CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Microsoft Outlook リモートコード実行脆弱性 PoC このスクリプトは、CVE-2024-21413（CVSSスコア9.8のMicrosoft Outlookで特定された重大なセキュリティ上の欠陥）の概念実証（PoC）を示しています。MonikerLink エクスプロイトと名付けられたこの脆弱性は、ローカルNTLMデータの漏洩の可能性やリモートコード実行のリスクなど、広範囲にわたる影響を及ぼします。さらに、Office Protected Viewを回避できる攻撃ベクトルを浮き彫りにし、他のOfficeソフトウェアへの脅威を拡大しています。 使用方法:...

Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

EUVD-2026-64126

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...

PT-2026-79447

Name of the Vulnerable Software and Affected Versions Git for Windows versions prior to 2.55.0.windows.4 Description A malicious remote Git server can advertise a bundle URI that is processed by the transport get remote bundle uri, fetch bundle uri internal, and copy uri to file functions in...

CVE-2026-54206

CVE-2026-54206 affects Tobit Laboratories AG TeamDavid’s Webbox. The issue is a server-side inclusion/SSRF via the pathname parameter in the sending functionality, which can be set to UNC paths (e.g., \Server\Share). The server processes these paths without validation, causing outbound connection...

firefox: multiple issues

CVE-2015-4513 Miscellaneous memory safety hazards: Christian Holler, David Major, Jesse Ruderman, Tyson Smith, Boris Zbarsky, Randell Jesup, Olli Pettay, Karl Tomlinson, Jeff Walden, and Gary Kwong reported memory safety problems and crashes that affect Firefox ESR 38.3 and Firefox 41. -...