CVE-2018-10583

CVE-2018-10583에 대한 업데이트된 python3 익스플로잇 LibreOffice/Open Office - '.odt' 정보 공개 원본 크레딧: https://www.exploit-db.com/exploits/44564 사용법 1. pip 또는 pip3로 ezodf 모듈을 설치합니다. 2. python3으로 익스플로잇을 실행하면 bad.odt 파일이 생성됩니다. 이 파일을 대상 시스템에 업로드하세요. 3. 그런 다음 impacket-smbserver share share -smb2support 또는 sudo...

CVE-2022-30190-follina

CVE-2022-30190-follina Ещё один PoC для новой MSDT-Exploit Чтобы отредактировать документ, откройте его с помощью 7z, xarchiver, ... и измените значение в word\rels\document.xml.rels на ваш IP. Эксплойт должен содержать не менее 3541 символа перед window.location.href, и они должны находиться...

CVE-2022-30190

CVE-2022-30190 Follina Sviluppo, Sfruttamento, Analisi e Mitigazione di Malware a Scopo Didattico Un proof-of-concept completamente documentato che dimostra la vulnerabilità Follina - dalla consegna tramite ingegneria sociale fino allo sfruttamento, all'analisi forense e allo sviluppo di patch. ⚠️...

follina

follina POC Tutto su CVE-2022-30190, conosciuta anche come follina: una vulnerabilità RCE che colpisce Microsoft Support Diagnostic Tools MSDT nelle applicazioni Office come Word. Questo è un POC molto semplice; sentiti libero di consultare le fonti qui sotto per ulteriori threat intelligence...

CVE-2017-11882

CVE-2017-11882 Script originale da https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...

CVE-2026-21509

CVE-2026-21509 — Bypass della funzionalità di sicurezza OLE di Microsoft Office Studio di ricerca di Sentinel AI Defense. Solo analisi difensiva — nessun exploit funzionante o PoC pubblicato qui per una vulnerabilità attivamente sfruttata. Un bypass della funzionalità di sicurezza in Microsoft...

CVE-2026-21509-PoC

CVE-2026-21509 — Pädagogischer Dummy-PoC für Defender-Sichtbarkeit ⚠️ Dieses Repository stellt einen harmlosen, nicht-exploitativen Proof of Concept bereit. Sein Zweck ist die Unterstützung von defensiver Forschung , EDR/AV-Sichtbarkeitstests und Schulungen. Es exploitiert CVE‑2026‑21509 nicht und...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in GhostScript

A heap-based buffer overwrite vulnerability was discovered in the lp8000printpage function of GhostScript, located in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a specially crafted PDF file, triggering a heap buffer overflow that could lead to memory corruption...

EUVD-2026-61173

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

CVE-2026-75935 Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

PT-2026-77296

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

CVE-2026-34789

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImportImportModule while restoring a...

USN-8627-1 yelp vulnerability

It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy. An attacker could trick a user into opening a specially crafted document, possibly resulting in the disclosure of sensitive information...

Astra Linux – Vulnerability in pypdf2

pypdf is a free and open-source Python-based PDF library. Prior to version 6.7.2, an attacker who exploited this vulnerability could create a PDF that would lead to an infinite loop. This required reading the file. This issue has been fixed in pypdf 6.7.2. As a workaround, one can manually apply...

EUVD-2026-54615

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...

CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...

DEBIAN-CVE-2026-17990

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...