Valentin Lobstein b9ee9ba88c Update wingftp_null_byte_rce.md

2025-07-03 19:43:06 +02:00

..

acronis_cyber_protect_unauth_rce_cve_2022_3405.md

move acronis_cyber_protect_unauth_rce_cve_2022_3405 inside the http folder

2025-01-09 16:30:51 -05:00

adobe_coldfusion_rce_cve_2023_26360.md

update the AKB URL to reference the changed CVE

2023-04-14 17:44:38 +01:00

agent_tesla_panel_rce.md

…

apache_activemq_upload_jsp.md

…

apache_apisix_api_default_token_rce.md

…

apache_commons_text4shell.md

Add output from test run on windows target

2024-01-15 00:26:47 +05:30

apache_couchdb_erlang_rce.md

…

apache_druid_cve_2023_25194.md

Apply suggestions from code review

2023-06-23 09:36:50 +02:00

apache_flink_jar_upload_exec.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

apache_nifi_processor_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

apache_normalize_path_rce.md

…

apache_ofbiz_forgot_password_directory_traversal.md

Update OFBiz ProgramExport RCE for Patch Bypass

2024-08-15 09:18:15 -07:00

apache_rocketmq_update_config.md

Apache RocketMQ update config RCE

2023-07-05 12:38:51 -04:00

apache_solr_backup_restore.md

Responded to comments

2024-04-04 13:39:22 -07:00

atlassian_confluence_namespace_ognl_injection.md

…

atlassian_confluence_rce_cve_2023_22515.md

add in documentation for Options

2023-10-18 10:05:05 +01:00

atlassian_confluence_rce_cve_2023_22527.md

Add module docs

2024-01-24 12:49:27 -05:00

atlassian_confluence_rce_cve_2024_21683.md

Add sysinfo Meterpreter output and target OS version numbers

2024-07-09 16:31:01 -05:00

atlassian_confluence_unauth_backup.md

Documentation and rubocop changes

2023-12-11 19:01:35 -05:00

atlassian_confluence_webwork_ognl_injection.md

…

atlassian_crowd_pdkinstall_plugin_upload_rce.md

…

atutor_upload_traversal.md

…

avideo_wwbnindex_unauth_rce.md

Lint

2024-05-15 22:13:53 +02:00

axis2_deployer.md

…

baldr_upload_exec.md

…

bitbucket_env_var_rce.md

update line numbers

2023-03-15 13:24:33 -05:00

builderengine_upload_exec.md

…

cacti_package_import_rce.md

Code review

2024-06-12 19:47:02 +02:00

cacti_pollers_sqli_rce.md

Fix typos

2024-02-02 11:45:51 +01:00

caidao_php_backdoor_exec.md

…

carrental_fileupload_rce.md

Made all changes as requested

2025-04-14 23:40:25 +05:30

churchinfo_upload_exec.md

…

cisco_dcnm_upload_2019.md

…

cleo_rce_cve_2024_55956.md

fix three typos

2025-01-06 09:42:21 +00:00

clinic_pms_fileupload_rce.md

Modified documentation

2024-12-16 15:47:30 +05:30

clinic_pms_sqli_to_rce.md

Addressing comments

2025-05-19 07:17:14 +02:00

clipbucket_fileupload_exec.md

…

cmsms_file_manager_auth_rce.md

Update documentation

2025-03-28 03:17:47 +11:00

cmsms_object_injection_rce.md

…

cmsms_showtime2_rce.md

…

cmsms_upload_rename_rce.md

…

cockpit_cms_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

coldfusion_ckeditor_file_upload.md

…

confluence_widget_connector.md

…

connectwise_screenconnect_rce_cve_2024_1709.md

@rad10 noted the download link we gave no longer works, but has provided a second link, so adding that to the docs

