v7.15 Support added

Updated to work with v7.15 too.

Author: h4x-x0r

documentation/modules/exploit/multi/misc/calibre_exec.md

@@ -2,12 +2,12 @@
 
 **Vulnerability Description**
 
-This module exploits a vulnerability in Calibre <= v6.9.0 - v7.14.0 (CVE-2024-6782).
+This module exploits a vulnerability in Calibre <= v6.9.0 - v7.15.0 (CVE-2024-6782).
 
 An unauthenticated remote attacker can exploit this vulnerability to gain arbitrary code execution in the context of which Calibre is being
 executed.
 
-All versions between v6.9.0 - v7.14.0 are affected. STAR Labs published [an advisory](https://starlabs.sg/advisories/24/24-6782/) that
+All versions between v6.9.0 - v7.15.0 are affected. STAR Labs published [an advisory](https://starlabs.sg/advisories/24/24-6782/) that
 includes the root cause analysis and a proof-of-concept.
 
 **Vulnerable Application Installation**
@@ -17,12 +17,14 @@ Calibre can be downloaded from [here](https://download.calibre-ebook.com/).
 **Successfully tested on**
 
 Windows:
+- Calibre v7.15 on Windows 10 22H2
 - Calibre v7.14 on Windows 10 22H2
 - Calibre v7.0 on Windows 10 22H2
 - Calibre v6.29 on Windows 10 22H2
 - Calibre v6.9 on Windows 10 22H2
 
 Linux:
+- Calibre v7.15 on Ubuntu 24.04 LTS
 - Calibre v7.14 on Ubuntu 24.04 LTS
 - Calibre v7.0 on Ubuntu 24.04 LTS
 - Calibre v6.29 on Ubuntu 24.04 LTS

modules/exploits/multi/misc/calibre_exec.rb

@@ -9,7 +9,7 @@ def initialize(info = {})
         info,
         'Name' => 'Calibre Python Code Injection (CVE-2024-6782)',
         'Description' => %q{
-          This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.14.0. Once enabled (disabled by default), it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any authentication. The injected payload will get executed in the same context under which Calibre is being executed.
+          This module exploits a Python code injection vulnerability in the Content Server component of Calibre v6.9.0 - v7.15.0. Once enabled (disabled by default), it will listen in its default configuration on all network interfaces on TCP port 8080 for incoming traffic, and does not require any authentication. The injected payload will get executed in the same context under which Calibre is being executed.
         },
         'License' => MSF_LICENSE,
         'Author' => [
@@ -93,7 +93,7 @@ def check
         vprint_status('Version retrieved: ' + version[1].to_s)
       end
 
-      if Rex::Version.new(version[1]) <= Rex::Version.new('7.14.0') && Rex::Version.new(version[1]) >= Rex::Version.new('6.9.0')
+      if Rex::Version.new(version[1]) <= Rex::Version.new('7.15.0') && Rex::Version.new(version[1]) >= Rex::Version.new('6.9.0')
         return CheckCode::Appears
       else
         return CheckCode::Safe