[Snyk] Security upgrade license_finder from 5.11.1 to 6.0.0 - #47

Open

busterb wants to merge 1569 commits into

snyk-fix-d418c0a425264644f6336e3cd74075ec

This pull request is big! We're only showing the most recent 250 commits

Commits on Jun 17, 2025

Add some features and delete old files for CVE-2025-33053 exploit module
DevBuiHieu
committed
9e5dd09
Add some features and fix all errors for CVE-2025-33053 exploit module
DevBuiHieu
committed
20629fe
Merge pull request #20109 from dwelch-r7/rails-7.2-upgrade
adfoster-r7
authored
04c368f
Revert "Bump rails version to 7.2"
adfoster-r7
authored
fb02b4a
Merge pull request #20320 from rapid7/revert-20109-rails-7.2-upgrade
dwelch-r7
authored
ab2c693
Add some features and fix all errors for CVE-2025-33053 exploit module
DevBuiHieu
committed
fda69e0

Commits on Jun 18, 2025

Add some features and fix bugs for CVE-2025-33053 exploit module
DevBuiHieu
committed
cb7badb
Add some features and fix bugs for CVE-2025-33053 exploit module
DevBuiHieu
committed
58609f3
Add some features and fix bugs for CVE-2025-33053 exploit module
DevBuiHieu
committed
20b8a9f
Final code for CVE-2025-33053 exploit module
DevBuiHieu
committed
ec5ba0b
Final code for CVE-2025-33053 exploit module
DevBuiHieu
committed
1d27be2
alias.rb
00nx
authored
b1e1fbc

Commits on Jun 19, 2025

Bump version of framework to 6.4.71
msjenkins-r7
committed
5ff0588
Merge pull request #20235 from Chocapikk/vbulletin_replace_ad_template_rce
dledda-r7
authored
c0dfbf4
Update modules/exploits/windows/fileformat/cve_2025_33053.rb

DevBuiHieu
and
msutovsky-r7
authored
4fde40a
Update modules/exploits/windows/fileformat/cve_2025_33053.rb

DevBuiHieu
and
msutovsky-r7
authored
600ffdb
Update cve_2025_33053.rb
DevBuiHieu
authored
efc0c25
Update modules/exploits/windows/fileformat/cve_2025_33053.rb

DevBuiHieu
and
msutovsky-r7
authored
a0f1b0c
Update modules/exploits/windows/fileformat/cve_2025_33053.rb

DevBuiHieu
and
msutovsky-r7
authored
f3c4d95
Adds Rubocop rule to detect leading/trailing whitespace in module metadata
cgranleese-r7
committed
9eef0cf
Update cve_2025_33053.rb
DevBuiHieu
authored
dd51952
Add flag to vuln command to show vuln attempts
cgranleese-r7
committed
65ed80f
Adding PPC64 template, fixing PPC64 single payloads
msutovsky-r7
committed
00852f4
Adding PPC64 template, fixing PPC64 single payloads
msutovsky-r7
committed
be394b7
Merge pull request #20327 from cgranleese-r7/update-vulns-command
adfoster-r7
authored
6d897ea
Merge pull request #20315 from cgranleese-r7/adds-rubocop-rule-to-detect-module-metadata-whitespace
adfoster-r7
authored
b0dbe03

Commits on Jun 20, 2025

Removes overlooked file
msutovsky-r7
committed
2122a34
Fixes some conditionals in modules
cgranleese-r7
committed
42f31c0
Merge pull request #20330 from cgranleese-r7/fixes-conditional
adfoster-r7
authored
7208c10
Runs Rubocop to fix layout in modules
cgranleese-r7
committed
a4b14d8
aux module for CVE-2024-51978
sfewer-r7
committed
83a03ef
Merge pull request #20329 from cgranleese-r7/runs-layout-rubocop-on-modules
adfoster-r7
authored
04a6185
Slightly better module popularity counter
todb
committed
21e093a
Make msfbase actually do something useful
todb
committed
81cb85e

Commits on Jun 21, 2025

Add payload/linux/x64/set_hostname module.
Muzaffer Umut ŞAHİN
committed
539514b
Rubocop: Lint/DetectMetadataTrailingLeadingWhitespace: Except BadChars
bcoles
committed
e65532a
Update opennms_horizon_authenticated_rce.rb
BitTheByte
authored
0307bab

