Jack Heysel 84ea514180 Land #19026, Add pgadmin exploit CVE-2024-2044 ...

This adds an exploit for pgAdmin <= 8.3 which is a path traversal
vulnerability in the session management that allows a Python pickle
object to be loaded and deserialized. This also adds a new Python
deserialization gadget chain to execute the code in a new thread so the
target application doesn't block the HTTP request.

2024-04-16 14:12:41 -07:00

..

browser

Add additional reliability and stability notes to modules

2024-01-22 23:29:57 +00:00

elasticsearch

…

fileformat

tests passing

2023-04-04 10:24:09 +01:00

ftp

…

gdb

gdb_server_exec: Cleanup and add support for armle/aarch64 architectures

2022-04-25 19:25:06 +00:00

hams

…

http

Land #19026, Add pgadmin exploit CVE-2024-2044

2024-04-16 14:12:41 -07:00

ids

…

iiop

Add more IPv6 support in to the module

2023-06-09 12:24:35 -05:00

kubernetes

Rename the function to emphasize truthy

2022-05-13 09:16:01 -04:00

local

modules/exploits/multi/local: Resolve Rubocop and msftidy_docs violations

2023-01-28 15:02:24 +11:00

misc

Mark unix encoders as compatible with linux

2024-01-19 13:40:43 -05:00

mysql

Removes session types from module with session type mixin

2024-02-19 10:34:16 +00:00

ntp

…

php

Apply final suggestions from code review

2023-08-18 15:40:58 -04:00

postgres

Align SQL sessions peerhost and peerport

2024-03-04 13:11:32 +00:00

realserver

…

samba

…

sap

Add additional reliability and stability notes to modules

2024-01-22 23:29:57 +00:00

scada

Add additional reliability and stability notes to modules

2024-01-22 23:29:57 +00:00

script

Revert "Improve AMSI bypass on new Windows"

2023-06-21 16:35:41 -05:00

ssh

Add fetch payloads for Windows and Linux x64

2023-05-18 10:47:29 -05:00

svn

…

upnp

fix URLs not resolving

2022-02-16 17:22:40 -06:00

veritas

Fix beagent sha auth linting

2022-09-27 16:23:05 +01:00

vnc

Fixed typo in TIME_KBD_THRESHOLD option

2022-04-21 19:32:57 -07:00

vpn

…

wyse

Removed redundant cleanup calls which exploit_driver will call anyway

2022-03-11 12:08:51 +11:00

handler.rb

…