39691 matches found
CVE-2025-64516-POC
CVE-2025-64516 POC for Unauthorized access to documents. CVE-2025-64516 Impact An unauthenticated user can access GLPI documents attached to any item ticket, asset, .... Affected versions Versions = 10.0.0, = 11.0.0 Patches Upgrade to 10.0.21 Upgrade to 11.0.3 Usage git clone...
CVE-2014-9173
CVE-2014-9173: Google Document Embedder - Explotación de Inyección SQL Ciega Basada en Tiempo Autor: ratiros01 PoC original: https://www.exploit-db.com/exploits/35371...
CVE-2026-33137
CVE-2026-33137 XWiki Platform - Unauthenticated XAR Import via REST/wikis/wikiName Description The POST /wikis/wikiName REST API endpoint in XWiki Platform executes a XAR XWiki Archive import without performing any authentication or authorization checks. An unauthenticated attacker can create or...
CVE-2022-30190
CVE-2022-30190 aka Follina Vulnerability Description Follina exists in the Microsoft Support Diagnostic Tool MSDT. When an application calls MSDT via a URL protocol for support, a remote code execution vulnerability occurs. Successful exploitation allows an attacker to execute arbitrary code with...
cve-2026-19478
CVE-2026-19478 — GitLab GraphQL @glintroduced version-filter vulnerabilities A reproduction lab for two related bugs in GitLab's GraphQL version-filter feature the @glintroduced directive. Both live in the same feature area, are fixed by the same upstream patch, and both let a GraphQL request rea...
CVE-2022-30190
CVE-2022-30190 Follina Educational Malware Development, Exploitation, Analysis and Mitigation A fully documented proof-of-concept demonstrating the Follina vulnerability - from social engineering delivery through to exploitation, forensic analysis, and patch development. ⚠️ Educational Use Only...
CVE-2022-30190
CVE-2022-30190 Uso solo Windows Crear archivo docx: $ PoC.py docx your-host-ip Ejecutar servidor directamente: $ PoC.py host...
DeepPass
DeepPass Dockerized application that analyzes documents for password candidates. The blogpost "DeepPass — Finding Passwords With Deep Learning" gives more detail on the approach and development of the model. To run: docker-compose up This will expose http://localhost:5000 where documents can be...
TIC4301_Project
TIC4301Project TIC4301 Project - CVE-2021-40444 Download the following vagrant boxes: Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNtmU2/view?usp=sharing Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing Import the boxes with the...
CVE-2024-34102
Cosmic Sting: CVE-2024-34102 Exploiter Cosmic Sting is a Go-based tool designed to exploit CVE-2024-34102, Remote Code Execution vulnerability. CVE-2024-34102 Detail Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an Improper Restriction of XML External...
CVE-2018-10583
Updated python3 exploit for CVE-2018-10583 LibreOffice/Open Office - '.odt' Information Disclosure original credits to : https://www.exploit-db.com/exploits/44564 Usage 1. Install ezodf module with pip or pip3 2. Run the exploit with python3 it will generate a bad.odt file, upload it to the box 3...
CVE-2026-105157
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the component Document Controller. The manipulation of the argument path/fileName leads to path traversal. Remote exploitati...
Maldoc-Analysis
Maldoc-Analysis In March 2023, a new sample was identified as malware. The malware originated from files with .xls and .doc extensions and is known as "Bank Slip.xls". The malware's activity is related to vulnerabilities identified as CVE-2017-11882 and CVE-2018-0802...
MS-MSDT-Office-RCE-Follina
MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina One Click 1. Create a Docx file. 2. In the Docx file, Insert Object Bitmap Image Ok 3. In the Paint application that launched, save the Paint file. 4. Save your Docx file. 5. Open your file as an archive With 7Zip; Right Click 7Zip Open...
CVE-2026-105157
A path traversal vulnerability exists in RainyGao DocSys versions up to 2.02.85 . The flaw is located within the DocController.doGetTmp function of the /Doc/doGetTmpFile.do file in the Document Controller component. By manipulating the path/fileName argument, an attacker can perform a path traver...
CVE-2026-105157 RainyGao DocSys Document Controller doGetTmpFile.do DocController.doGetTmp path traversal
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the component Document Controller. The manipulation of the argument path/fileName leads to path traversal. Remote exploitati...
EUVD-2026-92097
A security vulnerability has been detected in RainyGao DocSys up to 2.02.85. The affected element is the function DocController.doGetTmp of the file /Doc/doGetTmpFile.do of the component Document Controller. The manipulation of the argument path/fileName leads to path traversal. Remote exploitati...
CVE-2021-41074
CVE-2021-41074 CSRF in Qloapps HotelCommerce 1.5.1 There is a CSRF in HotelCommerce 1.5.1. It can allow anyone to change the admin email. If an attacker gets an admin to click a maliciously crafted html document, they can change the admin user email...
CVE-2021-40444
CVE-2021-40444 PoC Malicious docx generator to exploit CVE-2021-40444 Microsoft Office Word Remote Code Execution Creation of this Script is based on some reverse engineering over the sample used in-the-wild: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx file You need to...