18 matches found
malicious-pdf
ΠΠ΅Π½Π΅ΡΠ°ΡΠΎΡ Π²ΡΠ΅Π΄ΠΎΠ½ΠΎΡΠ½ΡΡ PDF β οΈ Π‘ΠΎΠ·Π΄Π°ΡΡ 67 Π²ΡΠ΅Π΄ΠΎΠ½ΠΎΡΠ½ΡΡ PDF-ΡΠ°ΠΉΠ»ΠΎΠ² Π΄Π»Ρ ΡΠ΅ΡΡΠΈΡΠΎΠ²Π°Π½ΠΈΡ phone-home ΠΎΠ±ΡΠ°ΡΠ½ΡΡ Π²ΡΠ·ΠΎΠ²ΠΎΠ², SSRF, XSS, XXE, ΠΊΡΠ°ΠΆΠΈ ΡΡΡΡΠ½ΡΡ Π΄Π°Π½Π½ΡΡ NTLM ΠΈ ΡΡΠ΅ΡΠΊΠΈ Π΄Π°Π½Π½ΡΡ Π² PDF-ΠΏΡΠΎΡΠΌΠΎΡΡΡΠΈΠΊΠ°Ρ , ΠΊΠΎΠ½Π²Π΅ΡΡΠ΅ΡΠ°Ρ ΠΈ Π²Π΅Π±-ΠΏΡΠΈΠ»ΠΎΠΆΠ΅Π½ΠΈΡΡ . ΠΠΎΠΆΠ½ΠΎ ΠΈΡΠΏΠΎΠ»ΡΠ·ΠΎΠ²Π°ΡΡ Ρ Burp Collaborator ΠΈΠ»ΠΈ Interact.sh ΠΡΠΏΠΎΠ»ΡΠ·ΡΠ΅ΡΡΡ Π΄Π»Ρ...
CVE-2024-21413-Vulnerabilidad-Outlook-LAB
CVE-2024-21413 β Outlook LAB Vulnerability Vulnerability Description CVE-2024-21413 is a critical vulnerability discovered in Microsoft Outlook that allows a remote attacker to execute malicious links via a carefully crafted email. This exploit uses the file:// protocol to redirect victims to...
Moniker-Link-Lab-Setup
Moniker Link Lab Setup - CVE-2024-21413 π― Project Overview Hands-on penetration testing lab demonstrating CVE-2024-21413 moniker link exploitation for NTLM credential theft. This project documents the complete attack chain from setup to credential compromise, including real-world challenges and...
CVE-2026-54206: Improper Input Validation
Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a @@INCLUDE command, which can be set to network locations using UNC paths e.g., β\Server\Shareβ. The server processes these paths without validation, resulting in outbound connection attempts to...
EUVD-2018-13753
Malware in sbrugna...
EUVD-2018-13755
Malware in sbrugna...
CVE-2018-21237
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...
CVE-2018-21239
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...
Experts Detail New Zero-Click Windows Vulnerability for NTLM Credential Theft
Cybersecurity researchers have shared details about a now-patched security flaw in Windows MSHTML platform that could be abused to bypass integrity protections on targeted machines. The vulnerability, tracked as CVE-2023-29324 CVSS score: 6.5, has been described as a security feature bypass. It w...
CVE-2022-29281: Improper Limitation of a Pathname to a Restricted Directory
Notable before 1.9.0-beta.8 doesn't effectively prevent the opening of executable files when clicking on a link. There is improper validation of the file URI scheme. A hyperlink to an SMB share could lead to execution of an arbitrary program or theft of NTLM credentials via an SMB relay attack,...
CVE-2018-21237
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...
Deserialization of untrusted data
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...
CVE-2018-21239
CVE-2018-21239 affects Foxit Reader and PhantomPDF before 9.2. The issue enables NTLM credential theft via a GoToE or GoToR action in PDFs. Root cause is information leakage via GoTo actions, leading to partial confidentiality impact per CVSS (2.0: 5.0, 3.1: 5.3). Affected products are Foxit Read...
CVE-2018-21239
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...
PT-2020-8881
Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF versions prior to 8.3.7 Description The issue allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit PhantomPDF versions prior to 8.3.7, update to version 8.3.7 or later to resolve the issue...
PT-2020-8883
Name of the Vulnerable Software and Affected Versions Foxit Reader versions prior to 9.2 PhantomPDF versions prior to 9.2 Description An issue was discovered that allows NTLM credential theft via a GoToE or GoToR action. Recommendations For Foxit Reader versions prior to 9.2, update to version 9....
CVE-2018-21237: Insufficiently Protected Credentials
An issue was discovered in Foxit PhantomPDF before 8.3.7. It allows NTLM credential theft via a GoToE or GoToR action...
CVE-2018-21239: Insufficiently Protected Credentials
An issue was discovered in Foxit Reader and PhantomPDF before 9.2. It allows NTLM credential theft via a GoToE or GoToR action...