CVE-2017-11882

CVE-2017-11882 원본 스크립트는 https://github.com/embedi/CVE-2017-11882 에서 가져왔습니다. CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 연구:...

CVE-2022-30190-follina

CVE-2022-30190-follina 새로운 MSDT-익스플로잇을 위한 또 다른 PoC Doc을 편집하려면 7z, xarchiver 등으로 열어서 word\rels\document.xml.rels의 값을 자신의 IP로 변경하십시오. 익스플로잇은 window.location.href 앞에 최소 3541자가 포함되어야 하며, 이 문자들은 script 태그 내에 있어야 합니다. 현재는 약 9000자가 있으므로 충분합니다. 익스플로잇에 대한 자세한 정보:...

CVE-2026-21509-PoC

CVE-2026-21509 — 防御可視化のための教育用ダミーPoC ⚠️ このリポジトリは、無害で非悪用型のProof of Conceptを提供します。 その目的は、防御研究 、EDR/AV可視性テスト 、およびトレーニング を支援することです。 これはCVE‑2026‑21509を悪用するものではなく 、ダミーのOLEアーティファクト のみを含みます。 📝 概要 このリポジトリには、Microsoft Officeのセキュリティ機能バイパス 脆弱性であるCVE‑2026‑21509 に関連する構造的マーカーをシミュレートする教育用PoC が含まれています。...

CVE-2026-21509

CVE-2026-21509 — Microsoft Office OLE 보안 기능 우회 Sentinel AI Defense 의 연구 분석 자료입니다. 방어 분석 전용 — 활발히 악용되고 있는 취약점에 대한 동작하는 익스플로잇이나 PoC는 게시하지 않습니다. Microsoft Office의 보안 기능 우회 취약점으로, 악의적으로 제작된 문서가 OLE 완화 조치가 차단해야 하는 COM 구성 요소를 로드할 수 있게 합니다. APT28 UAC-0001이 우크라이나 및 동유럽 표적을 대상으로 적극적으로 악용하고 있습니다. 📄 전체 분석 문...

CVE-2026-63270

A flaw was found in LibreOffice. This vulnerability allows information disclosure when a user opens a specially crafted document. An attacker can construct malicious URLs within document features that expand local environment variables or configuration settings, enabling the exfiltration of...

follina

follina POC CVE-2022-30190, 일명 follina에 관한 모든 것입니다. 이는 Word와 같은 Office 앱에서 Microsoft Support Diagnostic ToolsMSDT에 영향을 미치는 RCE 취약점입니다. 이는 매우 간단한 POC이며, 더 많은 위협 인텔리전스를 위해 아래 출처를 확인하시기 바랍니다. 사용법 usage: follina.py -h --command COMMAND --ip IP --port PORT --output OUTPUT --reverse REVERSE POC for...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in GhostScript

A heap-based buffer overwrite vulnerability was discovered in the lp8000printpage function of GhostScript, located in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a specially crafted PDF file, triggering a heap buffer overflow that could lead to memory corruption...

CVE-2022-30190

CVE-2022-30190 Follina 교육용 악성코드 개발, 익스플로잇, 분석 및 대응 소셜 엔지니어링 전달부터 익스플로잇, 포렌식 분석, 패치 개발까지 Follina 취약점을 완전히 문서화한 개념 증명입니다. ⚠️ 교육용으로만 사용하세요. 이 저장소의 모든 활동은 SLIIT의 IE4012 공격적 해킹 전술 및 전략 모듈의 일환으로 완전히 격리된 가상 머신 랩 환경에서만 수행되었습니다. 통제된 실습 환경 외부에서는 사용하지 마십시오. 실제 시스템이나 네트워크를 대상으로 테스트하지 마십시오. 📋 개요 CVE-2022-30190...

CVE-2018-10583

CVE-2018-10583에 대한 업데이트된 python3 익스플로잇 LibreOffice/Open Office - '.odt' 정보 공개 원본 크레딧: https://www.exploit-db.com/exploits/44564 사용법 1. pip 또는 pip3로 ezodf 모듈을 설치합니다. 2. python3으로 익스플로잇을 실행하면 bad.odt 파일이 생성됩니다. 이 파일을 대상 시스템에 업로드하세요. 3. 그런 다음 impacket-smbserver share share -smb2support 또는 sudo...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-81546

The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

EUVD-2026-77889

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

CVE-2026-84548

CVE-2026-84548 is an integer overflow vulnerability in Apple macOS , fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 via improved input validation. Processing a maliciously crafted document can trigger an out-of-bounds read , potentially leading to high confidentiality a...

USN-8756-1: Yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

Astra Linux – Vulnerability in Poppler

In Poppler 0.74.0, the PDFDoc::markObject method in PDFDoc.cc mishandles dict marking, resulting in stack consumption in the Dict::find function located in Dict.cc. This issue can be triggered by passing a malicious PDF file to the pdfunite binary...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFs in Google Chrome before version 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...