14 matches found
RightHand-Persistence
RightHand Persistence inspired by CVE-2026-21509 C++ COM Context Menu Handler for Persistence A sample implementation of a Windows context menu handler using C++ and COM, demonstrating a stealthy persistence technique. By registering a custom COM object, your code executes whenever a user...
KSK-ITDK-CVE-2026-21509-Mitigation
Mitigación de CVE-2026-21509 Script de PowerShell con detección y remediación para CVE-2026-21509...
CTT-MICROSOFT-OFFICE-OLE-MANIFOLD-BYPASS-CVE-2026-21509
🏛️CTT -Microsoft Office OLE Manifold BYPASS CVE-2026-21509 Standardized CTT Implementation for 1096x Temporal Execution ! 📜 漏洞概述 CVE-2026-21509 是 Microsoft Office OLE（对象链接与嵌入）验证引擎中的一个严重绕过漏洞。虽然标准的“层流”利用尝试操纵静态 COM 对象，但本仓库利用定理 4.2 实现了对对象定义规则（ODR）的推测性竞态条件绕过。 🕰️ CTT 优势（定理 4.2） 针对此 CVE...
CVE-2026-21509-POC
CVE-2026-21509-POC Office 漏洞的 POC...
CVE-2026-21509
Este repositorio no tiene un README...
cve-2026-poc-collection
CVE-2026 PoC Collection Report Collection date: May 19, 2...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
CVE-2026...
February “In the Trend of VM” (#24): vulnerabilities in Microsoft products
February "In the Trend of VM" 24: vulnerabilities in Microsoft products. A traditional monthly roundup of trending vulnerabilities. This time, compact and all-Microsoft. 🗞 Post on Habr rus 🗒 Digest on the PT website rus In total, two vulnerabilities: 🔻 RCE - Microsoft Office CVE-2026-21509 🔻...
APT28’s Stealthy Multi-Stage Campaign Leveraging CVE‑2026‑21509 and Cloud C2 Infrastructure
APT28’s Stealthy Multi-Stage Campaign Leveraging CVE‑2026‑21509 and Cloud C2 Infrastructure By Pham Duy Phuc and Alex Lanstein · February 4, 2026 Updated February 9, 2026: This analysis has been updated to clarify malware naming conventions. Introduction Russian state-sponsored threat group APT28...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
CTT-NFS-Vortex-RCE New Physics Disclosure This repository cont...
Security Updates for Microsoft Office Products (CVE-2026-21509)
The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...
Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation
Microsoft on Monday issued out-of-band security patches for a high-severity Microsoft Office zero-day vulnerability exploited in attacks. The vulnerability, tracked as CVE-2026-21509 , carries a CVSS score of 7.8 out of 10.0. It has been described as a security feature bypass in Microsoft Office...
