Maldoc-Analysis

Maldoc-Analysis In March 2023, a new sample was identified as malware. The malware originated from files with .xls and .doc extensions and is known as "Bank Slip.xls". The malware's activity is related to vulnerabilities identified as CVE-2017-11882 and CVE-2018-0802...

MS-MSDT-Office-RCE-Follina

MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina One Click 1. Create a Docx file. 2. In the Docx file, Insert Object Bitmap Image Ok 3. In the Paint application that launched, save the Paint file. 4. Save your Docx file. 5. Open your file as an archive With 7Zip; Right Click 7Zip Open...

ShareDoc_cve-2015-5477

ShareDoc 我分享给他人的文档 添加 cve-2015-5477 debug...

CVE-2021-41773

CVE-2021-41773 发现 Apache HTTP Server 2.4.49-2.4.50 中对路径规范化所做的更改存在一个漏洞。攻击者可以使用路径遍历攻击将 URL 映射到预期文档根目录之外的文件。如果文档根目录之外的文件未受到 require all denied 的保护，这些请求可能会成功。此外，此漏洞可能泄露解释文件（如 CGI 脚本）的源代码。...

CVE-2019-10758

CVE-2019-10758 概念验证 设置 root@kitploit: docker run -p 27017:27017 -d mongo npm install [email protected] cd nodemodules/mongo-express/ && node app.js cURL 利用 root@kitploit: curl 'http://localhost:8081/checkValid' -H 'Authorization: Basic YWRtaW46cGFzcw==' --data...

CVE-2025-43929

CVE-2025-43929 Proof-of-concept for CVE-2025-43929, a high-severity vulnerability in KiTTY allowing for local executables to be ran without user confirmation under certain circumstances Vulnerability Type CWE-346: CWE-346 Origin Validation Error Vulnerability Description openactions.py in kitty...

CVE-2022-30190-Analysis-With-LetsDefends-Lab

CVE-2022-30190-Analysis-With-LetsDefends-Lab On May 27, 2022, the NaoSec technical team attempted to analyze and discovered a document in .doc format that appeared malicious. The document was indicated to have been uploaded from an IP address in Belarus. This suspicion was further traced and on M...

cve-2023-34446

CVE-2023-36664: Ghostscript Remote Code Execution Vulnerability Summary CVE ID: CVE-2023-36664 Product: Ghostscript 10.01.2 Vulnerability Type: Remote Code Execution RCE Overview This vulnerability CVE-2023-36664 is an arbitrary code execution RCE vulnerability caused by Ghostscript's inadequate...

CVE-2019-11932

CVE-2019-11932 The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: root@kitploit: notroot@osboxes:/Desktop/gif$ make...

CVE-2018-8174-msf

CVE-2018-8174-msf 这是一个 metasploit 模块，用于创建一个恶意 Word 文档以利用 CVE-2018-8174 — VBScript 内存损坏漏洞。 该模块是对野外发现的漏洞利用样本的快速移植。该漏洞利用仅适用于 32 位 Microsoft Office。 这个模块有很多需要改进的地方，但如果我有时间，将来会更新它。 安装 1. 将 CVE-2018-8174.rb 复制到 /usr/share/metasploit-framework/modules/exploits/windows/fileformat/ 2. 将 CVE-2018-8174.rtf...

CVE-2017-11882

CVE-2017-11882 元のスクリプトは https://github.com/embedi/CVE-2017-11882 から CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...

LetsDefend-SOC173-Follina-0-Day-Detected

LetsDefend-SOC173-Follina-0-Day-Detected We are presented with a security alert indicating the detection of the Follina CVE-2022-30190 vulnerability. A malicious Word document triggered msdt.exe execution, suggesting possible remote code execution on the host JonasPRD. Our task is to investigate...

CVE-2018-8174-msf

CVE-2018-8174-msf This is a metasploit module which creates a malicious word document to exploit CVE-2018-8174 - VBScript memory corruption vulnerability. This module is a very quick port and uses the exploit sample that was found in the wild. The exploit works only for Microsoft Office 32-bit...

CVE-2026-81917

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit The address of system and the gadget must be replaced by the actual address found by an information disclosure vulnerability. After replacing address of system and gadget. Run the code to generate the corrupted GIF file: now lets do it...

EUVD-2026-76689

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

CVE-2026-81917 Concrete CMS below 9.5.3 is vulnerable to Stored XSS in the Document Library block file description and tags

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

CVE-2026-81917

Concrete CMS versions below 9.5.3 contain a Stored XSS vulnerability in the Document Library block . The block controller returned the file description and tags values without applying the h() HTML-escaping function (already used for the title column), and the block view template wrote those valu...

CVE-2026-81917 Concrete CMS below 9.5.3 is vulnerable to Stored XSS in the Document Library block file description and tags

Concrete CMS below 9.5.3 does not apply HTML output escaping to the file description and tags fields when rendering the Document Library block, so a user with permission to edit file properties could store a script payload that executed in the browser of any visitor to a page displaying the block...

CVE-2026-49463 NL Portal: Missing per-user authorization on document and decision GraphQL queries in nl-portal-backend-libraries

NL Portal Backend Libraries provide backend components for Dutch government portals that interact with residents, customers, suppliers, and partner organizations. The nl.nl-portal:documenten-api package through version 3.0.0 and the nl.nl-portal:besluiten package from version 1.5.0 through 3.0.0...