Commits on Jun 22, 2025

Commits on Jun 23, 2025

Commits on Jun 24, 2025

add in references
sfewer-r7
committed
edea803
use Base64.strict_encode64
sfewer-r7
committed
14191f6
Adds SMB server to send payload
msutovsky-r7
committed
3d9cc60
Remove debug statements
msutovsky-r7
committed
dd6bb2c
Update info -d markdown
cgranleese-r7
committed
a454217
Adds a check to skip modules with execellent ranking and sentinel values
cgranleese-r7
committed
30c1553
Merge pull request #1 from msutovsky-r7/collab/webdav_working_dir_exploit
DevBuiHieu
authored
78f982e
Update modules/exploits/windows/fileformat/cve_2025_33053.rb

DevBuiHieu
and
msutovsky-r7
authored
fa0d01f
Merge pull request #20206 from adfoster-r7/update-mettle
smcintyre-r7
authored
1224551
Removes unnecessary header

msutovsky-r7
and
dledda-r7
authored
a67c883
Minor code changes, updates documentation
msutovsky-r7
committed
13cd2d2
Merge pull request #2 from msutovsky-r7/collab/webdav_working_dir_exploit
DevBuiHieu
authored
e198cf6
Add helper methods for ace type checks
zeroSteiner
committed
475760a
Initial commit of AD DS LDAP mixin
zeroSteiner
committed
70f7dfe
Initial implementation of #adds_sd_grants_permissions?
zeroSteiner
committed
7b1af9f
Add a method to get domain info
zeroSteiner
committed
cf53956
Add and use a generic LDAP entry cache
zeroSteiner
committed
b8ecd50
Add some documentation for the methods
zeroSteiner
committed
23c85a2
Update the RBCD module to use the new mixin
zeroSteiner
committed
cf48211
Use the smaller base64 encoder
zeroSteiner
committed
6334996

Commits on Jun 25, 2025

Commits on Jun 26, 2025

resolved: issues
happybear-21
committed
016f4ea
Bump version of framework to 6.4.72
msjenkins-r7
committed
29b0efc
Removing header
msutovsky-r7
committed
240bc82
Fixed documentation issues
msutovsky-r7
committed
7b845fa
Merge pull request #20298 from bcoles/modules-SSL
adfoster-r7
authored
a0bb2d8
This resolves the 'Proto is not included in the list' error during create_credential
sfewer-r7
committed
c6ffcdb
include the password in the verbose status message

sfewer-r7
and
jvoisin
authored
f66389b
fail with a message that includes the unexpected length value

sfewer-r7
and
jvoisin
authored
a7b26ac
this status message should explicitly say it has generated the *default* password

sfewer-r7
and
jvoisin
authored
84dda69
add the salt_table_index value in the failure message
sfewer-r7
committed
6bdebf6
Use a more permissive regex to pull out the logbox name value

sfewer-r7
and
jvoisin
authored
18b00ce

Commits on Jun 27, 2025

Code refactor, docs
msutovsky-r7
committed
37e8780
Adds BadChars
msutovsky-r7
committed
ee890a8
Merge pull request #20341 from msutovsky-r7/exploit/skyvern_ssti_rce
dledda-r7
authored
a7b038b
resolved: issues
happybear-21
committed
840ae0f
fixed: build issue
happybear-21
committed
93a8334
Land #20346, fixes payload encoding and substitutes for smaller base64 encoder
msutovsky-r7
authored
126bff1
Merge pull request #20289 from cgranleese-r7/adds-mitre-attack-references
smcintyre-r7
authored
50a2749
Revive windows/aarch64/exec Payload
xaitax
committed
1dadec8
Merge branch 'rapid7:master' into add-windows-aarch64-winexec-payload
xaitax
authored
114def2

Commits on Jun 28, 2025

Add ASM template
xaitax
committed
7b76a83
added: automatic admin_allow_langedit permission checking and enabling capability
happybear-21
committed
e77abd9
Addresses comments, fixes check method
msutovsky-r7
committed
af4cd2a
Fixes documentation
msutovsky-r7
committed
5c8d918
Readability
xaitax
committed
3069d6a

