d8e0b17777
Land #10973 , Rework DisclosureDate check in msftidy, including ISO 8601 support
2018-11-19 08:50:32 -08:00
69e72e6a1f
Land #10847 - Add blueimp's jQuery (Arbitrary) File Upload
...
CVE-2018-9206
2018-11-05 09:39:35 -08:00
9b495913dc
Land #10873 , Add notes to exploit modules
2018-11-02 12:13:37 -07:00
549c835af5
Land #10836 , Add Morris worm sendmail debug mode exploit
2018-11-02 09:22:22 -07:00
f0096227e7
Land #10505 , post-auth and default creds info
2018-10-24 17:09:28 -05:00
5f25c977ec
Land #10837 , QNX qconn module rename (redux)
2018-10-22 14:19:45 -07:00
43b0e56b09
Land #10817 , QNX qconn module rename
2018-10-22 14:19:44 -07:00
12cb3b4d3e
Land #10750 , formatting and AKA reference fixes
2018-10-05 01:34:14 -07:00
b42af6cd96
Land #10728 , metadata updates for @rastating
2018-10-02 11:46:30 -07:00
1ee8734717
Land #10570 , AKA Metadata Refactor
2018-09-17 20:31:07 -07:00
2ee6a49a27
Land #10649 , https://seclists.org references
2018-09-17 15:09:39 -07:00
eb39f6da51
Land #10564 , Add Ghostscript exploit from taviso
2018-09-05 19:09:11 -07:00
bf7c530f7e
Land #10456 , known_hosts fix for SSH modules
2018-08-16 13:43:26 -07:00
0bc84bb6c6
Land #10305 , SonicWall XML-RPC RCE
2018-07-30 12:15:59 -07:00
4ec22c0ceb
Land #10376 , Handle connection errors and fail_with in check
2018-07-26 09:28:58 -07:00
8e5639a081
Land #10374 , Net::SSH::CommandStream fixes
2018-07-25 16:23:47 -07:00
465dceb182
Land #10299 , Add 88 CVEs to various auxiliary and exploit modules
2018-07-12 16:28:05 -07:00
d480ee8e20
Land #10275 , Update missing CVE references for exploit modules
2018-07-12 11:24:01 -05:00
f14597bcb2
Land #10199 , Kace Systems Management Command Injection
2018-06-26 10:11:07 -07:00
7f372d178d
Land #10059 , CVE-2018-1111 exploit
2018-06-12 13:04:36 -07:00
3bc5b0bdcb
Land #9991 , Remove need for temp file with xdebug_unauth_exec
2018-05-15 11:58:15 -07:00
a74b2b5716
Land #9970 , final update to Drupalgeddon 2
2018-05-04 09:40:31 -05:00
935fa6414e
Land #9968 , second round of Drupalgeddon 2 updates
2018-05-04 09:38:34 -05:00
3b8280c33f
Land #9918 , XDebug Unauthenticated OS command execution
2018-04-30 09:42:26 -05:00
492b6003b5
Land #9931 , minor fixes for #9876 (Drupalgeddon 2)
2018-04-26 08:29:59 -07:00
d340ef2632
Land #9876 , Drupalgeddon 2
2018-04-26 08:29:59 -07:00
ef4fd1dc75
Land #9742 , QNX exploit improvements
2018-04-03 09:13:57 -05:00
3b87bf5a03
Land #9666 , Add 2017-8917 RCE for Joomla 3.7.0
2018-03-29 09:17:54 -07:00
4e8fe54c6c
Land #9524 , prefer 'shell' channels over 'exec' channels for ssh CommandStream
2018-02-22 08:27:36 -08:00
a87ae41d81
Land #9446 , Post API fix for setuid_nmap
2018-01-26 18:08:47 -06:00
2f9eebe28b
remove plugin dir
2018-01-15 14:48:59 +01:00
7e2c7837e5
Land #9325 , Add CVE-2017-6090 phpCollab 2.5.1 file upload exploit module
...
Land #9325
2018-01-10 17:39:50 -06:00
b1f3f471f3
Update phpcollab_upload_exec code (also module documentation)
2018-01-10 17:38:52 -06:00
dd737c3bc8
Land #9317 , remove multiple deprecated modules
...
Land #9317
The following modules are replaced by the following:
auxiliary/scanner/discovery/udp_probe
is replaced by:
auxiliary/scanner/discovery/udp_sweep
exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload
is replaced by:
exploit/multi/http/wp_ninja_forms_unauthenticated_file_upload
exploit/windows/misc/regsvr32_applocker_bypass_server
is replaced by:
exploits/multi/script/web_delivery
2018-01-10 15:47:20 -06:00
c9d6d0a7a7
-51
2018-01-04 12:25:31 -06:00
16d709f180
changes+filedropper
2018-01-03 14:09:30 -06:00
8f0e41e159
requested changes
2018-01-01 17:30:43 -06:00
c47d09717d
pfsense graph sploit
2018-01-01 03:18:51 -06:00
e6de25d63b
Land #9316 Cambium modules and mixins, tx @juushya
...
These cover several of the CVEs mentioned in
https://blog.rapid7.com/2017/12/19/r7-2017-25-cambium-epmp-and-cnpilot-multiple-vulnerabilities/
2017-12-26 12:39:51 -06:00
8b0f2214b1
few more updates
2017-12-23 03:04:11 +05:30
038119d9df
Use of get_cookies_parsed, changing dirs, marking deprecated in 2 mods, more
2017-12-23 00:14:27 +05:30
b29948412e
Correct permissions, fixing warning
2017-12-22 07:27:11 -08:00
a86abb0297
Implemented get_cookies_parsed
2017-12-22 05:36:36 +05:30
86ce3c8781
Made suggested changes and added documentation
2017-12-20 15:54:16 -05:00
ce457db1e3
fixed spaces at EOL
2017-12-20 09:24:30 -05:00
d6024277fc
fixed missing quote
2017-12-20 09:03:32 -05:00
139afe45a9
Add phpCollab 2.5.1 exploit module
2017-12-20 08:36:58 -05:00
a4098803b3
Remove OSVDB reference
2017-12-20 13:10:42 +01:00
a2c5cc0ffb
Remove old deprecated modules
2017-12-19 07:56:16 -08:00
d3638d0487
Land #9154 , Tuleap PHP object injection exploit
2017-12-18 03:19:42 -06:00
Brent Cook
Wei Chen
Jacob Robles
William Vu
Shelby Pace
Aaron Soto
Christian Mehlmauer
wetw0rk
Tod Beardsley
juushya
Jon Hart
Nick Marcoccio
EgiX