adam/metasploit-gs
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
db3654eebf860b8ef9aff9870d582675235e409a
metasploit-gs/modules/exploits/multi/http
T
History
Valentin Lobstein db3654eebf Fix: Address Copilot review feedback and fix cmd/dropper targets 
- Fix http_send: use standalone Rex::Proto::Http::Client to avoid
  SMTPDeliver/HttpClient connect() method conflict
- Fix cmd/dropper PHP stub: remove double $$ variable (vars[:cmd_varname]
  already includes $ prefix)
- Fix cmd/dropper unlink: use cleanup POST param instead of inline
  @unlink to preserve shell across multiple stager requests
- Fix wait_for_cron: use .to_i % fetch for correct modulo calculation
- Fix dir_exists?: use res&.redirect? instead of res&.code == 301
- Fix docs: RHOSTS -> RHOST (SMTPDeliver registers singular RHOST)
- Remove manual Date header (SMTPDeliver handles it)
- Update scan_paths comment to reflect MD5 digit extraction
- Replace php_exec_cmd with manual preamble + system_block stub
2026-03-13 23:38:30 +01:00
..
acronis_cyber_protect_unauth_rce_cve_2022_3405.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
activecollab_chat.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
adobe_coldfusion_rce_cve_2023_26360.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
agent_tesla_panel_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
ajaxplorer_checkinstall_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
apache_activemq_upload_jsp.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
apache_apisix_api_default_token_rce.rb
…
apache_commons_text4shell.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
apache_couchdb_erlang_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
apache_druid_cve_2023_25194.rb
…
apache_flink_jar_upload_exec.rb
…
apache_jetspeed_file_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
apache_mod_cgi_bash_env_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
apache_nifi_processor_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
apache_normalize_path_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
apache_ofbiz_forgot_password_directory_traversal.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
apache_rocketmq_update_config.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
apache_roller_ognl_injection.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
apprain_upload_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
atlassian_confluence_namespace_ognl_injection.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
atlassian_confluence_rce_cve_2023_22515.rb
set :random to true during generate_jar so we can randomize teh metasploit class path
2023-10-18 09:53:46 +01:00
atlassian_confluence_rce_cve_2023_22527.rb
added: ATT&CK references to exploit and privilege escalation modules
2026-02-09 23:03:01 +05:30
atlassian_confluence_rce_cve_2024_21683.rb
Remove false positive references
2025-11-19 17:34:15 +01:00
atlassian_confluence_unauth_backup.rb
Check method improvement
2023-12-14 12:42:23 -05:00
atlassian_confluence_webwork_ognl_injection.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
atlassian_crowd_pdkinstall_plugin_upload_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
atutor_sqli.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
atutor_upload_traversal.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
auxilium_upload_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
avideo_notify_ffmpeg_unauth_rce.rb
Update modules/exploits/multi/http/avideo_notify_ffmpeg_unauth_rce.rb
2026-01-08 17:03:53 +01:00
avideo_wwbnindex_unauth_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
axis2_deployer.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
baldr_upload_exec.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
bassmaster_js_injection.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
bitbucket_env_var_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
bolt_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
builderengine_upload_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
cacti_graph_template_rce.rb
Use the ssl setting for HttpServer#start_service
2026-01-22 13:49:28 -05:00
cacti_package_import_rce.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
cacti_pollers_sqli_rce.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
caidao_php_backdoor_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
carrental_fileupload_rce.rb
MsfTidy Fixes again
2025-05-13 23:54:36 +05:30
churchcrm_install_unauth_rce.rb
Adding version control on the check method
2026-02-13 14:42:07 +01:00
churchinfo_upload_exec.rb
…
cisco_dcnm_upload_2019.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cisco_dcnm_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cleo_rce_cve_2024_55956.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
clinic_pms_fileupload_rce.rb
Modified the code logic as instructed by the reviewer & removed the instance variable
2024-12-17 21:39:30 +05:30
clinic_pms_sqli_to_rce.rb
Fixes file cleanup
2025-05-21 09:05:41 +02:00
clipbucket_fileupload_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cmsms_file_manager_auth_rce.rb
Update checking for authentication
2025-03-27 22:13:04 +11:00
cmsms_object_injection_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cmsms_showtime2_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cmsms_upload_rename_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
cockpit_cms_rce.rb
…
coldfusion_ckeditor_file_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
coldfusion_rds_auth_bypass.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
confluence_widget_connector.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
connectwise_screenconnect_rce_cve_2024_1709.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
crushftp_rce_cve_2023_43177.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
cups_bash_env_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
cuteflow_upload_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
cve_2021_35464_forgerock_openam.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
cve_2023_38836_boidcms.rb
Updates based on jheysel-r7's suggestions
2024-02-29 12:42:22 -06:00
dexter_casinoloader_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
dotcms_file_upload_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
drupal_drupageddon.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
eaton_nsm_code_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
eventlog_file_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
extplorer_upload_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
familycms_less_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
flowise_custommcp_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
flowise_js_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
fortra_goanywhere_mft_rce_cve_2024_0204.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
fortra_goanywhere_rce_cve_2023_0669.rb
…
freenas_exec_raw.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
freescout_htaccess_rce.rb
Fix: Address Copilot review feedback and fix cmd/dropper targets
2026-03-13 23:38:30 +01:00
gambio_unauth_rce_cve_2024_23759.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
geoserver_unauth_rce_cve_2024_36401.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
