adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
c859f18557225fcf7959d4a5fff7fd284fe16942
metasploit-gs/modules/exploits/linux/http
T
History
JohannesLks c859f18557 fix: - Hardcode endpoint path in send_request_cgi - Use idiomatic Ruby single-line conditional - Remove unnecessary return keyword
2026-01-08 15:34:11 +01:00
..
accellion_fta_getstatus_oauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
acronis_cyber_infra_cve_2023_45249.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
advantech_switch_bash_env_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
airties_login_cgi_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
aitemi_m300_time_rce.rb
Replace Rank
2025-08-14 16:37:13 +02:00
alcatel_omnipcx_mastercgi_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
alienvault_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
alienvault_sqli_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apache_airflow_dag_rce.rb
…
apache_continuum_cmd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apache_couchdb_cmd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apache_druid_js_rce.rb
…
apache_hugegraph_gremlin_rce.rb
Update modules/exploits/linux/http/apache_hugegraph_gremlin_rce.rb
2024-08-13 08:48:33 -07:00
apache_nifi_h2_rce.rb
…
apache_ofbiz_deserialization_soap.rb
…
apache_ofbiz_deserialization.rb
…
apache_solr_backup_restore.rb
Rubocop, when will I learn
2024-04-04 13:41:08 -07:00
apache_spark_rce_cve_2022_33891.rb
…
apache_superset_cookie_sig_rce.rb
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
appsmith_rce_cve_2024_55964.rb
Rubocop formatting after applied suggestions
2025-04-07 21:03:58 +09:00
artica_proxy_auth_bypass_service_cmds_peform_command_injection.rb
…
artica_proxy_unauth_rce_cve_2024_2054.rb
module and documentation updates based on review comments (bwatters-r7/cgranleese-r7)
2024-03-21 16:13:55 +00:00
astium_sqli_upload.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
asuswrt_lan_rce.rb
Remove false positive references
2025-11-19 17:34:15 +01:00
atutor_filemanager_traversal.rb
Update dash characters in module references
2025-10-07 14:03:32 -04:00
axis_app_install.rb
…
axis_srv_parhand_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
belkin_login_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
bentoml_rce_cve_2025_27520.rb
Update modules/exploits/linux/http/bentoml_rce_cve_2025_27520.rb
2025-04-16 22:05:04 +09:00
bentoml_runner_server_rce_cve_2025_32375.rb
Fix after applied suggestions (escape ')
2025-04-22 21:57:05 +09:00
beyondtrust_pra_rs_unauth_rce.rb
Remove false positive references
2025-11-19 17:34:15 +01:00
bitbucket_git_cmd_injection.rb
…
bludit_upload_images_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
cacti_unauthenticated_cmd_injection.rb
…
cayin_cms_ntp.rb
…
centreon_auth_rce_cve_2025_5946.rb
update based on dledda-r7 comments
2025-11-05 09:20:13 +00:00
centreon_pollers_auth_rce.rb
…
centreon_sqli_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
centreon_useralias_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cfme_manageiq_evm_upload_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
chamilo_bigupload_webshell.rb
Responded to comments
2024-11-14 10:46:11 -08:00
chamilo_unauth_rce_cve_2023_34960.rb
…
chaos_rat_xss_to_rce.rb
review of chaos rat
2024-05-13 16:55:43 -04:00
cisco_asax_sfr_rce.rb
…
cisco_firepower_useradd.rb
Merge pull request #20298 from bcoles/modules-SSL
2025-06-26 15:00:59 +01:00
cisco_hyperflex_file_upload_rce.rb
…
cisco_hyperflex_hx_data_platform_cmd_exec.rb
…
cisco_prime_inf_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cisco_rv32x_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cisco_rv340_lan.rb
…
cisco_rv_series_authbypass_and_rce.rb
…
cisco_ucs_cloupia_script_rce.rb
…
cisco_ucs_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
control_web_panel_api_cmd_exec.rb
fix: - Hardcode endpoint path in send_request_cgi - Use idiomatic Ruby single-line conditional - Remove unnecessary return keyword
2026-01-08 15:34:11 +01:00
control_web_panel_login_cmd_exec.rb
…
cpi_tararchive_upload.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
craftcms_ftp_template.rb
Responded to comments
2025-01-15 09:22:44 -08:00
craftcms_preauth_rce_cve_2025_32432.rb
Major refactoring of PHP payloads and related exploits
2025-05-30 09:06:38 -04:00
craftcms_unauth_rce_cve_2023_41892.rb
…
crypttech_cryptolog_login_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
cve_2019_1663_cisco_rmi_rce.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
dcos_marathon.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
ddwrt_cgibin_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