Commits on Jun 29, 2025

Fix module cache generation
adfoster-r7
committed
66bae42
resolved: issues
happybear-21
committed
ff15b58
Fix payload module reloading functionality
xaitax
committed
8034930
Merge pull request #20358 from adfoster-r7/fix-module-cache-generation
cgranleese-r7
authored
f57a3c2
automatic module_metadata_base.json update
jenkins-metasploit
committed
583ffce
Add syslog to gemspec
adfoster-r7
committed
bdc368f
Merge pull request #20360 from adfoster-r7/add-syslog-to-gemspec
cgranleese-r7
authored
07ae49d
Bump version of framework to 6.4.73
msjenkins-r7
committed
65faeb4

Commits on Jun 30, 2025

Update ruby version 3.3.8
adfoster-r7
committed
f0626b3
Fix Bleichenbacher Oracle module on hosts with Python 2
sjanusz-r7
committed
41b83b7
Update modules/payloads/singles/windows/aarch64/exec.rb

xaitax
and
dledda-r7
authored
91a3cc2
Merge pull request #20362 from sjanusz-r7/improve-bleichenbacher-oracle-python-version-detection
adfoster-r7
authored
3a034ba
automatic module_metadata_base.json update
jenkins-metasploit
committed
eb63882
removed: unused imports, and functions, removed: falsey statements, resolved: changes
happybear-21
committed
47f2ba2

Commits on Jul 1, 2025

Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
232f1b4
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
18ec6af
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
e657aee
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
f2b3e00
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
74de17f
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
efc6152
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
743478b
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
d77d053
Update lib/msf/core/module_manager/reloading.rb

xaitax
and
msutovsky-r7
authored
9470a8b
resolved: changes
happybear-21
committed
20134b5
favor AUTO over ANY for this enum

sfewer-r7
and
dledda-r7
authored
14512d7
favor AUTO over ANY for this enum usage

sfewer-r7
and
dledda-r7
authored
5635484
update the docs to use AUTO for the enum option
sfewer-r7
committed
a7e4b56
resolved: changes updated methods
happybear-21
committed
03e9437
Add WingFTP unauthenticated RCE (CVE-2025-47812)
Chocapikk
committed
1a4a15e
Remove useless mixin
Chocapikk
committed
5d9eb58
Remove php mixin and arch
Chocapikk
committed
f7a649c
Fix documentation and typos
Chocapikk
committed
5b268bd

Commits on Jul 2, 2025

Update modules/exploits/multi/http/wingftp_null_byte_rce.rb

Chocapikk
and
jvoisin
authored
32f7754

Commits on Jul 3, 2025

Update reloading.rb
xaitax
committed
e11277f
Bump version of framework to 6.4.74
msjenkins-r7
committed
5c08321
Update reloading.rb
xaitax
committed
8bf1c40
Fixing payload reloading
msutovsky-r7
committed
9445bb3
Removes debug stuff
msutovsky-r7
committed
b9e8c9d
Merge pull request #1 from msutovsky-r7/collab/fix/payload-reload
xaitax
authored
e351da4
Update modules/exploits/multi/http/wingftp_null_byte_rce.rb

Chocapikk
and
msutovsky-r7
authored
d625ab5
Update modules/exploits/multi/http/wingftp_null_byte_rce.rb

Chocapikk
and
msutovsky-r7
authored
d79810a
Fix `exploit/unix/http/maltrail_rce.rb`
Chocapikk
committed
1944c69
Land #20365, fixes/refactors the Maltrail RCE module
msutovsky-r7
authored
0553d6b
automatic module_metadata_base.json update
jenkins-metasploit
committed
346c17d
fixed: rubocop issues, changes resolved
happybear-21
committed
1700b2e
Update documentation/modules/exploit/multi/http/wingftp_null_byte_rce.md

Chocapikk
and
cdelafuente-r7
authored
ef3ddec
Update modules/exploits/multi/http/wingftp_null_byte_rce.rb

Chocapikk
and
cdelafuente-r7
authored
6edbfb3
Update wingftp_null_byte_rce.md
Chocapikk
authored
b9ee9ba