2024-02-23 17:54:14 +00:00

crushftp_rce_cve_2023_43177.md

Fixes from code review

2024-03-29 12:18:16 +01:00

cve_2021_35464_forgerock_openam.md

…

cve_2023_38836_boidcms.md

Updates based on jheysel-r7's suggestions

2024-02-29 12:42:22 -06:00

dotcms_file_upload_rce.md

…

drupal_drupageddon.md

…

fortra_goanywhere_mft_rce_cve_2024_0204.md

bugfix a copy pasta whereby a path seperator was not being added as expected

2024-01-29 17:52:37 +00:00

fortra_goanywhere_rce_cve_2023_0669.md

Add credit for CVE-2023-0669; fix path in docs

2023-02-09 13:02:40 -05:00

freenas_exec_raw.md

…

gambio_unauth_rce_cve_2024_23759.md

update module and documentation with tax country logic

2024-04-18 19:13:19 +00:00

geoserver_unauth_rce_cve_2024_36401.md

Apply suggestions from code review

2024-07-12 19:20:46 +02:00

getsimplecms_unauth_code_exec.md

…

gibbon_auth_rce_cve_2024_24725.md

added documentation

2024-04-04 17:35:12 +00:00

git_lfs_clone_command_exec.md

…

git_submodule_command_exec.md

…

git_submodule_url_exec.md

…

gitea_git_fetch_rce.md

…

gitea_git_hooks_rce.md

…

gitlab_exif_rce.md

…

gitlab_file_read_rce.md

…

gitlab_github_import_rce_cve_2022_2992.md

Remove the NGROK_URL option

2023-02-13 14:31:44 -05:00

gitlist_arg_injection.md

…

glassfish_deployer.md

…

gogs_git_hooks_rce.md

…

horde_csv_rce.md

…

horde_form_file_upload.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

horizontcms_upload_exec.md

…

ibm_openadmin_tool_soap_welcomeserver_exec.md

…

invision_customcss_rce.md

Update invision_customcss_rce.md

2025-05-21 08:38:36 +02:00

ivanti_epmm_rce_cve_2025_4427_4428.md

Update documentation/modules/exploit/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.md

2025-06-04 08:30:11 -05:00

jenkins_metaprogramming.md

…

jenkins_script_console.md

adds more future proofing to implementation

2023-06-21 14:19:24 +01:00

jenkins_xstream_deserialize.md

…

jetbrains_teamcity_rce_cve_2023_42793.md

Minor code changes

2023-09-28 13:19:26 -04:00

jetbrains_teamcity_rce_cve_2024_27198.md

typo

2024-03-05 14:47:04 +00:00

jira_plugin_upload.md

…

kong_gateway_admin_api_rce.md

…

langflow_unauth_rce_cve_2025_3248.md

Update the document

2025-04-12 10:21:13 +09:00

liferay_java_unmarshalling.md

…

log4shell_header_injection.md

…

lucee_scheduled_job.md

updated docs to reflect changes from smcintyre-r7

2023-02-28 19:58:39 -06:00

magento_unserialize.md

undo some spelling fixes when upstream has those issues

2023-10-11 06:30:11 -04:00

makoserver_cmd_exec.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

manageengine_adselfservice_plus_saml_rce_cve_2022_47966.md

Fix CVE

2023-01-30 12:18:08 +01:00

manageengine_servicedesk_plus_saml_rce_cve_2022_47966.md

Minor punctuation change

2023-02-06 16:32:39 -06:00

mantisbt_manage_proj_page_rce.md

…

maracms_upload_exec.md

…

mediawiki_syntaxhighlight.md

…

microfocus_obm_auth_rce.md

…

microfocus_ucmdb_unauth_deser.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

mirth_connect_cve_2023_43208.md

Check the response when exploiting

2024-01-29 14:38:49 -05:00

monitorr_webshell_rce_cve_2020_28871.md

small update to documentation on vulnerable releases

2023-03-20 21:12:49 +00:00

monstra_fileupload_exec.md

…

moodle_admin_shell_upload.md

…

moodle_spelling_path_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

moodle_teacher_enrollment_priv_esc_to_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