denyall_waf_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dlink_authentication_cgi_bof.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_command_php_exec_noauth.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dcs931l_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dlink_dcs_930l_authenticated_remote_command_execution.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_diagnostic_exec_noauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dlink_dir300_exec_telnet.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dir605l_captcha_bof.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dir615_up_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dir850l_unauth_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dsl2750b_exec_noauth.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dspw110_cookie_noauth_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dspw215_info_cgi_bof.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_dwl_2600_command_injection.rb
…
dlink_hedwig_cgi_bof.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_hnap_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dlink_hnap_header_exec_noauth.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dlink_hnap_login_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dlink_upnp_exec_noauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dnalims_admin_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
docker_daemon_tcp.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dolibarr_cmd_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
dreambox_openpli_shell.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dtale_rce_cve_2025_0655.rb
Update function name after applied suggestion
2025-03-07 08:05:00 +09:00
efw_chpasswd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
elfinder_archive_cmd_injection.rb
…
empire_skywalker.rb
Change all instance of staging_key to @staging_key
2024-07-31 12:54:09 +09:00
eramba_rce.rb
Addressing comments
2025-03-20 20:46:38 +01:00
esva_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
eyesofnetwork_autodiscovery_rce.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
f5_bigip_tmui_rce_cve_2020_5902.rb
…
f5_bigip_tmui_rce_cve_2023_46747.rb
…
f5_icall_cmd.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
f5_icontrol_exec.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
f5_icontrol_rce.rb
…
f5_icontrol_rest_ssrf_rce.rb
…
f5_icontrol_rpmspec_rce_cve_2022_41800.rb
…
f5_icontrol_soap_csrf_rce_cve_2022_41622.rb
…
flir_ax8_unauth_rce_cve_2022_37061.rb
…
foreman_openstack_satellite_code_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
fortinac_keyupload_file_write.rb
…
fortinet_authentication_bypass_cve_2022_40684.rb
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
fortinet_fortiweb_rce.rb
Combine the 7.x and 6.x targets together, as Linux payloads work on 7.x also, so this target is Unix and Linux. This leaves the 8.x target Unix only due to IMA appraisal.
2025-11-28 10:12:02 +00:00
fritzbox_echo_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
froxlor_log_path_rce.rb
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
geutebruck_cmdinject_cve_2021_335xx.rb
Fixes some invalid links
2025-02-28 11:29:59 +00:00
geutebruck_instantrec_bof.rb
Fixes some invalid links
2025-02-28 11:29:59 +00:00
geutebruck_testaction_exec.rb
Fixes some invalid links
2025-02-28 11:29:59 +00:00
github_enterprise_secret.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
gitlist_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
glinet_unauth_rce_cve_2023_50445.rb
…
glpi_htmlawed_php_injection.rb
…
goahead_ldpreload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
goautodial_3_rce_command_injection.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
gpsd_format_string.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
grandstream_gxv31xx_settimezone_unauth_cmd_exec.rb
…
grandstream_ucm62xx_sendemail_rce.rb
…
gravcms_exec.rb
…
groundwork_monarch_cmd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
h2_webinterface_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
hadoop_unauth_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hikvision_cve_2021_36260_blind.rb
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
hp_system_management.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hp_van_sdn_cmd_inject.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
hpe_oneview_rce.rb
add in the AKB analysis
2025-12-19 15:38:43 +00:00
huawei_hg532n_cmdinject.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ibm_drm_rce.rb
…
ibm_qradar_unauth_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ictbroadcast_unauth_cookie.rb
Update metadata
2025-08-04 17:53:29 +02:00
imperva_securesphere_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
invoiceninja_unauth_rce_cve_2024_55555.rb
fixed invalid attackerkb reference
2025-03-14 08:23:10 +00:00
invoiceshelf_unauth_rce_cve_2024_55556.rb
update based on review comments
2025-03-14 08:04:22 +00:00
invokeai_rce_cve_2024_12029.rb
Update modules/exploits/linux/http/invokeai_rce_cve_2024_12029.rb
2025-02-18 21:21:19 +09:00
ipfire_bashbug_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
ipfire_oinkcode_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ipfire_pakfire_exec.rb
