CVE-2017-11882-

CVE-2017-11882 43b 원본 스크립트는 https://github.com/embedi/CVE-2017-11882 에서 가져왔습니다. 109b 원본 스크립트는 https://github.com/unamer/CVE-2017-11882/ 에서 가져왔습니다. 참고로, 이제 unamer의 코드는 shellcode를 실행할 수 있습니다 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

CVE-2017-11882

CVE-2017-11882 43b 원본 스크립트는 https://github.com/embedi/CVE-2017-11882 에서 가져옴 109b 원본 스크립트는 https://github.com/unamer/CVE-2017-11882/ 에서 가져옴 감탄하며, 이제 unamer의 코드는 shellcode를 실행할 수 있습니다 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

backdoorppt

backdoorppt - 'Office spoof extensions tool' Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt Simple script that allow users to add...

GHSA-RM89-RHWJ-9J92 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled Java or PHP source outside a generated documentation comment. The affected sanitizers remove comment terminators rather than neutralizing them, allowing a terminator to reform from...

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled Java or PHP source outside a generated documentation comment. The affected sanitizers remove comment terminators rather than neutralizing them, allowing a terminator to reform from...

CVE-2026-105796 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place attacker-controlled OpenAPI text...

CVE-2026-105796

The Kiota OpenAPI-based HTTP Client code generator is vulnerable to code injection in versions 0.5.0 through 1.35.0 for both Java and PHP generators. The root cause is a flaw in the documentation-comment sanitizers that delete block-comment terminators instead of neutralizing them. This allows ov...

CVE-2026-105796 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place attacker-controlled OpenAPI text...

CVE-2017-11882-exp

CVE-2017-11882 43b 원본 스크립트는 https://github.com/embedi/CVE-2017-11882 에서 가져왔습니다. 109b 원본 스크립트는 https://github.com/unamer/CVE-2017-11882/ 에서 가져왔습니다. 존경합니다. 이제 unamer의 코드는 shellcode를 실행할 수 있습니다 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

UBUNTU-CVE-2019-25777

YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...

Maldoc-Analysis

Maldoc-Analysis 2023년 3월, 새로운 샘플이 악성코드로 식별되었습니다. 해당 악성코드는 확장자가 .xls 및 .doc인 파일에서 비롯되었으며, "Bank Slip.xls"라는 이름으로 알려져 있습니다. 이 악성코드의 활동은 CVE-2017-11882 및 CVE-2018-0802로 알려진 취약점과 관련이 있습니다...

CVE-2026-30691

CVE-2026-30691 - 취약점 권고 CVE-2026-30691에 대한 공식 MITRE 취약점 기록 세부 정보 및 기술 문서 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 제안된 설명 @cyntler/react-doc-viewer v1.17.1의 교차 사이트 스크립팅XSS 취약점으로 인해 원격 공격자가 조작된 .txt 파일을 통해 임의의 JavaScript를 실행할 수 있습니다. TXTRenderer 구성 요소는 파일 콘텐츠를 처리하지 않고 원시 데이터를 ReactNode로 명시적으...

CVE-2017-11882

CVE-2017-11882 43b 원본 스크립트 출처: https://github.com/embedi/CVE-2017-11882 109b 원본 스크립트 출처: https://github.com/unamer/CVE-2017-11882/ unamer의 코드가 이제 쉘코드를 실행할 수 있게 되었습니다 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

Exploit-Win32.CVE-2012-0158.F.doc

Exploit-Win32.CVE-2012-0158.F.doc 바이러스 이름은 Microsoft Defender의 탐지명이며, 일반적인 안티바이러스입니다...

CVE-1999-0678

CVE-1999-0678: 탐지 및 수정 프로젝트 저자: Pham Huu Minh 날짜: 2025년 12월 프로젝트 개요 이 프로젝트는 취약점 평가의 전체 수명주기를 보여줍니다. 구체적으로 Apache 웹 서버의 레거시 디렉터리 트래버설 취약점CVE-1999-0678을 대상으로 합니다. 목표는 공격을 시뮬레이션하고, IDS로 이를 탐지하며, 보안 허점을 영구적으로 수정하는 것이었습니다. 기술 스택 공격자: Kali Linux Curl, Firefox, GVM 피해자: Ubuntu Server Apache2, Snort IDS...

[SECURITY] Fedora 45 Update: gnome-doc-utils-0.20.10-48.fc45

gnome-doc-utils is a collection of documentation utilities for the GNOME project. Notably, it contains utilities for building documentation and all auxiliary files in your source tree...

Rocky Linux 9.6 [CIQ] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ciqsa-2026_1554)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261554 advisory. This advisory aggregates security fixes for the libevent SRPM in CIQ LTS 9.6. It addresses 6 CVEs: CVE-2026-63382, CVE-2026-63383, CVE-2026-63384,...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc (ALMALINUX9.2:CLSA-2025:1760107506)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760107506 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.2 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (ciqsa-2026_0420)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260420 advisory. This advisory aggregates security fixes for the git SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2025-48384, CVE-2025-48385. Tenable has extracted the...

CentOS Linux 7.9 [CIQ] Security Update: lemon / sqlite / sqlite-devel / sqlite-doc / sqlite-tcl (ciqsa-2026_0689)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260689 advisory. This advisory aggregates security fixes for the sqlite SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2019-5827. Tenable has extracted the preceding...