jvazquez-r7 a531ad9ec2 Land #5096, @pedrib's exploit for Novell ZCM CVE-2015-0779

2015-05-01 14:35:28 -05:00

..

activecollab_chat.rb

…

ajaxplorer_checkinstall_exec.rb

…

apache_mod_cgi_bash_env_exec.rb

…

apache_roller_ognl_injection.rb

…

apprain_upload_exec.rb

…

auxilium_upload_exec.rb

…

axis2_deployer.rb

…

cisco_dcnm_upload.rb

…

coldfusion_rds.rb

…

cups_bash_env_exec.rb

…

cuteflow_upload_exec.rb

…

dexter_casinoloader_exec.rb

…

drupal_drupageddon.rb

Delete print_debug/vprint_debug

2015-04-21 11:14:03 -05:00

eaton_nsm_code_exec.rb

…

eventlog_file_upload.rb

…

extplorer_upload_exec.rb

…

familycms_less_exec.rb

…

freenas_exec_raw.rb

…

gestioip_exec.rb

…

git_client_command_exec.rb

more failure reasons

2015-04-16 22:04:11 +02:00

gitlab_shell_exec.rb

…

gitorious_graph.rb

…

glassfish_deployer.rb

…

glossword_upload_exec.rb

…

glpi_install_rce.rb

…

horde_href_backdoor.rb

…

hp_sitescope_issuesiebelcmd.rb

…

hp_sitescope_uploadfileshandler.rb

…

hp_sys_mgmt_exec.rb

…

hyperic_hq_script_console.rb

Fix #5103, Revert unwanted URI encoding

2015-04-17 13:59:49 -05:00

ispconfig_php_exec.rb

moar fail_with's

2015-04-16 21:16:52 +02:00

jboss_bshdeployer.rb

…

jboss_deploymentfilerepository.rb

…

jboss_invoke_deploy.rb

moar fail_with's

2015-04-16 21:16:52 +02:00

jboss_maindeployer.rb

…

jboss_seam_upload_exec.rb

Delete print_debug/vprint_debug

2015-04-21 11:14:03 -05:00

jenkins_script_console.rb

more fixes

2015-04-16 21:56:42 +02:00

kordil_edms_upload_exec.rb

…

lcms_php_exec.rb

Remove credits to Alligator Security Team

2015-04-02 15:12:22 -05:00

log1cms_ajax_create_folder.rb

…

manage_engine_dc_pmp_sqli.rb

…

manageengine_auth_upload.rb

be consistent about naming

2015-04-16 21:44:56 +02:00

manageengine_search_sqli.rb

…

mantisbt_php_exec.rb

…

mediawiki_thumb.rb

…

mobilecartly_upload_exec.rb

…

moodle_cmd_exec.rb

moar fail_with's

2015-04-16 21:16:52 +02:00

movabletype_upgrade_exec.rb

…

mutiny_subnetmask_exec.rb

…

nas4free_php_exec.rb

moar fail_with's

2015-04-16 21:16:52 +02:00

netwin_surgeftp_exec.rb

…

op5_license.rb

…

op5_welcome.rb

…

openfire_auth_bypass.rb

Fix #5103, Revert unwanted URI encoding

2015-04-17 13:59:49 -05:00

openmediavault_cmd_exec.rb

moar fail_with's

2015-04-16 21:16:52 +02:00

openx_backdoor_php.rb

…

opmanager_socialit_file_upload.rb

be consistent about naming

2015-04-16 21:44:56 +02:00

oracle_reports_rce.rb

…

pandora_upload_exec.rb

more failure reasons

2015-04-16 22:04:11 +02:00

php_cgi_arg_injection.rb

…

php_volunteer_upload_exec.rb

…

phpldapadmin_query_engine.rb

…

phpmoadmin_exec.rb

Add a version

2015-03-05 11:29:44 -06:00

phpmyadmin_3522_backdoor.rb

…

phpmyadmin_preg_replace.rb

…

phpscheduleit_start_date.rb

…

phptax_exec.rb

…

phpwiki_ploticus_exec.rb

…

plone_popen2.rb

Various other one-off nonhuman author credits

2015-04-02 15:25:47 -05:00

pmwiki_pagelist.rb

…

polarcms_upload_exec.rb

…

processmaker_exec.rb

…

qdpm_upload_exec.rb

…

rails_json_yaml_code_exec.rb

…

rails_secret_deserialization.rb

…

rails_xml_yaml_code_exec.rb

…

rocket_servergraph_file_requestor_rce.rb

…

sflog_upload_exec.rb

…

sit_file_upload.rb

…

snortreport_exec.rb

…

solarwinds_store_manager_auth_filter.rb

…

sonicwall_gms_upload.rb

…

splunk_mappy_exec.rb

…

splunk_upload_app_exec.rb

…

spree_search_exec.rb

…

spree_searchlogic_exec.rb

…

struts_code_exec_classloader.rb

Use print_warning

2015-03-12 17:22:03 -05:00

struts_code_exec_exception_delegator.rb

…

struts_code_exec_parameters.rb

…

struts_code_exec.rb

…

struts_default_action_mapper.rb

…

struts_dev_mode.rb

…

struts_include_params.rb

…

stunshell_eval.rb

…

stunshell_exec.rb

…

sun_jsws_dav_options.rb

…

testlink_upload_exec.rb

…

tomcat_mgr_deploy.rb

…

tomcat_mgr_upload.rb

Ensure that local variable upload_path is defined

2015-04-10 10:58:20 +01:00

traq_plugin_exec.rb

…

uptime_file_upload.rb

more failure reasons

2015-04-16 22:04:11 +02:00

v0pcr3w_exec.rb

…

vbseo_proc_deutf.rb

…

visual_mining_netcharts_upload.rb

…

vtiger_install_rce.rb

…

vtiger_php_exec.rb

…

vtiger_soap_upload.rb

…

webpagetest_upload_exec.rb

…

wikka_spam_exec.rb

…

x7chat2_php_exec.rb

…

zabbix_script_exec.rb

moar fail_with's

2015-04-16 21:16:52 +02:00

zenworks_configuration_management_upload.rb

Fix waiting loop

2015-05-01 14:34:43 -05:00

zenworks_control_center_upload.rb

…