…
ipfire_proxy_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
ispconfig_lang_edit_php_code_injection.rb
Refactors code
2025-07-07 11:54:28 +02:00
ivanti_connect_secure_rce_cve_2023_46805.rb
…
ivanti_connect_secure_rce_cve_2024_21893.rb
remove the linux and unix targets in favor of a single automatic target
2024-02-09 09:26:08 +00:00
ivanti_connect_secure_rce_cve_2024_37404.rb
Add comment explaining payload architecture restraints
2024-12-03 18:33:43 -08:00
ivanti_connect_secure_stack_overflow_rce_cve_2025_22457.rb
Update the error message in case of Broken pipe error and update the documentation
2025-05-15 12:10:53 +02:00
ivanti_csa_unauth_rce_cve_2021_44529.rb
…
ivanti_sentry_misc_log_service.rb
…
jenkins_cli_deserialization.rb
…
judge0_sandbox_escape_cve_2024_28189.rb
Add Judge0 module and document
2024-11-20 14:15:38 -08:00
kafka_ui_unauth_rce_cve_2023_52251.rb
added base64 encoder module of zerosteiner
2024-02-14 21:33:50 +00:00
kaltura_unserialize_cookie_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
kaltura_unserialize_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
kibana_timelion_prototype_pollution_rce.rb
…
kibana_upgrade_assistant_telemetry_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
klog_server_authenticate_user_unauth_command_injection.rb
…
kloxo_sqli.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
lexmark_faxtrace_settings.rb
…
librenms_addhost_cmd_inject.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
librenms_authenticated_rce_cve_2024_51092.rb
Fix after applied suggestion
2025-01-20 21:24:16 +09:00
librenms_collectd_cmd_inject.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
lifesize_uvc_ping_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
linear_emerge_unauth_rce_cve_2019_7256.rb
…
linksys_apply_cgi.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
linksys_e1500_apply_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
linksys_themoon_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
linksys_wrt54gl_apply_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
linksys_wrt110_cmd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
linksys_wrt160nv2_apply_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
linksys_wvbr0_user_agent_exec_noauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
linuxki_rce.rb
…
logsign_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
lucee_admin_imgprocess_file_write.rb
…
magento_xxe_to_glibc_buf_overflow.rb
Added http_server cleanup
2024-10-15 10:28:39 -07:00
magnusbilling_unauth_rce_cve_2023_30258.rb
…
mailcleaner_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
majordomo_cmd_inject_cve_2023_50917.rb
…
metabase_setup_token_rce.rb
Fix metabase rce to support older versions
2024-10-17 10:10:50 +01:00
microfocus_obr_cmd_injection.rb
…
microfocus_secure_messaging_gateway.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mida_solutions_eframework_ajaxreq_rce.rb
…
mobileiron_core_log4shell.rb
…
mobileiron_mdm_hessian_rce.rb
…
moodle_rce.rb
updated
2024-11-13 03:40:22 +00:00
motioneye_auth_rce_cve_2025_60787.rb
code review changes from smcintyre-r7@
2025-10-09 21:51:31 +04:00
multi_ncc_ping_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mutiny_frontend_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mvpower_dvr_shell_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
nagios_xi_autodiscovery_webshell.rb
…
nagios_xi_chained_rce_2_electric_boogaloo.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
nagios_xi_chained_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
nagios_xi_configwizards_authenticated_rce.rb
…
nagios_xi_magpie_debug.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
nagios_xi_mibs_authenticated_rce.rb
…
nagios_xi_plugins_check_plugin_authenticated_rce.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
nagios_xi_plugins_filename_authenticated_rce.rb
…
nagios_xi_snmptrap_authenticated_rce.rb
…
netalertx_rce_cve_2024_46506.rb
Use BadChars and Base64Decoder
2025-02-11 11:25:24 +09:00
netgear_dgn1000_setup_unauth_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
netgear_dgn1000b_setup_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
netgear_dgn2200b_pppoe_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
netgear_dnslookup_cmd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netgear_r7000_cgibin_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netgear_readynas_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netgear_unauth_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netgear_wnr2000_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netis_unauth_rce_cve_2024_22729.rb
Update addressing cdelafuente-r7 comments
2024-06-12 18:57:29 +00:00
netis_unauth_rce_cve_2024_48456_and_48457.rb
Added attackerkb references
2025-01-07 20:33:41 +00:00
netsweeper_webadmin_unixlogin.rb
…
nexus_repo_manager_el_injection.rb
…
