CVE-2021-40444

CVE-2021-40444 الاستخدام تأكد من تشغيل setup.sh أولاً لأنك ستحتاج إلى بعض المجلدات. بعد تشغيل السكريبت، يجب أن تكون قادرًا على تشغيل gen.py باستخدام المثال التالي:- Usage python3 gen.py -d document/Sample.docx -p payload/payload.dll -i "http://10.10.10.10" -t html/template.html -c payload.cab -f...

CVE-2021-40444_builders

CVE-2021-40444 builders يحتوي هذا المستودع على بناة لملف cab وملف html وملف docx لاستغلال CVE-2021-40444. هذا المستودع مخصص لأغراض الاختبار والبحث والتعليم فقط. أنت مسؤول عن كيفية استخدام الكود المقدم في هذا المستودع. تم تطوير الكود عن طريق تحليل عينات البرامج الضارة الموجودة في البرية والتي تم...

CVE-2021-40444

CVE-2021-40444 PoC CVE-2021-40444 माइक्रोसॉफ्ट ऑफिस वर्ड रिमोट कोड एक्जीक्यूशन का शोषण करने के लिए दुर्भावनापूर्ण docx जनरेटर इस स्क्रिप्ट का निर्माण वास्तविक दुनिया में उपयोग किए गए नमूने पर किए गए कुछ रिवर्स इंजीनियरिंग पर आधारित है:...

CVE-2022-30190

CVE-2022-30190 उपयोग केवल विंडोज़ docx फ़ाइल बनाएँ: $ PoC.py docx your-host-ip सर्वर सीधे चलाएँ: $ PoC.py host...

CVE-2022-30190

CVE-2022-30190 CVE-2022-30190 CVE-2022-30190 Follina POC استضف ملف exploit.html على localhost، المنفذ 80. افتح ملف docx لتشغيل الآلة الحاسبة. لتغيير العنوان البعيد الذي يشير إليه ملف doc، افتحه باستخدام 7Z وعدّل الملف word\rels\document.xml.rels ليشير إلى موقع جديد. يجب عليك الاحتفاظ بعلامة التعج...

CVE-2025-65482: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability in opensagres XDocReport v0.9.2 to v2.0.3 allows attackers to execute arbitrary code via uploading a crafted .docx file...

CVE-2025-65482

The opensagres XDocReport library (versions v0.9.2 to v2.0.3 ) contains an XML External Entity (XXE) vulnerability within the fr.opensagres.xdocreport.document.docx component. The root cause is the use of a SAXParser to process uploaded .docx files without disabling DTDs or external entities. Att...

CVE-2019-16338

The tfocommon component in HwordApp.dll in Hancom Office 9.6.1.7634 allows a use-after-free via a crafted .docx file...

EUVD-2019-7115

Malware in sbrugna...

EUVD-2023-31861

Malicious code in bioql PyPI...

EUVD-2023-31862

Malicious code in bioql PyPI...

EUVD-2023-31863

Malicious code in bioql PyPI...

Microsoft Excel Use After Free - Local Code Execution

Titles: Microsoft Excel Use After Free - Local Code Execution Author: nu11secur1ty Date: 06/09/2025 Vendor: Microsoft Software: https://www.microsoft.com/en/microsoft-365/excel?market=af Reference: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-27751 Versions: MS Excel 2016, MS Office...

📄 Microsoft Excel Remote Code Execution

Microsoft Excel appears to suffer from a remote code execution vulnerability via a malicious macro. Titles: Microsoft Excel Local Code Execution Vulnerability Author: nu11secur1ty Date: 06/09/2025 Vendor: Microsoft Software: https://www.microsoft.com/en/microsoft-365/excel?market=af Reference:...

CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

CVE-2023-28151

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

CVE-2023-28152

An issue was discovered in Independentsoft JWord before 1.1.110. The API is prone to XML external entity XXE injection via a remote DTD in a DOCX file...

CVE-2020-11536

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the unzip function to rewrite a binary and remotely execute code on a victim's server...

CVE-2020-11534

An issue was discovered in ONLYOFFICE Document Server 5.5.0. An attacker can craft a malicious .docx file, and exploit the NSFileDownloader function to pass parameters to a binary such as curl or wget and remotely execute code on a victim's server...

CVE-2025-0184

A Server-Side Request Forgery SSRF vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests...