Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-70213

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

EUVD-2026-99610

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

CVE-2026-70213

An origin validation error in Microsoft Power Apps allows an authorized attacker to perform remote code execution over a network. This vulnerability has a HIGH severity rating with a CVSS score of 8.0. Documentation confirms the impact is the execution of arbitrary code . No specific exploit link...

Vulnerabilities in Microsoft Dynamics

Microsoft has addressed vulnerabilities in various Dynamics components. A malicious individual could exploit these vulnerabilities to execute attacks that can cause damage, as listed in the following tables: Microsoft Dataverse: | CVE-ID | CVSS | Impact | |--------|------|---------| |...

Microsoft Power Apps Remote Code Execution Vulnerability

Origin validation error in Microsoft Power Apps allows an authorized attacker to execute code over a network...

cve-2024-8069-exp-Citrix-Virtual-Apps-XEN

CVE-2024-8068 and CVE-2024-8069 Citrix Virtual Apps and Desktops XEN Unauthenticated Remote Code Execution Vulnerability Check out our blog post for detailed technical information. https://github.com/user-attachments/assets/563fd110-5321-49f7-8dc3-48eb0a53e0f9 Exploit Demonstration python...

KLA91334 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microso...

PT-2026-116217

Уязвимость редактора электронных таблиц Microsoft Excel пакетов программ Microsoft Office и Microsoft 365 Apps for Enterprise связана с целочисленным переполнением. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

PT-2026-112307

Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An origin validation error allows an authorized attacker to execute code over a network. Origin validation is a security mechanism used to verify that a request originates from a...

mcp-attack-detection-sentinel

MCP Attack Detection — Sentinel Research Lab Sentinel detection research for MCP Model Context Protocol attack patterns : unusual identity access after an MCP-related event, tool-definition mutation, cross-resource access, and possible post-exploitation behavior. The rules map to the OWASP Top 10...

kiterunner

Kiterunner Introducción Durante mucho tiempo, el descubrimiento de contenido se ha centrado en encontrar archivos y carpetas. Si bien este enfoque es efectivo para servidores web heredados que alojan archivos estáticos o responden con 3xx ante una ruta parcial, ya no es efectivo para aplicaciones...

frida-scripts

frida-scripts A collection of my Frida.re instrumentation scripts to facilitate reverse engineering of mobile apps and more. !NOTE My iOS and Android scripts might require some tweakings. For a well-maintained project that includes some of my Frida scripts, refer to Brida. Article...

yasuo

YASUO @0xsauby Descripción Yasuo es un script de Ruby que escanea aplicaciones web de terceros vulnerables. Mientras trabajamos en una evaluación de seguridad de red interna, externa, trabajos de redteam, etc., a menudo nos encontramos con aplicaciones web de terceros vulnerables o front-ends web...

PT-2026-110172

🚨 CVE-2026-108853 UnicomAI Wanwu before 0.6.3 contains an insecure direct object reference vulnerability that allows authenticated low-privileged users to delete other tenants' agent or RAG applications by supplying their appId. Attackers can send requests to DELETE /v1/appspace/app with guessed...

CVE-2026-108506 Unauthorized access vulnerability in ZTE Z80 Ultra product

ZTE Z80 Ultra's system interfaces do not have robust invocation authentication, with inadequate access control. Third-party apps may call the interfaces through reflection and retrieve relevant information...

EUVD-2026-96037

The Advanced Form Integration — Connect Forms to 300+ Apps plugin for WordPress is vulnerable to Authentication Bypass via Unverified Password Change in all versions up to, and including, 2.9.0 The adfoinultimatememberacsenddata function, which powers the Ultimate Member "Update Profile Field"...

electroniz3r

electroniz3r Prendi il controllo dei permessi TCC delle app Electron su macOS con electroniz3r. Lo strumento è stato presentato per la prima volta al DEFCON31 a Las Vegas durante il mio talk ELECTRONizing macOS privacy - a new weapon in your red teaming armory. Panoramica $ electroniz3r OVERVIEW:...

Microsoft Office Memory Use After Free

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Microsoft Office and Microsoft Code Execution

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the use of an uninitialized resource. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...