nginx_chunked_size.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
nuuo_nvrmini_auth_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
nuuo_nvrmini_unauth_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
op5_config_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
openfiler_networkcard_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
openmetadata_auth_bypass_rce.rb
changed check to Appears when vulnerable
2024-08-06 21:00:06 +00:00
opennms_horizon_authenticated_rce.rb
Update opennms_horizon_authenticated_rce.rb
2025-06-21 20:37:33 +03:00
opentsdb_key_cmd_injection.rb
opentsdb_key_cmd_injection: Set Arch to ARCH_CMD
2025-06-22 12:39:04 +10:00
opentsdb_yrange_cmd_injection.rb
…
optergy_bms_backdoor_rce_cve_2019_7276.rb
…
oracle_ebs_rce_cve_2022_21587.rb
…
paloalto_expedition_rce.rb
Modules: Convert SSL default option to Boolean in several modules
2025-06-23 19:38:36 +10:00
pandora_fms_auth_netflow_rce.rb
Fixes disclosure date
2025-07-31 12:58:28 +02:00
pandora_fms_auth_rce_cve_2024_11320.rb
updated with correct privileged setting
2024-12-23 19:45:29 +00:00
pandora_fms_auth_rce_cve_2024_12971.rb
update based on reviewer suggestions
2025-04-07 14:29:51 +00:00
pandora_fms_events_exec.rb
…
pandora_fms_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
pandora_fms_sqli.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
pandora_itsm_auth_rce_cve_2025_4653.rb
simplified cleaning procedure
2025-08-06 08:22:06 +00:00
pandora_ping_cmd_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
panos_management_unauth_rce.rb
use the HttpClient cookie jar. Thank you @jheysel-r7 for this improvement.
2024-12-17 17:47:00 +00:00
panos_op_cmd_exec.rb
…
panos_readsessionvars.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
panos_telemetry_cmd_exec.rb
Addressing msftidy issues
2024-04-18 18:34:18 -05:00
peercast_url.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
php_imap_open_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pineapp_ldapsyncnow_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pineapp_livelog_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pineapp_test_li_conn_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pineapple_bypass_cmdinject.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pineapple_preconfig_cmdinject.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
piranha_passwd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pivotx_index_php_overwrite.rb
Added incorrect creds check
2025-08-12 10:42:46 -07:00
pretalx_rce_cve_2023_28458.rb
Adding exceptions to exploit module, bug fix for aux module, adds documentation for exploit module
2025-08-22 15:26:46 +02:00
progress_flowmon_unauth_cmd_injection.rb
Change xml to html in get_html_document
2024-05-28 16:29:55 -04:00
progress_kemp_loadmaster_unauth_cmd_injection.rb
Add vulnerable versions and fix indention
2024-04-26 17:36:50 -05:00
projectsend_unauth_rce.rb
Merge pull request #19714 from bwatters-r7/update/projectsend-cveinfo
2024-12-11 13:54:06 +00:00
pulse_secure_cmd_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
pulse_secure_gzip_rce.rb
…
pyload_js2py_cve_2024_39205.rb
Rubocop
2024-11-14 12:47:35 -08:00
pyload_js2py_exec.rb
…
qnap_qcenter_change_passwd_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
qnap_qts_rce_cve_2023_47218.rb
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
raidsonic_nas_ib5220_exec_noauth.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
railo_cfml_rfi.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rancher_server.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
raspberrymatic_unauth_rce_cve_2024_24578.rb
added default options and updated documentation
2025-02-20 13:19:41 -06:00
ray_agent_job_rce.rb
Update modules/exploits/linux/http/ray_agent_job_rce.rb
2024-08-21 21:38:37 +09:00
ray_cpu_profile_cmd_injection_cve_2023_6019.rb
Update check function
2024-08-21 22:32:53 +09:00
rconfig_ajaxarchivefiles_rce.rb
…
rconfig_vendors_auth_file_upload_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
realtek_miniigd_upnp_exec_noauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
riverbed_netprofiler_netexpress_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
roxy_wi_exec.rb
…
saltstack_salt_api_cmd_exec.rb
…
saltstack_salt_wheel_async_rce.rb
…
samsung_srv_1670d_upload_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
seagate_nas_php_exec_noauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
selenium_greed_chrome_rce_cve_2022_28108.rb
chore: removing PAYLOAD from DefaultOptions
2025-01-07 10:47:04 +01:00
selenium_greed_firefox_rce_cve_2022_28108.rb
chore: removing PAYLOAD from DefaultOptions
2025-01-08 13:04:08 +09:00
skyvern_ssti_cve_2025_49619.rb
Adds BadChars
2025-06-27 11:03:08 +02:00
smt_ipmi_close_window_bof.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
solarview_unauth_rce_cve_2023_23333.rb
Updates modules to remove non-printable chars
2025-06-25 14:19:56 +01:00
sonicwall_cve_2021_20039.rb
…
