypass.md

fixed msftidy errors and added documentation

2017-10-11 07:57:01 -04:00

tomcat_mgr_deploy.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

tomcat_mgr_upload.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

tomcat_partial_put_deserialization.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

torchserver_cve_2023_43654.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

totaljs_cms_widget_exec.md

Move totaljs cms module and doc

2019-10-15 10:11:14 -05:00

trendmicro_threat_discovery_admin_sys_time_cmdi.md

doc cleanup

2020-03-24 08:47:21 -04:00

ubiquiti_unifi_log4shell.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

vbulletin_getindexablecontent.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

vbulletin_replace_ad_template_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

vbulletin_widget_template_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

vbulletin_widgetconfig_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

vmware_vcenter_log4shell.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

vmware_vcenter_uploadova_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

vtiger_logo_upload_exec.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

weblogic_admin_handle_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

werkzeug_debug_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wingftp_null_byte_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wondercms_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_ait_csv_rce.md

spelling

2021-01-09 08:13:19 -05:00

wp_automatic_sqli_to_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_backup_migration_php_filter.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_bricks_builder_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_catch_themes_demo_import.md

more wp catch themes doc and error handling

2022-01-04 04:34:42 -05:00

wp_crop_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

wp_db_backup_rce.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

wp_dnd_mul_file_rce.md

add session_created, fix typo

2020-06-04 10:32:17 -05:00

wp_file_manager_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_givewp_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_hash_form_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_litespeed_cookie_theft.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_plugin_backup_guard_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_plugin_elementor_auth_upload_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_plugin_fma_shortcode_unauth_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_plugin_modern_events_calendar_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_plugin_sp_project_document_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_popular_posts_rce.md

wp_popular_posts_rce

2021-12-08 16:45:19 -05:00

wp_reallysimplessl_2fa_bypass_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_responsive_thumbnail_slider_upload.md

Updates msf5 as well

2025-07-17 11:51:29 +01:00

wp_royal_elementor_addons_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_simple_file_list_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_suretriggers_auth_bypass.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_tatsu_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_time_capsule_file_upload_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wp_user_registration_membership_escalation.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wso2_api_manager_file_upload_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

wso2_file_upload_rce.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00

xwiki_unauth_rce_cve_2025_24893.md

Apply suggestion from @msutovsky-r7

2025-08-25 10:49:49 +03:00

zabbix_script_exec.md

Updates docs to reflect new default prompt

2025-07-17 09:53:40 +01:00