mybb_rce_cve_2022_24734.md

…

navigate_cms_rce.md

…

nostromo_code_exec.md

…

october_upload_bypass_exec.md

…

open_web_analytics_rce.md

Fix typo

2023-03-15 01:54:36 +01:00

openfire_auth_bypass_rce_cve_2023_32315.md

added documentation

2023-07-08 12:30:54 +00:00

openmrs_deserialization.md

…

opmanager_sumpdu_deserialization.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

oracle_access_manager_rce_cve_2021_35587.md

Improve the documentation, fix typo in console commands, add comment to wait for DB container to complete setup (Thanks Brendan).

2025-04-08 09:41:47 +01:00

oracle_weblogic_wsat_deserialization_rce.md

…

orientdb_exec.md

…

oscommerce_installer_unauth_code_exec.md

…

papercut_ng_auth_bypass.md

Add options to the documentation

2023-06-07 15:05:12 +02:00

pentaho_business_server_authbypass_and_ssti.md

require.js is not the only way, account for this new discovery in code

2023-05-10 13:02:02 -05:00

pgadmin_query_tool_authenticated.md

Responded to comments

2025-04-10 10:53:05 -07:00

pgadmin_session_deserialization.md

Clean up some of the module's documentation

2024-04-16 13:36:21 -04:00

php_fpm_rce.md

…

phpmailer_arg_injection.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

phpmyadmin_lfi_rce.md

…

phpmyadmin_null_termination_exec.md

…

phpstudy_backdoor_rce.md

…

pimcore_unserialize_rce.md

…

playsms_filename_exec.md

…

playsms_template_injection.md

…

playsms_uploadcsv_exec.md

…

primefaces_weak_encryption_rce.md

review

2024-11-23 12:43:35 -05:00

processmaker_exec.md

…

processmaker_plugin_upload.md

…

qdpm_authenticated_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

rails_actionpack_inline_exec.md

…

rails_double_tap.md

…

rails_dynamic_render_code_exec.md

…

rails_web_console_v2_code_exec.md

…

roundcube_auth_rce_cve_2025_49113.md

Update roundcube_auth_rce_cve_2025_49113.md

2025-06-09 18:42:52 +03:00

rudder_server_sqli_rce.md

Add note for Windows compatibility

2023-07-28 17:06:38 +02:00

shiro_rememberme_v124_deserialize.md

…

shopware_createinstancefromnamedarguments_rce.md

…

solr_velocity_rce.md

…

sonicwall_scrutinizer_methoddetail_sqli.md

…

sonicwall_shell_injection_cve_2023_34124.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

spip_bigup_unauth_rce.md

fix(modules): spip_bigup_unauth_rce minor fix

2024-09-11 11:46:52 -04:00

spip_connect_exec.md

Remove useless documentation

2024-09-03 20:29:45 +02:00

spip_porte_plume_previsu_rce.md

Update doc + module + (mixin see #19444)

2024-09-08 06:56:13 +02:00

spip_rce_form.md

Refactoring SPIP Modules for Windows Compatibility and Incorporating SPIP Mixin

2024-08-30 20:37:32 +02:00

splunk_privilege_escalation_cve_2023_32707.md

Update splunk_privilege_escalation_cve_2023_32707.md

2023-10-23 11:31:19 +02:00

splunk_upload_app_exec.md

…

spring_cloud_function_spel_injection.md

…

spring_framework_rce_spring4shell.md

…

struts2_content_type_ognl.md

…

struts2_multi_eval_ognl.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

struts2_namespace_ognl.md

…

struts2_rest_xstream.md

…

struts_dmi_exec.md

…

struts_dmi_rest_exec.md

…

subrion_cms_file_upload_rce.md

Fix exploit/linux typos in Subrion RCE docs

2023-08-23 22:44:49 +08:00

sugarcrm_webshell_cve_2023_22952.md

added MIME, added break in mixin and added link with installation instructions

2023-03-09 09:28:46 -06:00

tomcat_jsp_upload_bypass.md

…

tomcat_mgr_deploy.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

tomcat_mgr_upload.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

tomcat_partial_put_deserialization.md

Update documentation

2025-04-02 14:10:46 -07:00

torchserver_cve_2023_43654.md

Address comments from the review

2023-10-12 09:50:19 -04:00

totaljs_cms_widget_exec.md

…

trendmicro_threat_discovery_admin_sys_time_cmdi.md

…

ubiquiti_unifi_log4shell.md

…

vbulletin_getindexablecontent.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

