Jack Heysel dc70aa0896 Land #19247, PHP CGI Arg injection RCE ...

XAMPP installs running on Windows system configured to use Japanese or
Chinese (simplified or traditional) locales are vulnerable to a PHP CGI
argument injection vulnerability. This exploit module returns a session
running in the context of the Administrator user

2024-06-17 11:27:38 -07:00

..

advantech_iview_networkservlet_cmd_inject.md

add finished module and docs

2022-07-21 18:33:56 -05:00

advantech_iview_unauth_rce.md

…

ajaxpro_deserialization_rce.md

Apply suggestions from code review

2023-11-02 10:10:26 +08:00

apache_activemq_traversal_upload.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

apache_tika_jp2_jscript.md

…

cayin_xpost_sql_rce.md

…

desktopcentral_deserialization.md

…

disk_pulse_enterprise_get.md

…

diskboss_get_bof.md

…

disksavvy_get_bof.md

…

disksorter_bof.md

…

dlink_central_wifimanager_rce.md

…

dnn_cookie_deserialization_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

dup_scout_enterprise_login_bof.md

…

dupscts_bof.md

…

easychatserver_seh.md

…

easyfilesharing_post.md

…

ektron_xslt_exec_ws.md

…

exchange_chainedserializationbinder_rce.md

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00

exchange_ecp_dlp_policy.md

…

exchange_ecp_viewstate.md

…

exchange_proxylogon_rce.md

…

exchange_proxynotshell_rce.md

Add the MaxBackendRetries datastore option

2022-11-28 09:45:04 -05:00

exchange_proxyshell_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

file_sharing_wizard_seh.md

…

flexdotnetcms_upload_exec.md

…

forticlient_ems_fctid_sqli.md

FortiClient EMS Exploit Module

2024-04-12 10:00:07 -07:00

fortilogger_arbitrary_fileupload.md

…

geutebrueck_gcore_x64_rce_bo.md

…

git_lfs_rce.md

Updated docs

2021-09-07 13:55:21 -04:00

gitstack_rce.md

…

hp_imc_java_deserialize.md

…

hpe_sim_76_amf_deserialization.md

…

ivanti_avalanche_filestoreconfig_upload.md

Add more documentation on how to set the target up based on my own experience and so that we have a backup in case the link to external documentation breaks

2023-05-12 14:27:39 -05:00

kentico_staging_syncserver.md

…

lg_simple_editor_rce.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

manage_engine_opmanager_rce.md

…

manageengine_adaudit_plus_authenticated_rce.md

Add in notes about reliability of the module, and also add documentation on 7005 test on Windows 2022

2023-05-08 12:11:01 -05:00

manageengine_adaudit_plus_cve_2022_28219.md

make some prints vprints, add steps

2022-08-05 11:34:46 -05:00

manageengine_admanager_plus_cve_2023_29084_auth_cmd_injection.md

Add in ability to restore settings n documentation changes.

2023-06-02 09:48:03 -05:00

manageengine_adselfservice_plus_cve_2021_40539.md

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00

manageengine_adselfservice_plus_cve_2022_28810.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

manageengine_adshacluster_rce.md

Fixed #16674

2022-10-07 14:35:21 -04:00

manageengine_appmanager_exec.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

manageengine_connectionid_write.md

…

manageengine_endpoint_central_saml_rce_cve_2022_47966.md

sync documentation

2023-02-06 06:56:59 +00:00

manageengine_servicedesk_plus_cve_2021_44077.md

Update all links from Wiki site to new docs site.

2023-01-27 09:58:53 -06:00

moveit_cve_2023_34362.md

Tweak some messages and cleanup markdown table

2023-06-22 14:23:25 -04:00

netgear_nms_rce.md

Doc update.

2023-08-25 21:18:48 +02:00

netmotion_mobility_mvcutil_deserialization.md

…

northstar_c2_xss_to_agent_rce.md

review of northstar c2

2024-05-16 15:17:28 -04:00

nscp_authenticated_rce.md

…

oats_weblogic_console.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

octopusdeploy_deploy.md

…

php_cgi_arg_injection_rce_cve_2024_4577.md

fix typo in documentation

2024-06-13 15:09:56 +01:00

plesk_mylittleadmin_viewstate.md

…

plex_unpickle_dict_rce.md

…

prtg_authenticated_rce_cve_2023_32781.md

Fixed documentation for exploit

2023-12-15 13:58:10 +01:00

prtg_authenticated_rce.md

…

rejetto_hfs_rce_cve_2024_23692.md

Update documentation/modules/exploit/windows/http/rejetto_hfs_rce_cve_2024_23692.md

2024-06-11 16:23:56 +01:00

serviio_checkstreamurl_cmd_exec.md

…

sharepoint_data_deserialization.md

…

sharepoint_dynamic_proxy_generator_unauth_rce.md

Fixed backup_bdc_metadata initialization

2024-02-15 09:26:54 -05:00

sharepoint_ssi_viewstate.md

…

sharepoint_unsafe_control.md

…

sharepoint_workflows_xoml.md

…

sitecore_xp_cve_2021_42237.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

smartermail_rce.md

Fix lines in SmarterMail RCE docs for linting with msftidy_docs

2023-08-23 23:07:07 +08:00

ssrs_navcorrector_viewstate.md

…

syncbreeze_bof.md

…

telerik_rau_deserialization.md

…

telerik_report_server_deserialization.md

Finish up and document the deserialization RCE

2024-06-12 08:58:37 -04:00

tomcat_cgi_cmdlineargs.md

…

trendmicro_officescan_widget_exec.md

spelling fixes on docs

2023-10-10 14:46:18 -04:00

vxsrchs_bof.md

…

ws_ftp_rce_cve_2023_40044.md

When I removed the PowerShell target I forgot to update the documentation, this commit updates the documentation to reflect the changes made to the exploit module.

2023-10-04 17:03:28 +01:00

zentao_pro_rce.md

…

zoho_password_manager_pro_xml_rpc_rce.md

Update options section in documentation

2022-08-02 14:13:25 -05:00