CVE-2022-30190-follina

CVE-2022-30190-follina 这只是针对新MSDT-Exploit的又一个PoC 要编辑该文档，只需用7z、xarchiver等打开，然后更改 word\rels\document.xml.rels 中的值为你的IP。 该漏洞利用必须在 window.location.href 之前包含至少3541个字符，并且这些字符必须在脚本标签内。现在大约有9000个，只是为了确保。 更多关于该漏洞的信息：...

CVE-2017-11882

CVE-2017-11882 原脚本来自于 https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...

CVE-2026-81546

The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...

CVE-2026-21509-PoC

CVE-2026-21509 — PoC Educativo Simulado para Visibilidad de Defensores ⚠️ Este repositorio proporciona una Prueba de Concepto inofensiva y no explotable. Su propósito es apoyar la investigación defensiva , las pruebas de visibilidad de EDR/AV y la formación. No explota CVE‑2026‑21509 y contiene...

CVE-2026-21509

CVE-2026-21509 — Omisión de la Característica de Seguridad OLE de Microsoft Office Informe de investigación por Sentinel AI Defense. Solo análisis defensivo: no se publica aquí ningún exploit funcional ni PoC para una vulnerabilidad explotada activamente. Una omisión de característica de segurida...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

CVE-2026-84548

CVE-2026-84548 is an integer overflow vulnerability in Apple macOS , fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 via improved input validation. Processing a maliciously crafted document can trigger an out-of-bounds read , potentially leading to high confidentiality a...

EUVD-2026-77889

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

USN-8756-1: Yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

follina

follina POC Todo sobre CVE-2022-30190, también conocido como follina, que es una vulnerabilidad RCE que afecta a Microsoft Support Diagnostic Tools MSDT en aplicaciones de Office como Word. Esta es una POC muy sencilla, no dudes en consultar las fuentes a continuación para obtener más inteligenci...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in GhostScript

A heap-based buffer overwrite vulnerability was discovered in the lp8000printpage function of GhostScript, located in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a specially crafted PDF file, triggering a heap buffer overflow that could lead to memory corruption...

CVE-2022-30190

CVE-2022-30190 Follina Desarrollo, Explotación, Análisis y Mitigación de Malware con Fines Educativos Una prueba de concepto totalmente documentada que demuestra la vulnerabilidad Follina: desde la entrega mediante ingeniería social hasta la explotación, el análisis forense y el desarrollo del...

CVE-2018-10583

Exploit actualizado en python3 para CVE-2018-10583 Divulgación de información de LibreOffice/Open Office - '.odt' créditos originales a: https://www.exploit-db.com/exploits/44564 Uso 1. Instala el módulo ezodf con pip o pip3 2. Ejecuta el exploit con python3, generará un archivo bad.odt, súbelo a...

PYSEC-2026-3910 pypdf: Possible long runtimes/large memory usage when retrieving outlines

Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths. Patches This has been fixed in pypdf==6.16.1...

CVE-2026-85730

A flaw was found in smol-toml, a TOML parser and serializer. A remote attacker could exploit an infinite loop in the parse function by providing a specially crafted TOML document. This occurs when a value within an array or inline table is followed by a comment without a trailing newline...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow vulnerability in PDF files in Google Chrome prior to version 104.0.5112.79 allowed a remote attacker who convinced a user to perform certain user interactions to potentially exploit heap corruption through a crafted PDF file...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in PDFium in Google Chrome prior to version 128.0.6613.84 allowed a remote attacker to perform an out-of-bounds memory read through a crafted PDF file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFs in Google Chrome before version 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...