gestioip_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
getsimplecms_unauth_code_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
gibbon_auth_rce_cve_2024_24725.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
git_client_command_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
git_lfs_clone_command_exec.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
git_submodule_command_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
git_submodule_url_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
gitea_git_fetch_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
gitea_git_hooks_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
gitlab_exif_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
gitlab_file_read_rce.rb
Update rubocop target ruby version
2024-07-24 16:47:17 +01:00
gitlab_github_import_rce_cve_2022_2992.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
gitlab_shell_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
gitlist_arg_injection.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
gitorious_graph.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
glassfish_deployer.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
glossword_upload_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
glpi_install_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
gogs_git_hooks_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
grav_twig_ssti_sandbox_bypass_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
horde_csv_rce.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
horde_form_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
horde_href_backdoor.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
horizontcms_upload_exec.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
hp_sitescope_issuesiebelcmd.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
hp_sitescope_uploadfileshandler.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
hp_sys_mgmt_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
hyperic_hq_script_console.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ibm_openadmin_tool_soap_welcomeserver_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
invision_customcss_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
ispconfig_php_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ivanti_epmm_rce_cve_2025_4427_4428.rb
Switch to in-memory python over fetch payloads
2025-06-03 13:39:01 -05:00
jboss_bshdeployer.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
jboss_deploymentfilerepository.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
jboss_invoke_deploy.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
jboss_maindeployer.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
jboss_seam_upload_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
jenkins_metaprogramming.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
jenkins_script_console.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
jenkins_xstream_deserialize.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
jetbrains_teamcity_rce_cve_2023_42793.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
jetbrains_teamcity_rce_cve_2024_27198.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
jira_hipchat_template.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
jira_plugin_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
joomla_http_header_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
kong_gateway_admin_api_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
kordil_edms_upload_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
langflow_unauth_rce_cve_2025_3248.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
lcms_php_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
liferay_java_unmarshalling.rb
Update other modules to use java_class_loader_start_service and cmdstager_start_service
2024-06-14 12:57:42 +02:00
lighthouse_studio_unauth_rce_cve_2025_34300.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
log1cms_ajax_create_folder.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
log4shell_header_injection.rb
…
lucee_scheduled_job.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
magento_sessionreaper.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
magento_unserialize.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
majordomo_cmd_injection_rce.rb
Fix: Remove explicit timeouts from send_request_cgi calls
2026-02-27 14:42:00 +01:00
majordomo_console_eval_rce.rb
Feat: Add three MajorDoMo unauthenticated RCE modules
2026-02-21 08:34:31 +01:00
majordomo_supply_chain_rce.rb
Fix: Remove explicit timeouts from send_request_cgi calls
2026-02-27 14:42:00 +01:00
makoserver_cmd_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
manage_engine_dc_pmp_sqli.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
manageengine_adselfservice_plus_saml_rce_cve_2022_47966.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
manageengine_auth_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
manageengine_sd_uploader.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
manageengine_search_sqli.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
manageengine_servicedesk_plus_saml_rce_cve_2022_47966.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
mantisbt_manage_proj_page_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mantisbt_php_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
maracms_upload_exec.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
mediawiki_syntaxhighlight.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mediawiki_thumb.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
metasploit_static_secret_key_base.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
metasploit_webui_console_command_execution.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
microfocus_obm_auth_rce.rb
Update other modules to use java_class_loader_start_service and cmdstager_start_service
2024-06-14 12:57:42 +02:00
microfocus_ucmdb_unauth_deser.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
mirth_connect_cve_2023_43208.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
mma_backdoor_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mobilecartly_upload_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
monitorr_webshell_rce_cve_2020_28871.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
monsta_ftp_downloadfile_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
monstra_fileupload_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
moodle_admin_shell_upload.rb
…
moodle_spelling_binary_rce.rb
…
moodle_spelling_path_rce.rb
Updates more dead links
2025-02-28 10:30:14 +00:00
moodle_teacher_enrollment_priv_esc_to_rce.rb
…
movabletype_upgrade_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
mutiny_subnetmask_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
mybb_rce_cve_2022_24734.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
n8n_workflow_expression_rce.rb
Adds comment
2026-01-13 16:31:01 +01:00
nas4free_php_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
navigate_cms_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
netwin_surgeftp_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