vbulletin_replace_ad_template_rce.md

Add verbosity, update doc

2025-05-29 16:30:41 +02:00

vbulletin_widget_template_rce.md

…

vbulletin_widgetconfig_rce.md

…

vmware_vcenter_log4shell.md

…

vmware_vcenter_uploadova_rce.md

…

vtiger_logo_upload_exec.md

…

weblogic_admin_handle_rce.md

…

werkzeug_debug_rce.md

Update werkzeug_debug_rce.md

2024-12-08 21:11:03 +00:00

wingftp_null_byte_rce.md

Update wingftp_null_byte_rce.md

2025-07-03 19:43:06 +02:00

wondercms_rce.md

Responding to comments

2025-04-30 17:53:26 +02:00

wp_ait_csv_rce.md

…

wp_automatic_sqli_to_rce.md

Add WordPress wp-automatic SQLi to RCE module (CVE-2024-27956)

2024-10-14 18:13:17 +02:00

wp_backup_migration_php_filter.md

Update documentation/modules/exploit/multi/http/wp_backup_migration_php_filter.md

2024-08-27 14:14:28 -04:00

wp_bricks_builder_rce.md

Add wp_bricks_builder_rce

2024-02-26 22:09:38 +01:00

wp_catch_themes_demo_import.md

…

wp_crop_rce.md

…

wp_db_backup_rce.md

…

wp_dnd_mul_file_rce.md

…

wp_file_manager_rce.md

…

wp_givewp_rce.md

Update documentation/modules/exploit/multi/http/wp_givewp_rce.md

2024-10-03 16:34:24 +02:00

wp_hash_form_rce.md

PR-19208: Add DefaultTarget to the info hash

2024-06-05 10:14:48 +02:00

wp_litespeed_cookie_theft.md

Respond to comments

2024-09-16 09:46:57 -07:00

wp_plugin_backup_guard_rce.md

…

wp_plugin_elementor_auth_upload_rce.md

…

wp_plugin_fma_shortcode_unauth_rce.md

Update documentation/modules/exploit/multi/http/wp_plugin_fma_shortcode_unauth_rce.md

2023-07-25 14:06:45 +01:00

wp_plugin_modern_events_calendar_rce.md

…

wp_plugin_sp_project_document_rce.md

…

wp_popular_posts_rce.md

…

wp_reallysimplessl_2fa_bypass_rce.md

Update doc

2024-12-05 16:19:14 +01:00

wp_responsive_thumbnail_slider_upload.md

…

wp_royal_elementor_addons_rce.md

Add module output

2023-11-28 08:41:35 +01:00

wp_simple_file_list_rce.md

…

wp_suretriggers_auth_bypass.md

Fix User-Agent issue

2025-05-22 23:47:20 +02:00

wp_tatsu_rce.md

chore(wp_tatsu_rce): msftidy_docs fix

2025-06-25 10:16:49 +02:00

wp_time_capsule_file_upload_rce.md

Update documentation

2024-12-12 22:10:11 +01:00

wp_user_registration_membership_escalation.md

Add Unauthenticated privesc for WP User Registration & Membership plugin (CVE-2025-2563)

2025-05-13 21:42:09 +02:00

wso2_api_manager_file_upload_rce.md

Apply suggestions from code review

2024-12-04 16:44:48 +01:00

wso2_file_upload_rce.md

…

zabbix_script_exec.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00