Land rapid7#5084, @todb-r7's release fixes

Author: wvu

modules/auxiliary/gather/solarwinds_orion_sqli.rb

@@ -1,5 +1,5 @@
 ##
-# This module requires Metasploit: http//:metasploit.com/download
+# This module requires Metasploit: http://metasploit.com/download
 # Current source: https://github.com/rapid7/metasploit-framework
 ##
 
@@ -15,8 +15,8 @@ def initialize(info = {})
     super(update_info(info,
       'Name'           => 'Solarwinds Orion AccountManagement.asmx GetAccounts Admin Creation',
       'Description'    => %q{
-      This module exploits a stacked SQL injection in order to add an administrator user to the
-      SolarWinds Orion database.
+        This module exploits a stacked SQL injection in order to add an administrator user to the
+        SolarWinds Orion database.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>

modules/exploits/multi/http/jboss_seam_upload_exec.rb

@@ -1,5 +1,5 @@
 #
-# This module requires Metasploit: http//metasploit.com/download
+# This module requires Metasploit: http://metasploit.com/download
 # Current source: https://github.com/rapid7/metasploit-framework
 ##
 
@@ -22,19 +22,14 @@ def initialize(info = {})
             sanitize inputs to some JBoss Expression Language expressions.  As a
             result, attackers can gain remote code execution through the
             application server.  This module leverages RCE to upload and execute
-            a meterpreter payload.
+            a given payload.
 
-            Versions of the JBoss AS admin-console are known to be vulnerable to
-            this exploit, without requiring authentication.  Tested against
-            JBoss AS 5 and 6, running on Linux with JDKs 6 and 7.
+            Versions of the JBoss application server (AS) admin-console are
+            known to be vulnerable to this exploit, without requiring authentication.
+            Tested against JBoss AS 5 and 6, running on Linux with JDKs 6 and 7.
 
             This module provides a more efficient method of exploitation - it
             does not loop to find desired Java classes and methods.
-
-            NOTE: the check for upload success is not 100% accurate.
-            NOTE 2: The module uploads the meterpreter JAR and a JSP to launch
-            it.
-
         },
         'Author'                => [ 'vulp1n3 <vulp1n3[at]gmail.com>' ],
         'References'            =>

modules/exploits/windows/browser/adobe_flash_worker_byte_array_uaf.rb

@@ -15,11 +15,11 @@ def initialize(info={})
     super(update_info(info,
       'Name'                => 'Adobe Flash Player ByteArray With Workers Use After Free',
       'Description'         => %q{
-        This module exploits an use after free vulnerability in Adobe Flash Player. The
+        This module exploits a use-after-free vulnerability in Adobe Flash Player. The
         vulnerability occurs when the ByteArray assigned to the current ApplicationDomain
-        is freed from an ActionScript worker, who can fill the memory and notify the main
+        is freed from an ActionScript worker, which can fill the memory and notify the main
         thread to corrupt the new contents. This module has been tested successfully on
-        Windows 7 SP1 (32 bits), IE 8 to IE 11 and Flash 16.0.0.296.
+        Windows 7 SP1 (32-bit), IE 8 to IE 11 and Flash 16.0.0.296.
       },
       'License'             => MSF_LICENSE,
       'Author'              =>

modules/exploits/windows/http/solarwinds_fsm_userlogin.rb

@@ -27,8 +27,8 @@ def initialize(info={})
         Depending on the installation, by default the Change Advisor web server is listening on port
         48080 for an express install. Otherwise, this service may appear on port 8080.
 
-        Solarwinds has released a fix for this vulnerability as FSM-v6.6.5-HotFix1.zip. You may
-        download it from the module's References section.
+        Solarwinds has released a fix for this vulnerability as FSM-v6.6.5-HotFix1.zip, noted in the
+        references for this module.
       },
       'License'        => MSF_LICENSE,
       'Author'         =>