nibbleblog_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
nostromo_code_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
novell_servicedesk_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
nuuo_nvrmini_upgrade_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
october_upload_bypass_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
op5_license.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
op5_welcome.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
open_web_analytics_rce.rb
…
openfire_auth_bypass_rce_cve_2023_32315.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
openfire_auth_bypass.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
openmrs_deserialization.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
openx_backdoor_php.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
opmanager_socialit_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
opmanager_sumpdu_deserialization.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
oracle_access_manager_rce_cve_2021_35587.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
oracle_ats_file_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
oracle_ebs_cve_2025_61882_exploit_rce.rb
Rubocop fixes
2026-01-21 14:56:08 -08:00
oracle_reports_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
oracle_weblogic_wsat_deserialization_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
orientdb_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
oscommerce_installer_unauth_code_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
pandora_upload_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
papercut_ng_auth_bypass.rb
Modules: Convert SSL default option to Boolean in several modules
2025-06-23 19:38:36 +10:00
pentaho_business_server_authbypass_and_ssti.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
pgadmin_query_tool_authenticated.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
pgadmin_session_deserialization.rb
Refactor pgAdmin modules to use new lib
2025-04-11 15:55:46 -07:00
phoenix_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
php_cgi_arg_injection.rb
…
php_fpm_rce.rb
Use the smaller base64 encoder
2025-06-24 15:58:17 -04:00
php_utility_belt_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
php_volunteer_upload_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
phpfilemanager_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
phpldapadmin_query_engine.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
phpmailer_arg_injection.rb
Runs Style/TrailingCommaInArguments Rubocop against modules
2025-06-23 09:30:35 +01:00
phpmoadmin_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
phpmyadmin_3522_backdoor.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
phpmyadmin_lfi_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
phpmyadmin_null_termination_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
phpmyadmin_preg_replace.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
phpscheduleit_start_date.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
phpstudy_backdoor_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
phptax_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
phpwiki_ploticus_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
pimcore_unserialize_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
playsms_filename_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
playsms_template_injection.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
playsms_uploadcsv_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
plone_popen2.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
pmwiki_pagelist.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
polarcms_upload_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
primefaces_weak_encryption_rce.rb
Standardize capitalization of Java Expression Language
2024-12-06 16:00:58 -08:00
processmaker_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
processmaker_plugin_upload.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
qdpm_authenticated_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
qdpm_upload_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
rails_actionpack_inline_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rails_double_tap.rb
Adds sentinel notes to modules that are missing stability, reliability or side effects
2025-06-25 09:32:01 +01:00
rails_dynamic_render_code_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rails_json_yaml_code_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rails_secret_deserialization.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rails_web_console_v2_code_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
rails_xml_yaml_code_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
react2shell_unauth_rce_cve_2025_55182.rb
Merge pull request #20786 from zeroSteiner/feat/lib/mod-merge-target-info
2026-01-08 18:01:14 -08:00
rocket_servergraph_file_requestor_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
roundcube_auth_rce_cve_2025_49113.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
rudder_server_sqli_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
sflog_upload_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
shiro_rememberme_v124_deserialize.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
shopware_createinstancefromnamedarguments_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
simple_backdoors_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
sit_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
smartermail_guid_file_upload.rb
Responded to comments
2026-01-22 15:03:32 +01:00
snortreport_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
solarwinds_store_manager_auth_filter.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
solarwinds_webhelpdesk_rce.rb
Add solarwinds srvhost defaults
2026-02-20 18:23:41 +00:00
solr_velocity_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
sonicwall_gms_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
sonicwall_scrutinizer_methoddetail_sqli.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
sonicwall_shell_injection_cve_2023_34124.rb
…
spip_bigup_unauth_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
spip_connect_exec.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
spip_porte_plume_previsu_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
spip_rce_form.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
splunk_auth_rce_cve_2022_43571.rb
add suggestions from @jheysel-r7
2026-01-19 18:45:01 -08:00
splunk_mappy_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
splunk_privilege_escalation_cve_2023_32707.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
splunk_upload_app_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
spree_search_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
spree_searchlogic_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
spring_cloud_function_spel_injection.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
spring_framework_rce_spring4shell.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
struts2_code_exec_showcase.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
struts2_content_type_ognl.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
struts2_multi_eval_ognl.rb
…
