CVE-2021-40444

CVE-2021-40444 PoC CVE-2021-40444 Microsoft Office Word Remote Code Execution を悪用する悪意のある docx 生成ツール このスクリプトの作成は、実際の攻撃で使用されたサンプル: 938545f7bbe40738908a95da8cdeabb2a11ce2ca36b0f6a74deda9378d380a52 docx ファイル に対するリバースエンジニアリングに基づいています。 最初に lcab をインストールする必要があります sudo apt-get install lcab 手動での再現手順は...

CVE-2022-30190

CVE-2022-30190 基于 https://github.com/JohnHammond/msdt-follina 环境搭建 使用 /env-setup 中的文件 1. 虚拟机：使用 VirtualBox 和 Win1021H2Englishx32.iso（内部版本 19044.1288） 2. 安装 Microsoft Word，在 /env-setup/odt-2013 中通过 cmd 运行 setup.exe /configure configuration.xml 3. 安装 Python 3.8.10 漏洞利用 1. 在 Windows 设置中关闭病毒和威胁防护 2...

2017-11-17-Maldoc-Using-CVE-2017-0199

此存储库没有 README。...

TIC4301_Project

TIC4301Project TIC4301 项目 - CVE-2021-40444 下载以下 Vagrant 镜像： Kali - https://drive.google.com/file/d/1RegQcT2jjFoaQRgLjXDYl4iS0HNtmU2/view?usp=sharing Win10 - https://drive.google.com/file/d/1zcLertRoI-FrHDkRq1NO-KHaF88bMv6e/view?usp=sharing 通过 Vagrant 使用以下命令导入镜像： 1. vagrant box add kalipackage.box...

Maldoc-Analysis

Maldoc-Analysis 2023年3月、新たなマルウェアとして特定されたサンプルが確認されました。そのマルウェアは拡張子.xlsおよび.docのファイルに由来し、「Bank Slip.xls」という名前で知られています。そのマルウェアの活動は、CVE-2017-11882およびCVE-2018-0802として知られる脆弱性に関連しています。...

CVE-2022-30190-Analysis-With-LetsDefends-Lab

CVE-2022-30190-Analysis-With-LetsDefends-Lab 2022年5月27日，NaoSec的技术团队尝试分析并发现了一个看似恶意的.doc格式文档。该文档被检测到从白俄罗斯的IP地址上传。这一可疑行为随后被进一步追踪，并于2022年5月30日（星期一），微软宣布发现了一个零日漏洞迹象，编号为CVE-2022-30190。 已知该恶意文件被检测到指向意大利的区号0438，即Follina村。因此，作为最早分析此漏洞的研究人员之一，Kevin Beamount将此漏洞命名为“follina”。...

EulerOS 2.0 SP13 : python-pillow (EulerOS-SA-2026-2992)

According to the versions of the python-pillow packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the...

TencentOS Server 2: compat-poppler022 (TSSA-2026:0651)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0651 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

TencentOS Server 3: evince (TSSA-2026:0620)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0620 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:...

PT-2026-59511

Impact An attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. Patches Patched version: 12.2.0. PdfParser introduced in Pillow 4.2.0 follows Prev pointers in PDF trailers to read cross-reference sections. If ...

CVE-2026-57259 Foxit PDF Editor/Reader XDP XFA XXE arbitrary local file read

The input file does not need to be strictly in a structurally valid PDF format. Instead, after reviewing the content, the original document disguised as a PDF will be sent to the parser. Malicious documents will construct malicious external entities that, through the protocol, point to local path...

PT-2026-56358

Name of the Vulnerable Software and Affected Versions Foxit Reader affected versions not specified Description An XML External Entity XXE issue exists where the application processes files that are not strictly in a structurally valid PDF format. By opening a malicious document disguised as a PDF...

poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent...

poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent...

poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication

A flaw was found in Poppler's Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the tilingPatternFill function. This overflow leads to an undersized heap memory allocation, allowing a subsequent...

CVE-2026-48155

A flaw was found in pypdf, a free and open-source pure-python PDF library. An attacker can craft a malicious PDF file that, when processed, leads to excessive memory consumption. This occurs when extracting text in layout mode with large character offsets. This vulnerability can result in a Denia...

PT-2026-40314

Pillow is a Python imaging library. From version 4.2.0 to before version 12.2.0, an attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This issue has been patched in version 12.2.0...

PT-2026-37199

Name of the Vulnerable Software and Affected Versions Pillow versions 4.2.0 through 12.1.x Description A flaw in the PdfParser allows an attacker to supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. This occurs because...

CVE-2026-23863

An attachment spoofing issue in WhatsApp for Windows prior to v2.3000.1032164386.258709 could have allowed maliciously formatted documents with embedded NUL bytes in the filename to be shown in the application as one type of file but run as an executable when opened. We have not seen evidence of...

CVE-2026-40980

In Spring AI, a malicious PDF file can be crafted that triggers the allocation of unreasonable amounts of memory when handled by ForkPDFLayoutTextStripper. Affected versions: Spring AI: 1.0.0 - 1.0.5 fixed in 1.0.6, 1.1.0 - 1.1.4 fixed in 1.1.5...