Lucene search
29AB2E6A-3E44-55A2-801D-2971FABB2E5DHistorySep 15, 2021 - 10:34 p.m.
Exploit for Path Traversal in Microsoft
2021-09-1522:34:35
221
path traversal
microsoft
exploit
cve-2021-40444
cve-2022-30190
follina
remote code execution
microsoft word
dll
html
cab file
zipslip
rundll32
lockedbyte poc
size constraint
byte-patching
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
AI Score
7.8
Confidence
High
EPSS
0.971
Percentile
99.8%
Fully Weaponized CVE-2021-40444
Malicious docx generator to e…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
githubexploit
githubexploit
thn
thn
trellix
trellix
Countering Follina Attack (CVE- 2022-30190) with Trellix Network Security Platform’s Advanced Detection Features
2022-07-19 00:00:00
Countering Follina Attack (CVE- 2022-30190) with Trellix Network Security Platform’s Advanced Detection Features
2022-07-19 00:00:00
Prime Minister’s Office Compromised: Details of Recent Espionage Campaign
2022-01-25 00:00:00
attackerkb
attackerkb
CVE-2022-30190
2022-06-01 00:00:00
CVE-2021-40444
2021-09-15 00:00:00
pentestpartners
pentestpartners
Follina 0day exploit. Malicious code execution in Office docs
2022-06-01 05:38:30
packetstorm
packetstorm
Microsoft Office MSDT Follina Proof Of Concept
2022-05-31 00:00:00
Microsoft Office Word MSHTML Remote Code Execution
2021-12-09 00:00:00
Microsoft Office Word MSDTJS Code Execution
2022-06-07 00:00:00
threatpost
threatpost
Microsoft Releases Workaround for ‘One-Click’ 0Day Under Active Attack
2022-06-01 10:38:37
MSHTML Flaw Exploited to Attack Russian Dissidents
2022-03-30 13:13:49
Microsoft, CISA Urge Mitigations for Zero-Day RCE Flaw in Windows
2021-09-08 12:24:51
securelist
securelist
Exploitation of the CVE-2021-40444 vulnerability in MSHTML
2021-09-16 15:30:57
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer MSHTML Remote Code Execution (CVE-2021-40444)
2021-09-09 00:00:00
Microsoft Support Diagnostic Tool Remote Code Execution (CVE-2022-30190)
2022-06-01 00:00:00
cisa_kev
cisa_kev
Microsoft MSHTML Remote Code Execution Vulnerability
2021-11-03 00:00:00
malwarebytes
malwarebytes
MSHTML attack targets Russian state rocket centre and interior ministry
2021-09-22 19:16:56
Woody RAT: A new feature-rich malware spotted in the wild
2022-08-03 21:00:00
Meet Exotic Lily, access broker for ransomware and other malware peddlers
2022-03-18 22:58:48
cisa
cisa
Microsoft Releases Mitigations and Workarounds for CVE-2021-40444
2021-09-07 00:00:00
Microsoft Releases Workaround Guidance for MSDT "Follina" Vulnerability
2022-05-31 00:00:00
trendmicroblog
trendmicroblog
metasploit
metasploit
Microsoft Office Word Malicious MSHTML RCE
2021-11-09 11:18:58
Microsoft Office Word MSDTJS
2022-05-30 17:23:18
rapid7blog
rapid7blog
Metasploit Wrap-Up
2021-12-10 21:36:13
CVE-2022-30190: "Follina" Microsoft Support Diagnostic Tool Vulnerability
2022-05-31 15:15:16
talosblog
talosblog
mmpc
mmpc
Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability
2021-09-15 23:40:56
zdt
zdt
Microsoft Office Word MSHTML Remote Code Execution Exploit
2021-12-09 00:00:00
Microsoft Office Word MSDTJS Code Execution Exploit
2022-06-07 00:00:00
hivepro
hivepro
New Threat Actor Exotic Lily acting as Initial Access Broker for Conti and Diavol ransomware group
2022-03-21 05:34:00
Exploitation of Follina leads to takeover of domain controller
2022-11-04 12:38:02
Actors, Threats and Vulnerabilities 22 to 28 May 2023
2023-05-30 07:42:00
cnvd
cnvd
Microsoft MSHTML Remote Code Execution Vulnerability
2021-09-08 00:00:00
mssecure
mssecure
Analyzing attacks that exploit the CVE-2021-40444 MSHTML vulnerability
2021-09-15 23:40:56
kaspersky
kaspersky
KLA12277 RCE vulnerability in Microsoft Windows
2021-09-07 00:00:00
KLA12278 RCE vulnerability in Microsoft Products (ESU)
2021-09-07 00:00:00
KLA12550 RCE vulnerability in Microsoft Products (ESU)
2022-05-30 00:00:00
nessus
nessus
Security Updates for Internet Explorer (September 2021)
2021-09-14 00:00:00
cve
cve
CVE-2021-40444
2021-09-15 12:15:16
CVE-2022-30190
2022-06-01 20:15:07
mscve
mscve
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability
2022-05-30 07:00:00
Microsoft MSHTML Remote Code Execution Vulnerability
2021-09-07 07:00:00
hackerone
hackerone
Reddit: Unrestricted File Upload on reddit.secure.force.com
2022-06-20 09:10:53
msrc
msrc
CVE-2022-30190 マイクロソフト サポート診断ツールの脆弱性に関するガイダンス
2022-05-30 07:00:00
Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability
2022-05-30 07:00:00
Guidance for CVE-2022-30190 Microsoft Support Diagnostic Tool Vulnerability
2022-05-30 23:25:16
krebs
krebs
Microsoft: Attackers Exploiting Windows Zero-Day Flaw
2021-09-08 15:03:45
avleonov
avleonov
PHDays 11: towards the Independence Era
2022-06-11 00:46:58
cvelist
cvelist
CVE-2021-40444 Microsoft MSHTML Remote Code Execution Vulnerability
2021-09-15 11:24:26
ics
ics
2021 Top Malware Strains
2022-08-25 12:00:00
kitploit
kitploit
nvd
nvd
CVE-2021-40444
2021-09-15 12:15:16
CVE-2022-30190
2022-06-01 20:15:07
prion
prion
Remote code execution
2021-09-15 12:15:00
qualysblog
qualysblog
Launching Qualys Cloud Threat Database
2023-02-08 13:50:00
openvas
openvas
Microsoft Windows Support Diagnostic Tool (MSDT) RCE Vulnerability (Follina)
2022-06-01 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS3
8.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:H/A:L
AI Score
7.8
Confidence
High
EPSS
0.971
Percentile
99.8%
Related for 29AB2E6A-3E44-55A2-801D-2971FABB2E5D