struts2_namespace_ognl.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
struts2_rest_xstream.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_code_exec_classloader.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_code_exec_exception_delegator.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_code_exec_parameters.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_code_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_default_action_mapper.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_dev_mode.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
struts_dmi_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_dmi_rest_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
struts_include_params.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
stunshell_eval.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
stunshell_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
subrion_cms_file_upload_rce.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
sugarcrm_webshell_cve_2023_22952.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
sun_jsws_dav_options.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
sysaid_auth_file_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
sysaid_rdslogs_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
taiga_tribe_gig_unserial.rb
Merged changes
2025-11-28 20:54:40 +00:00
testlink_upload_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
tomcat_jsp_upload_bypass.rb
…
tomcat_mgr_deploy.rb
Add references to MITRE ATT&CK T1021 - Remote Services
2025-10-14 16:25:30 +02:00
tomcat_mgr_upload.rb
Code review
2025-10-14 16:25:43 +02:00
tomcat_partial_put_deserialization.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
torchserver_cve_2023_43654.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
totaljs_cms_widget_exec.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
traq_plugin_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
trendmicro_threat_discovery_admin_sys_time_cmdi.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
ubiquiti_unifi_log4shell.rb
…
uptime_file_upload_1.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
uptime_file_upload_2.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
v0pcr3w_exec.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
vbseo_proc_deutf.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vbulletin_getindexablecontent.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
vbulletin_replace_ad_template_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
vbulletin_unserialize.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vbulletin_widget_template_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
vbulletin_widgetconfig_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
visual_mining_netcharts_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vmware_vcenter_log4shell.rb
…
vmware_vcenter_uploadova_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
vtiger_install_rce.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vtiger_logo_upload_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vtiger_php_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vtiger_soap_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
vvveb_auth_rce_cve_2025_8518.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
web_check_screenshot_rce.rb
Apply review feedback: move Space limits to targets, use CheckCode::Detected
2026-01-08 16:59:17 +01:00
weblogic_admin_handle_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
webnms_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
webpagetest_upload_exec.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
werkzeug_debug_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
wikka_spam_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
wingftp_null_byte_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wondercms_rce.rb
Adding SRVHOST check
2025-04-30 17:58:15 +02:00
wp_acf_extended_rce.rb
Add exploit module for WordPress ACF Extended CVE-2025-13486 unauthenticated RCE
2025-12-09 22:02:41 +01:00
wp_ai_engine_mcp_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_ait_csv_rce.rb
Add missing CVEs from VulnCheck
2025-10-07 13:59:13 -04:00
wp_automatic_sqli_to_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_backup_migration_php_filter.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_bricks_builder_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_catch_themes_demo_import.rb
…
wp_crop_rce.rb
Runs Rubocop to fix layout in modules
2025-06-20 15:18:01 +01:00
wp_db_backup_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
wp_dnd_mul_file_rce.rb
…
wp_file_manager_rce.rb
Add additional reliability and stability notes to modules
2024-01-22 23:29:57 +00:00
wp_givewp_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_hash_form_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_king_addons_privilege_escalation.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_litespeed_cookie_theft.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_ninja_forms_unauthenticated_file_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
wp_plugin_backup_guard_rce.rb
…
wp_plugin_elementor_auth_upload_rce.rb
…
wp_plugin_fma_shortcode_unauth_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_plugin_modern_events_calendar_rce.rb
…
wp_plugin_sp_project_document_rce.rb
…
wp_plugin_story_chef_file_upload.rb
Trriged failed_with and Removed unnecessary line
2026-02-18 02:20:36 +02:00
wp_popular_posts_rce.rb
…
wp_reallysimplessl_2fa_bypass_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_responsive_thumbnail_slider_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
wp_royal_elementor_addons_rce.rb
Update modules/exploits/multi/http/wp_royal_elementor_addons_rce.rb
2023-11-28 08:15:27 +01:00
wp_simple_file_list_rce.rb
Update dash characters in module references
2025-10-07 14:03:32 -04:00
wp_suretriggers_auth_bypass.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_tatsu_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_time_capsule_file_upload_rce.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wp_user_registration_membership_escalation.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
wso2_api_manager_file_upload_rce.rb
Enhance: Rollback to register_file_for_cleanup
2024-12-11 11:58:53 +01:00
wso2_file_upload_rce.rb
…
x7chat2_php_exec.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
xerte_authenticated_rce_uploadimage.rb
adds auto-check and fixes print statements
2026-02-12 12:58:01 -05:00
xerte_unauthenticated_importlanguage.rb
adds auto-check and fixes print statements
2026-02-12 12:58:01 -05:00
xerte_unauthenticated_template_import_rce.rb
adds auto-check and fixes print statements
2026-02-12 12:58:01 -05:00
xwiki_unauth_rce_cve_2025_24893.rb
Add GHSA and OSV reference type support
2026-02-09 15:17:23 +01:00
zabbix_script_exec.rb
Remove redundant Platform and Arch definitions
2025-12-17 16:12:31 -05:00
zemra_panel_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
zenworks_configuration_management_upload.rb
Update info -d markdown
2025-06-24 11:21:49 +01:00
zenworks_control_center_upload.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00
zpanel_information_disclosure_rce.rb
Mass rubocop changes
2025-12-18 10:08:31 -05:00