Replace links

Author: wchen-r7

modules/auxiliary/admin/http/arris_motorola_surfboard_backdoor_xss.rb

@@ -46,7 +46,8 @@ def initialize(info = {})
       'References' => [
         [ 'CVE', '2015-0964' ], # XSS vulnerability
         [ 'CVE', '2015-0965' ], # CSRF vulnerability
-        [ 'CVE', '2015-0966' ]  # "techician/yZgO8Bvj" web interface backdoor
+        [ 'CVE', '2015-0966' ], # "techician/yZgO8Bvj" web interface backdoor
+        [ 'URL', 'https://community.rapid7.com/community/infosec/blog/2015/06/05/r7-2015-01-csrf-backdoor-and-persistent-xss-on-arris-motorola-cable-modems' ],
       ]
     ))
 

modules/auxiliary/admin/http/manage_engine_dc_create_admin.rb

@@ -27,7 +27,8 @@ def initialize(info = {})
         [
           ['CVE', '2014-7862'],
           ['OSVDB', '116554'],
-          ['URL', 'http://seclists.org/fulldisclosure/2015/Jan/2']
+          ['URL', 'http://seclists.org/fulldisclosure/2015/Jan/2'],
+          ['URL', 'https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_dc9_admin.txt'],
         ],
       'DisclosureDate' => 'Dec 31 2014'))
 

modules/auxiliary/admin/http/manageengine_dir_listing.rb

@@ -36,7 +36,8 @@ def initialize(info={})
         [
           ['CVE', '2014-7863'],
           ['OSVDB', '117696'],
-          ['URL', 'http://seclists.org/fulldisclosure/2015/Jan/114']
+          ['URL', 'http://seclists.org/fulldisclosure/2015/Jan/114'],
+          ['URL', 'https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_failservlet.txt']
         ],
       'DisclosureDate' => 'Jan 28 2015'))
 

modules/auxiliary/admin/http/manageengine_file_download.rb

@@ -34,7 +34,8 @@ module will attempt to login using the default credentials for the administrator
         [
           ['CVE', '2014-7863'],
           ['OSVDB', '117695'],
-          ['URL', 'http://seclists.org/fulldisclosure/2015/Jan/114']
+          ['URL', 'http://seclists.org/fulldisclosure/2015/Jan/114'],
+          ['URL', 'https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_failservlet.txt']
         ],
       'DisclosureDate' => 'Jan 28 2015'))
 

modules/auxiliary/admin/http/manageengine_pmp_privesc.rb

@@ -34,7 +34,8 @@ def initialize(info = {})
         [
           [ 'CVE', '2014-8499' ],
           [ 'OSVDB', '114485' ],
-          [ 'URL', 'http://seclists.org/fulldisclosure/2014/Nov/18' ]
+          [ 'URL', 'http://seclists.org/fulldisclosure/2014/Nov/18' ],
+          [ 'URL', 'https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_pmp_privesc.txt' ],
         ],
       'DisclosureDate' => 'Nov 8 2014'))
 

modules/auxiliary/admin/http/netflow_file_download.rb

@@ -28,7 +28,8 @@ def initialize(info={})
         [
           [ 'CVE', '2014-5445' ],
           [ 'OSVDB', '115340' ],
-          [ 'URL', 'http://seclists.org/fulldisclosure/2014/Dec/9' ]
+          [ 'URL', 'http://seclists.org/fulldisclosure/2014/Dec/9' ],
+          [ 'URL', 'https://github.com/pedrib/PoC/blob/master/advisories/ManageEngine/me_netflow_it360_file_dl.txt' ]
         ],
       'DisclosureDate' => 'Nov 30 2014'))
 

modules/auxiliary/admin/http/sysaid_admin_acct.rb

@@ -27,7 +27,8 @@ def initialize(info = {})
       'References' =>
         [
           [ 'CVE', '2015-2993' ],
-          [ 'URL', 'http://seclists.org/fulldisclosure/2015/Jun/8' ]
+          [ 'URL', 'http://seclists.org/fulldisclosure/2015/Jun/8' ],
+          [ 'URL', 'https://github.com/pedrib/PoC/blob/master/advisories/sysaid-14.4-multiple-vulns.txt' ],
         ],
       'DisclosureDate' => 'Jun 3 2015'))
 

modules/auxiliary/admin/http/sysaid_file_download.rb

@@ -34,7 +34,8 @@ def initialize(info={})
         [
           ['CVE', '2015-2996'],
           ['CVE', '2015-2997'],
-          ['URL', 'http://seclists.org/fulldisclosure/2015/Jun/8']
+          ['URL', 'http://seclists.org/fulldisclosure/2015/Jun/8'],
+          ['URL', 'https://github.com/pedrib/PoC/blob/master/advisories/sysaid-14.4-multiple-vulns.txt'],
         ],
       'DisclosureDate' => 'Jun 3 2015'))
 

modules/auxiliary/admin/http/sysaid_sql_creds.rb

@@ -29,7 +29,8 @@ def initialize(info={})
         [
           ['CVE', '2015-2996'],
           ['CVE', '2015-2998'],
-          ['URL', 'http://seclists.org/fulldisclosure/2015/Jun/8']
+          ['URL', 'http://seclists.org/fulldisclosure/2015/Jun/8'],
+          ['URL', 'https://github.com/pedrib/PoC/blob/master/advisories/sysaid-14.4-multiple-vulns.txt']
         ],
       'DisclosureDate' => 'Jun 3 2015'))
 

modules/auxiliary/bnat/bnat_router.rb

@@ -21,6 +21,7 @@ def initialize
       'License'      => MSF_LICENSE,
       'References'   =>
         [
+          [ 'URL', 'https://github.com/claudijd/bnat' ],
           [ 'URL', 'http://www.slideshare.net/claudijd/dc-skytalk-bnat-hijacking-repairing-broken-communication-channels']
         ]
     )