CVE-2023-36884

此存储库没有 README。...

Storm0978-RomCom-Campaign

Storm0978-RomCom-Campaign 近期利用 CVE-2023-36884 的活动 免责声明 所提供的代码按“原样”提供，仅用于教育或信息目的。用户承担使用此代码及其可能产生的任何后果的所有责任。此代码的创建者及其关联方对因使用此代码而导致的任何损害或损失不承担任何责任。...

CVE-2023-36884-Scripts-for-Intune-Remediation-SCCM-Compliance-Baseline

此存储库没有 README。...

CVE-2023-36884

CVE-2023-36884 这是在 Microsoft 修复该漏洞期间的紧急解决方案。 图片中的 CVE-2023-36884 参考 Docx: a61b2eafcf39715031357df6b01e85e0d1ea2e8ee1dfec241b114e18f7a1163f pic.twitter.com/CxBYlWyvlB — Kimberly @StopMalvertisin 2023年7月12日...

Fix-CVE-2023-36884

Fix-CVE-2023-36884.ps1 用于缓解 CVE-2023-36884 漏洞的临时解决方案。 此漏洞影响 Windows 操作系统，可能允许远程执行恶意代码。 CVE-2023-36884 » CVE-2023-36884 CVE-2023-36884 漏洞是一个严重的安全缺陷，可能导致 Windows 系统上的远程代码执行。微软尚未发布更新来修复此问题。然而，他们指导创建一些注册表项来规避该问题，直到提供最终解决方案为止。 解决方案 - Fix-CVE-2023-36884.ps1 我们，来自...

CVE-2023-36884_patcher

CVE-2023-36884patcher CVE-2023-36884影响office 2016、2019、2021 版本，这是它的临时补丁，下载后右键使用管理员权限运行即可。...

CVE-2023-36884-Checker

CVE-2023-36884-Checker Script para comprobar el endurecimiento de CVE-2023-36884 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36884 Objetivo Este script comprueba si las recomendaciones de endurecimiento de Microsoft se aplican correctamente. Microsoft dice...

CVE-2023-36884

CVE-2023-36884 comeonits2023 ie9 Storm-0978 https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/general-info/ee330731v=vs.85 https://learn.microsoft.com/en-us/archive/blogs/ieinternals/internet-explorer-9-0-2-update...

New PEAPOD Cyberattack Campaign Targeting Women Political Leaders

European Union military personnel and political leaders working on gender equality initiatives have emerged as the target of a new campaign that delivers an updated version of RomCom RAT called PEAPOD. Cybersecurity firm Trend Micro attributed the attacks to a threat actor it tracks under the nam...

Exploit for Race Condition in Microsoft

CVE-2023-36884: MS Office HTML RCE with crafted documents On...

The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain

The Tale of Two Exploits - Breaking Down CVE-2023-36884 and the Infection Chain By Trellix · August 24, 2023 This blog was written by Chintan Shah Executive Summary On July 11 2023, Microsoft released a patch fixing multiple actively exploited RCE vulnerabilities and disclosed a phishing campaign...

Microsoft Project 2016 Remote Code Execution Vulnerability (KB5002328)

This host is missing a critical security update according to Microsoft KB5002328 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows Multiple Vulnerabilities (KB5029244)

This host is missing an important security update according to Microsoft KB5029244 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Visio 2016 Defense in Depth Security Update (KB5002418)

This host is missing an important security update according to Microsoft KB5002418. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

Microsoft Excel 2016 Defense in Depth Security Update (KB5002463)

This host is missing an important security update according to Microsoft KB5002463 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Excel 2013 Service Pack 1 Defense in Depth Security Update (KB5002451)

This host is missing an important security update according to Microsoft KB5002451 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Storm-0978 actively exploited the unpatched Office zero-day

Threat Level Actor Report For a detailed threat advisory, download the pdf file here Summary Storm-0978 is a Russian cybercriminal group that specializes in executing sophisticated phishing campaigns. Storm-0978 was found to be engaged in a new wave of attacks, leveraging the exploitation of...

Office and Windows HTML Remote Code Execution Vulnerability (CVE-2023-36884) Mitigation

The remote system may be vulnerable to CVE-2023-36884 since it does not have the correct FEATUREBLOCKCROSSPROTOCOLFILENAVIGATION registry key mitigations applied as referenced in the vendor advisory. An unauthenticated, remote attacker could exploit this, by using specially-crafted Microsoft Offi...

Exploit for Race Condition in Microsoft

This is a PoC exploit for CVE-2023-36884, a vulnerability in Mic...

CVE-2023-36884

creationtimestamp| type| source ---|---|--- 2023-07-11 21:56:22+00:00| seen| https://t.me/ctinow/123163 2023-07-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1062 2023-07-12 09:42:06+00:00| seen| https://t.me/kasperskyb2b/746 2023-07-12 09:56:39+00:00| exploited|...