sophos_utm_webadmin_sid_cmd_injection.rb
…
sophos_wpa_iface_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sophos_wpa_sblistpack_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
sourcegraph_gitserver_sshcmd.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
spark_unauth_rce.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
spring_cloud_gateway_rce.rb
…
suitecrm_log_file_rce.rb
Updates incorrect arch values in modules
2025-06-25 16:57:27 +01:00
supervisor_xmlrpc_exec.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
symantec_messaging_gateway_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
symantec_web_gateway_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
symantec_web_gateway_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
symantec_web_gateway_lfi.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
symantec_web_gateway_pbcontrol.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
symantec_web_gateway_restore.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
symmetricom_syncserver_rce.rb
…
synology_dsm_sliceupload_exec_noauth.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
synology_dsm_smart_exec_auth.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
terramaster_unauth_rce_cve_2020_35665.rb
…
terramaster_unauth_rce_cve_2021_45837.rb
…
terramaster_unauth_rce_cve_2022_24990.rb
Add T1003 "OS credential dumping" MITRE technique
2025-09-09 10:45:46 +02:00
tiki_calendar_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
totolink_unauth_rce_cve_2023_30013.rb
…
tp_link_ncxxx_bonjour_command_injection.rb
…
tp_link_sc2020n_authenticated_telnet_injection.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
tr064_ntpserver_cmdinject.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
traccar_rce_upload.rb
Remove jsessionid parsing now that keep_cookies is being used
2024-09-23 18:12:01 -04:00
trend_micro_imsva_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
trendmicro_imsva_widget_exec.rb
Update dash characters in module references
2025-10-07 14:03:32 -04:00
trendmicro_sps_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
trendmicro_websecurity_exec.rb
…
trueonline_billion_5200w_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
trueonline_p660hn_v1_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
trueonline_p660hn_v2_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ubiquiti_airos_file_upload.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
ueb_api_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
unraid_auth_bypass_exec.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
vap2500_tools_command_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vcms_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vestacp_exec.rb
Suggestion and rubocop fixes
2024-09-05 08:49:32 -07:00
vinchin_backup_recovery_cmd_inject.rb
…
vmware_nsxmgr_xstream_rce_cve_2021_39144.rb
…
vmware_vcenter_analytics_file_upload.rb
…
vmware_vcenter_vsan_health_rce.rb
…
vmware_view_planner_4_6_uploadlog_rce.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
vmware_vrli_rce.rb
Update other modules to use java_class_loader_start_service and cmdstager_start_service
2024-06-14 12:57:42 +02:00
vmware_vrni_rce_cve_2023_20887.rb
…
vmware_vrops_mgr_ssrf_rce.rb
…
vmware_workspace_one_access_cve_2022_22954.rb
…
vmware_workspace_one_access_vmsa_2022_0011_chain.rb
…
wanem_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
watchguard_firebox_unauth_rce_cve_2022_26318.rb
update addressing jheysel-r7 comments
2024-03-28 08:43:08 +00:00
wazuh_auth_rce_cve_2025_24016.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
wd_mycloud_multiupload_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
wd_mycloud_unauthenticated_cmd_injection.rb
…
webcalendar_settings_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
webid_converter.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
webmin_backdoor.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
webmin_file_manager_rce.rb
…
webmin_package_updates_rce.rb
…
webmin_packageup_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
wepresent_cmd_injection.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
wipg1000_cmd_injection.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
xorcom_completepbx_scheduler.rb
Update url reference
2025-07-16 22:59:48 +02:00
xplico_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zabbix_sqli.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zen_load_balancer_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
zenoss_showdaemonxmlconfig_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
zimbra_cpio_cve_2022_41352.rb
…
zimbra_mboximport_cve_2022_27925.rb
…
zimbra_unrar_cve_2022_30333.rb
…
zimbra_xxe_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zyxel_lfi_unauth_ssh_rce.rb
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
zyxel_parse_config_rce.rb
Apply suggestions from code review
2024-07-03 13:51:50 -04:00
zyxel_ztp_rce.rb
…