Commits on Jul 4, 2025

Addressing comments
msutovsky-r7
committed
195b874
Rewriting shellcode, making it smaller
msutovsky-r7
committed
d0df343
Updates cached_size
msutovsky-r7
committed
dbe4226
Removes null-bytes
msutovsky-r7
committed
b1de0c6
Merge pull request #1 from msutovsky-r7/collab/payload/set_hostname_linux_x64
xHector1337
authored
4e27e2f
Updates specs for set_hostname payload
msutovsky-r7
committed
a09415f
Merge pull request #2 from msutovsky-r7/collab/payload/update_specs
xHector1337
authored
2c16779
Add exit(0) syscall
xHector1337
authored
4cb523a
Update CachedSize
xHector1337
authored
f0a64b9

Commits on Jul 5, 2025

Running Rubocop
msutovsky-r7
committed
1ee9d61
DRY code, grab wingftp version in check method
Chocapikk
committed
7629dd7

Commits on Jul 6, 2025

Land #20334, adds payload linux/x64/set_hostname
msutovsky-r7
authored
bc705b8
automatic module_metadata_base.json update
jenkins-metasploit
committed
1e0a3de

Commits on Jul 7, 2025

Merge pull request #20209 from adfoster-r7/update-ruby-version-3.3.8
adfoster-r7
authored
ada43cd
Refactors code
msutovsky-r7
committed
7d88156
Updates docs
msutovsky-r7
committed
ffa2152
Bump IRB

szymonj99
authored and
sjanusz-r7
committed
11099c2
Land #20364, adds WingFTP unauthenticated RCE module
msutovsky-r7
authored
93f902f
automatic module_metadata_base.json update
jenkins-metasploit
committed
a8bb218
Merge pull request #19709 from szymonj99/bump-irb
adfoster-r7
authored
3068408

Commits on Jul 8, 2025

Mention our corporate sponsors in the banner
zeroSteiner
committed
432bcfc
Merge pull request #20371 from zeroSteiner/feat/ui/r7-banner
adfoster-r7
authored
3dc9e6a
Merge pull request #1 from msutovsky-r7/collab/cve-2023-46818
happybear-21
authored
ef611d1
Update Metasploit docs branding
adfoster-r7
committed
fe4da47
Merge pull request #20373 from adfoster-r7/update-metasploit-docs-branding
smcintyre-r7
authored
65124d0
Expand on the matcher logic
zeroSteiner
committed
c2a06e3
Update the ad_cs_cert_template module too
zeroSteiner
committed
7cacc4c
Use the new function instead of the old
zeroSteiner
committed
8b8b350
Add some commented code for debugging
zeroSteiner
committed
d0d3a27
Add some basic tests
zeroSteiner
committed
a93d20c
Add special handling for more groups
zeroSteiner
committed
2650956
Note the permissions required for checking permissions
zeroSteiner
committed
23c02d6
Cache the result of whoami
zeroSteiner
committed
566020a
Check for full permissions on certs too
zeroSteiner
committed
2ab90df
Merge pull request #20345 from zeroSteiner/feat/lib/ldap-adds/1
jheysel-r7
authored
79d67dd
automatic module_metadata_base.json update
jenkins-metasploit
committed
4626e8f

Commits on Jul 9, 2025

Land #20354, adds module for ISPConfig code injection (CVE-2023-46818)
msutovsky-r7
authored
ffdfa07
automatic module_metadata_base.json update
jenkins-metasploit
committed
32559a3
display the AuthCookie if one is received
sfewer-r7
committed
34952d7
chore: update template_aarch64_windows.exe
dledda-r7
committed
ea68ee5
make this error message not that no password may be present on the device
sfewer-r7
committed
ab913b0
fix typo in message
sfewer-r7
committed
df24090
Merge pull request #20349 from sfewer-r7/0day-cve-2024-51978
bwatters-r7
authored
36675cc
automatic module_metadata_base.json update
jenkins-metasploit
committed
14fb001

