CVE-2018-0802_CVE-2017-11882

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 연구: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about 패치 분석:...

DanderSpritz_lab

DanderSpritz Lab 목적 DanderSpritz Lab의 목표는 연구자와 방어자가 DanderSpritz - The Equation Group의 사후 침투 도구 세트와 Windows Server 2008 도메인 및 클라이언트를 대상으로 완전히 작동하는 버전을 신속하게 구축할 수 있도록 하는 것입니다. Windows 대상에는 DanderSpritz와 그 기능을 조사하는 동안 유용하다고 생각한 몇 가지 리버스 엔지니어링 도구가 포함되어 있습니다. DanderSpritz Lab에 대한 자세한 내용은 여기서 읽어보세요:...

RTF_11882_0802

RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 연구: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about 패치 분석:...

CVE-2016-6366

CVE-2016-6366 Equation GroupNSA가 개발하고 Shadow Brokers가 유출한 Cisco ASA용 원격 코드 실행 익스플로잇 EXTRABACON의 개선을 위한 공개 저장소입니다. 개선된 셸코드, LINA 오프셋 파인더 스크립트, Metasploit 모듈, extrabacon-2.0이 포함되어 있습니다. 모든 버전을 실제 하드웨어에서 테스트한 후, 가까운 시일 내에 대부분의 8.x 및 9.x 버전에 대한 패치를 추가할 예정입니다. 이는 개선된 셸코드를 사용하며, Equation Group 버전보다 스테이...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch 익스플로잇 및 패치 비디오: https://www.youtube.com/watch?v=XU-U4K270Z4 Qihoo 360 블로그 게시물 http://www.freebuf.com/vuls/159789.html...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch 익스플로잇 및 패치 영상: https://www.youtube.com/watch?v=XU-U4K270Z4 Qihoo 360 블로그 포스트 http://www.freebuf.com/vuls/159789.html...

CVE-2017-11882

CVE-2017-11882 개요 취약점 악용 효과 측면에서 보면 Office 2003부터 2016까지 모든 버전을 공격할 수 있으며, 전체 공격 환경의 구축도 매우 간단합니다. 이 취약점은 Office 소프트웨어의 수식 편집기로 인해 발생합니다. 편집기 프로세스가 이름 길이를 검증하지 않아 버퍼 오버플로buffer overflow가 발생하며, 공격자는 특수 문자를 구성하여 임의 코드 실행을 달성할 수 있습니다. 예를 들어, 해커가 이 취약점을 악용하여 셸 백도어가 포함된 Office 파일을 만들면, 일반 사용자가 이 Offic...

nationstate-cyber-tools

NATION-STATE CYBER WEAPONS ARSENAL Live Web Page: htt...

Cloud Atlas activity in the second half of 2025 and early 2026: new tools and a new payload

In 2025, we observed pervasive SSH tunnel activity, which has remained active into 2026, affecting many government organizations and commercial companies in Russia and Belarus. Behind some of this activity is Cloud Atlas, a group we have known since 2014. During our investigation, we identified n...

EquaCode: A Multi-Strategy Jailbreak Approach for Large Language Models Via Equation Solving and Code Completion

Large language models LLMs, such as ChatGPT, have achieved remarkable success across a wide range of fields. However, their trustworthiness remains a significant concern, as they are still susceptible to jailbreak attacks aimed at eliciting inappropriate or harmful responses. However, existing...

Cloud Atlas activity in the first half of 2025: what changed

Known since 2014, the Cloud Atlas group targets countries in Eastern Europe and Central Asia. Infections occur via phishing emails containing a malicious document that exploits an old vulnerability in the Microsoft Office Equation Editor process CVE-2018-0802 to download and execute malicious cod...

EUVD-2021-0424

Malware in sbrugna...

EUVD-2018-13397

Malware in sbrugna...

Polyadic Encryption

A novel original procedure of encryption/decryption based on the polyadic algebraic structures and on signal processing methods is proposed. First, we use signals with integer amplitudes to send information. Then we use polyadic techniques to transfer the plaintext into series of special integers...

The Shift from Vulnerability Management to Exposure Management

Running short on time but still want to stay in the know? Well, we’ve got you covered! We’ve condensed all the key takeaways into a handy audio summary. Our AI-driven podcasts are fit for on the go. Your vulnerability management program is optimized for the wrong war. You're counting patches whil...

BIT-MOODLE-2024-33997 moodle: stored XSS risk when editing another user's equation in equation editor

Additional sanitizing was required when opening the equation editor to prevent a stored XSS risk when editing another user's equation...

CVE-2018-20859

edx-platform before 2018-07-18 allows XSS via a response to a Chemical Equation advanced problem...

CVE-2024-45060

PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. One of the sample scripts in PhpSpreadsheet is susceptible to a cross-site scripting XSS vulnerability due to improper handling of input where a number is expected leading to formula injection. The code in in...

CVE-2024-45060

Summary (CVE-2024-45060) PhpSpreadsheet (PHPOffice) contains a cross-site scripting (XSS) vulnerability in a sample file. The issue arises when user-supplied input is concatenated directly into spreadsheet formulas in the 45_Quadratic_equation_solver.php script, enabling formula injection and Jav...

Cross-site Scripting (XSS)

Overview phpoffice/phpspreadsheet is a Spreadsheet engine that Read, Create and Write Spreadsheet documents in PHP . Affected versions of this package are vulnerable to Cross-site Scripting XSS through the discriminantFormula and r1Formula processes due to improper user input sanitization. An...