CVE-2022-30190

CVE-2022-30190 Reproducción de Microsoft Office Word Rce CVE-2022-30190 Resumen de la vulnerabilidad Los archivos .docx de MS Office pueden contener referencias externas a objetos OLE como archivos HTML. Existe un escenario HTML que usa ms-msdt: para invocar la herramienta de diagnóstico msdt, la...

MrHandler

MR.HANDLER MR.Handler è uno strumento specializzato progettato per rispondere a incidenti di sicurezza su sistemi Linux. Si connette ai sistemi target tramite SSH per eseguire una serie di comandi diagnostici, raccogliendo informazioni cruciali come configurazioni di rete, log di sistema, account...

Follina_MSDT_CVE-2022-30190

Microsoft は、「Word などの呼び出し元アプリケーションが URL プロトコルを使用して MSDT...

aws-doctor

aws-doctor...

CVE-2023-36143

CVE-2023-36143 PoC di CVE-2023-36143 - Maxprint Maxlink 1200G v3.4.11E Iniezione di comandi Passi per riprodurre: 1. Accedi al dispositivo tramite il tuo browser web 2. Vai allo strumento di diagnostica 3. Inserisci un qualsiasi IP, ad esempio 127.0.0.1, il carattere ; e un comando. 4. Esempio:...

CVE-2022-30190

CVE-2022-30190 - Microsoft Support Diagnostic Tool Über Dieses Skript versucht, ein Microsoft Office-Dokument zu erstellen, das remote Code ausführt. Einrichtung root@kitploit: git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help...

mtr

WHAT IS MTR? mtr combines the functionality of the 'traceroute' and 'ping' programs in a single network diagnostic tool. As mtr starts, it investigates the network connection between the host mtr runs on and a user-specified destination host. It sends probes to the destination with successively...

strace

strace - the linux syscall tracer This is strace -- a diagnostic, debugging and instructional userspace utility with a traditional command-line interface for Linux. It is used to monitor and tamper with interactions between processes and the Linux kernel, which include system calls, signal...

mylg

myLG, Command line Network Diagnostic Tool myLG is an open source software utility which combines the functions of the different network probes in one network diagnostic tool. Features Popular looking glasses ping/trace/bgp: Telia, Level3, NTT, Cogent, KPN More than 200 countries DNS Lookup...

Follina-CVE-2022-30190-Unofficial-patch

Follina-CVE-2022-30190-Unofficial-patch- Ein inoffizieller Patch für Follina CVE-2022-30190 Patch gemäß den Microsoft-Richtlinien. für weitere Details siehe: https://msrc-blog.microsoft.com/2022/05/30/guidance-for-cve-2022-30190-microsoft-support-diagnostic-tool-vulnerability/ Über das Programm...

CVE-2023-36143

CVE-2023-36143 Der Maxprint Maxlink 1200G v3.4.11E weist eine Schwachstelle zur OS-Befehlseinschleusung in der Funktionalität des "Diagnostic tool" des Geräts auf...

CVE-2026-14461 affecting package mtr for versions less than 0.95-4

CVE-2026-14461 affecting package mtr for versions less than 0.95-4. A patched version of the package is available...

CVE-2026-20799

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. Th...

CVE-2026-20799

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. Th...

CVE-2026-20799

Vulnerability : Untrusted search path in Battery Life Diagnostic Tool software prior to 2.9.0 can allow a local privilege escalation for Ring 3: User Applications. Impact : confidentiality, integrity, and availability rated High; subsequent impacts are none. Loosely defined factors : requires an ...

EUVD-2026-56503

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. Th...

PT-2026-70309

Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. Th...

Malicious code in devplatform-api-v2-resource-mock (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cde262833260cbba75c5fdd2160e0f91a6c43c0f7ad202b44475c649772c1174 [email protected] is an import-time dropper. The package's main entry index.js requires compat.js, which on load assembles C2...

Malicious code in tinkoff-statist-browser-typed-client-dwh.chimera.base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e85e012cccc354c615a7d3fc6f753b676fa6f56e1053170a6e24f173ad930008 Requiring this package triggers support.js to select a platform-specific asset, fetch an opaque binary from string-split-obfuscated Cloudflare...

Malicious code in tinkoff-pfp-block-mobile-advert-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 12bd549b3c3a286caedd91cb1bbc6052850f23c01f5eaa33e7c336db1928258c On require of index.js, the package silently loads bootstrap.js, which reconstructs attacker-controlled hostnames from split-string fragments...