Commits on Jul 10, 2025

Adds reloading for stagers/stages/adapters
msutovsky-r7
committed
8e16a50
Appeasing the RuboCop gods: added docs, fixed warnings, made it happy.
xaitax
committed
b643c62
WP Photo Gallery by 10Web Unauthenticated SQLi (CVE-2022-0169)
Chocapikk
committed
622072b
Update data/templates/src/pe/exe/template_aarch64_windows.asm

xaitax
and
dledda-r7
authored
8d0aaac
Update modules/auxiliary/gather/wp_photo_gallery_sqli.rb

Chocapikk
and
jvoisin
authored
69f8679
Update modules/auxiliary/gather/wp_photo_gallery_sqli.rb

Chocapikk
and
bwatters-r7
authored
cf0596a
fix
Chocapikk
committed
9d56001
Update license generation
adfoster-r7
committed
c2007c7
Merge pull request #20377 from adfoster-r7/update-license-generation
adfoster-r7
authored
7a2753f
Bump version of framework to 6.4.75
msjenkins-r7
committed
74cce35

Commits on Jul 11, 2025

Land #20359, fixes payload reloading
msutovsky-r7
authored
3e5bdda
Merge pull request #20357 from xaitax/add-windows-aarch64-winexec-payload
bwatters-r7
authored
b4188e7
automatic module_metadata_base.json update
jenkins-metasploit
committed
60a6658

Commits on Jul 15, 2025

Merge pull request #20216 from sjanusz-r7/add-graphql-aux-scanner-module
jheysel-r7
authored
914f874
automatic module_metadata_base.json update
jenkins-metasploit
committed
04c7945

Commits on Jul 16, 2025

Fix update action in ad_cs_cert_template
jheysel-r7
committed
e328a8f
Merge pull request #20388 from jheysel-r7/fix/regression/ad_cs_cert_template
sjanusz-r7
authored
166479f
automatic module_metadata_base.json update
jenkins-metasploit
committed
87122cb
Updates docs
msutovsky-r7
committed
f773e3a
Bump data_models gem to 6.0.10 and model gem to 5.0.4
cdelafuente-r7
committed
0f86dd7
Merge pull request #20389 from cdelafuente-r7/enh/gems_version_bump
adfoster-r7
authored
8fdf0ea
Pin StringIO version
adfoster-r7
committed
850b934
Add a missing keyword for option validation
zeroSteiner
committed
be10b82
Remove the version from the default prompt
zeroSteiner
committed
2810851
refactor(wp_photo_gallery): drop unused action + guard against LocalJumpError in SQLi helper
Chocapikk
committed
efa49d2

Commits on Jul 17, 2025

Merge pull request #20391 from zeroSteiner/fix/issue/20366
cgranleese-r7
authored
170cb15
Merge pull request #20392 from zeroSteiner/fix/issue/20355
cgranleese-r7
authored
73470fe
Merge pull request #20390 from adfoster-r7/pin-stringio-version
cgranleese-r7
authored
f16de58
Updates docs to reflect new default prompt
cgranleese-r7
committed
469f102
Bump rex-socket to 0.1.63
sjanusz-r7
committed
3bb3429
Fix acceptance tests prompt matching
sjanusz-r7
committed
99c9e8c
Update pandora_fms_auth_netflow_rce.md
dledda-r7
authored
ca9535e
Merge pull request #20395 from sjanusz-r7/bump-rex-socket
adfoster-r7
authored
cf13498
Merge pull request #20356 from msutovsky-r7/exploit/pandorafms_netflow_rce
dledda-r7
authored
18d61d3
automatic module_metadata_base.json update
jenkins-metasploit
committed
2601c07
Updates msf5 as well
cgranleese-r7
committed
adff497
Merge pull request #20394 from cgranleese-r7/update-docs-to-reflect-new-default-prompt
adfoster-r7
authored
8fe815d
Bump version of framework to 6.4.76
msjenkins-r7
committed
b6a04c2

Commits on Jul 18, 2025

Merge pull request #20375 from Chocapikk/wp_photo_gallery_sqli
jheysel-r7
authored
00c8c77
automatic module_metadata_base.json update
jenkins-metasploit
committed
6dcefab

Commits on Sep 24, 2025

fix: Gemfile to reduce vulnerabilities
snyk-bot
committed
abfe191