CVE-2022-30190-follina

CVE-2022-30190-follina Solo otro PoC para el nuevo MSDT-Exploit Para editar el documento, solo ábrelo con 7z, xarchiver, ... para cambiar el valor en word\rels\document.xml.rels a tu IP. El exploit debe contener al menos 3541 caracteres antes de window.location.href, y deben estar dentro de la...

CVE-2026-21509-PoC

CVE-2026-21509 — PoC Educativo Simulado para Visibilidad de Defensores ⚠️ Este repositorio proporciona una Prueba de Concepto inofensiva y no explotable. Su propósito es apoyar la investigación defensiva , las pruebas de visibilidad de EDR/AV y la formación. No explota CVE‑2026‑21509 y contiene...

CVE-2026-21509

CVE-2026-21509 — Omisión de la Característica de Seguridad OLE de Microsoft Office Informe de investigación por Sentinel AI Defense. Solo análisis defensivo: no se publica aquí ningún exploit funcional ni PoC para una vulnerabilidad explotada activamente. Una omisión de característica de segurida...

CVE-2026-63270

A flaw was found in LibreOffice. This vulnerability allows information disclosure when a user opens a specially crafted document. An attacker can construct malicious URLs within document features that expand local environment variables or configuration settings, enabling the exfiltration of...

follina

follina POC Todo sobre CVE-2022-30190, también conocido como follina, que es una vulnerabilidad RCE que afecta a Microsoft Support Diagnostic Tools MSDT en aplicaciones de Office como Word. Esta es una POC muy sencilla, no dudes en consultar las fuentes a continuación para obtener más inteligenci...

CVE-2022-30190

CVE-2022-30190 Follina Desarrollo, Explotación, Análisis y Mitigación de Malware con Fines Educativos Una prueba de concepto totalmente documentada que demuestra la vulnerabilidad Follina: desde la entrega mediante ingeniería social hasta la explotación, el análisis forense y el desarrollo del...

CVE-2018-10583

Exploit actualizado en python3 para CVE-2018-10583 Divulgación de información de LibreOffice/Open Office - '.odt' créditos originales a: https://www.exploit-db.com/exploits/44564 Uso 1. Instala el módulo ezodf con pip o pip3 2. Ejecuta el exploit con python3, generará un archivo bad.odt, súbelo a...

CVE-2017-11882

CVE-2017-11882 El script original proviene de https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Investigación:...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-81546

The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

CVE-2026-84548

CVE-2026-84548 is an integer overflow vulnerability in Apple macOS , fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 via improved input validation. Processing a maliciously crafted document can trigger an out-of-bounds read , potentially leading to high confidentiality a...

EUVD-2026-77889

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

USN-8756-1: Yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

Astra Linux – Vulnerability in GhostScript

A heap-based buffer overwrite vulnerability was discovered in the lp8000printpage function of GhostScript, located in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a specially crafted PDF file, triggering a heap buffer overflow that could lead to memory corruption...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Poppler

In Poppler 0.74.0, the PDFDoc::markObject method in PDFDoc.cc mishandles dict marking, resulting in stack consumption in the Dict::find function located in Dict.cc. This issue can be triggered by passing a malicious PDF file to the pdfunite binary...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow vulnerability in PDF files in Google Chrome prior to version 104.0.5112.79 allowed a remote attacker who convinced a user to perform certain user interactions to potentially exploit heap corruption through a crafted PDF file...