CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Office漏洞复现 漏洞概述 北京时间9月8日，绿盟科技CERT监测到微软发布安全通告披露了Microsoft MSHTML 远程代码执行漏洞，攻击者可通过制作恶意的 ActiveX 控件供托管浏览器呈现引擎的 Microsoft Office文档使用，成功诱导用户打开恶意文档后，可在目标系统上以该用户权限执行任意代码。微软在通告中指出已检测到该漏洞被在野利用，请相关用户采取措施进行防护。 MSHTML（又称为Trident）是微软旗下的Internet Explorer 浏览器引擎，也用于 Office 应用程序，以在...

archiver-MOTW-support-comparison

适用于 Windows 的压缩软件对 MOTW（Mark of the Web）传播支持的对比 英语 | 日语 背景 2022 年 3 月 3 日，微软宣布将更改 Windows 上 Office 应用程序的默认行为，以阻止来自互联网的文件（例如电子邮件附件）中的宏。 公告摘录： VBA 宏是恶意行为者获取访问权限以部署恶意软件和勒索软件的常见方式。因此，为提高 Office 的安全性，我们将更改 Office 应用程序的默认行为，以阻止来自互联网的文件中的宏。 ... 此更改仅影响运行 Windows 的设备上的...

OffensiveVBA

OffensiveVBA VBS AV Evasion Stream/Videoの準備として、Officeマクロのコード実行手法と回避テクニックについて調査していました。 リストはどんどん長くなり、攻撃的なVBAテンプレートの中央集約的な場所が見つからなかったため、このリポジトリをそのような用途に利用できます。まだ完全にはほど遠いです。他にクールなテクニックや便利なテンプレートをご存知でしたら、ぜひコントリビュートしてプルリクエストを作成してください！...

CVE-2022-30190

CVE-2022-30190 Follina Proof of Concept Overview This project demonstrates a proof-of-concept exploit for CVE-2022-30190, also known as "Follina" —a critical remote code execution vulnerability affecting Microsoft Office via the MSDT protocol. The application generates malicious Office documents ...

backdoorppt

backdoorppt - 'Office なりすまし拡張子ツール' バージョン: v1.7-Stable 作者: pedro ubuntu r00t-3xp10it 対応ディストリビューション: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam 開発 @2017 ペイロード.exeを偽のWord文書.pptに変換する シンプルなスクリプトで、ユーザーが既存の実行ファイル.exeにMS-Wordアイコンを追加できるようにします バックエンドアプリケーションとしてresource-hackerを使用...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

Office-Malware-Forensics-Lab-REMnux-Static-Analysis

Office Malware Forensics Lab — REMnux Static Analysis Static analysis of two malicious Office files, done entirely inside an isolated REMnux VM. Nothing was ever executed — just inspected. Setup REMnux VM, no shared folders with the host Tools: sha256sum, file, unzip, and the oletools suite oleid...

CVE-2022-30190

Follina（CVE-2022-30190）漏洞利用 Follina（CVE-2022-30190） 是一个严重的远程代码执行（RCE）漏洞，影响 Microsoft 支持诊断工具（MSDT）。该漏洞最初是通过在 VirusTotal 上检测到的一个恶意文件发现的，并由研究员 Kevin Beaumont 命名。 在 HackTheBox 的 Outdated 机器环境中，该漏洞被用作获取系统访问权限的主要入口向量。 漏洞概述 该漏洞利用基于滥用 ms-msdt 协议方案，允许攻击者通过加载外部资源执行任意代码。只需打开或预览特制的 Office...

CVE-2026-64909

Microsoft Office is affected by CVE-2026-649909 due to an integer underflow, enabling local code execution. The root cause is a wrap/wraparound flaw in an Office component, with the impact described as local RCE. No specific affected versions or patches are provided in the supplied documents. Exp...

CVE-2026-63524 Microsoft Office Information Disclosure Vulnerability

...

CVE-2026-65661

Microsoft Office is affected by CVE-2026-65661 due to a heap-based buffer overflow that allows an attacker with local access to execute code on a vulnerable system. The CVSS 3.1 vector indicates a Local attack with user interaction required and a High impact on confidentiality, integrity, and ava...

CVE-2026-39904

Gophish 0.12.1 is affected by a denial-of-service in the ApplyTemplate() path that processes Office documents as ZIP archives. The vulnerability arises from ioutil.ReadAll() on each file entry without sized limits, enabling a zip-bomb payload to cause several gigabytes of in-memory expansion and ...

[SECURITY] Fedora 43 Update: python-wsgidav-4.3.4-1.fc43

A generic and extendable WebDAV server written in Python and based on WSGI. Main features: =E2=80=A2 WsgiDAV is a stand-alone WebDAV server with SSL support, that can be installed and run as Python command line script. =E2=80=A2 The python-pam library is needed as extra requirement if pam-login...

CVE-2026-46722 XML External Entity Injection in extension "Faceted Search" (ke_search)

The OOXML parsing of the file indexer does not disable external entity resolution. A crafted xlsx or pptx document placed in an indexed directory can cause local files to be read or outbound HTTP requests to be performed, with the retrieved content being written to the search index...

EUVD-2025-209090

Dovecot has provided a script to use for attachment to text conversion. This script unsafely handles zip-style attachments. Attacker can use specially crafted OOXML documents to cause unintended files on the system to be indexed and subsequently ending up in FTS indexes. Do not use the provided...

ALPINE-CVE-2025-59031

Dovecot has provided a script to use for attachment to text conversion. This script unsafely handles zip-style attachments. Attacker can use specially crafted OOXML documents to cause unintended files on the system to be indexed and subsequently ending up in FTS indexes. Do not use the provided...

Open-Xchange OX Dovecot Pro 安全漏洞

Open-Xchange OX Dovecot Pro is a mail storage and delivery system provided by the German company Open-Xchange. Open-Xchange OX Dovecot Pro has a security vulnerability, which stems from the insecure handling of zip-format attachments by the attachment-to-text script. This vulnerability may allow...

CVE-2025-30190

Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available...

EUVD-2025-199814

Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available...

CVE-2025-30190

Malicious content at office documents can be used to inject script code when editing a document. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No publicly available...