CVE-2017-11882

CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 研究: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about 补丁分析:...

rpc2wc

RPC a WebClient La información para este código se puede encontrar en esta publicación de blog. Se recomienda leerla antes de intentar usar cualquier cosa de aquí. Código para activar WebClient mediante una llamada RPC. Dado que no llegó a prosperar, el código nunca se limpió a fondo y quedó en...

CVE-2025-33053-Checker-PoC

CVE-2025-33053 漏洞检查器及概念验证（PoC） 检查器验证截图 PoC 验证截图 一套完整的工具，用于检查并演示针对 CVE-2025-33053 的潜在利用——这是一项影响 Windows 系统的严重 WebDAV 远程代码执行（RCE）漏洞。 📌 关于 CVE-2025-33053 CVE-2025-33053 允许攻击者利用引用恶意远程 WebDAV 共享的 .LNK 快捷方式文件，在受影响系统上可能导致远程代码执行（RCE）。 漏洞条件： 目标系统上必须安装并运行 WebClient 服务 。 目标操作系统在访问此类路径（即使通过 .LNK 文件）时，必须能够通过...

SharpStartWebclient

SharpStartWebclient Ejecútelo desde una sesión sin privilegios para iniciar el servicio WebClient y habilitar esa jugosa escalada de privilegios. Port en C del Beacon Object File de https://github.com/outflanknl/C2-Tool-Collection/blob/main/BOF/StartWebClient/SOURCE/StartWebClient.c...

CVE-2026-72965

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-73894

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72965

CVE-2026-72965 is a use-after-free vulnerability in the Windows WebClient Service that allows an authorized local attacker to achieve privilege elevation . The CVSS v3.1 score is 7.8 (HIGH) with a vector of AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack requiring low privileges an...

Windows WebClient Service Elevation of Privilege Vulnerability

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

PT-2026-87880

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

CVE-2026-72965: Use After Free

Use after free in Windows WebClient Service allows an authorized attacker to elevate privileges locally...

Exploit for External Control of File Name or Path in Microsoft

CVE-2025-33053 Vulnerability Checker & Proof-of-Concept PoC...

Warning — Two Unpatched Critical 0-Day RCE Flaws Affect All Windows Versions

Microsoft today issued a new security advisory warning billions of Windows users of two new critical, unpatched zero-day vulnerabilities that could let hackers remotely take complete control over targeted computers. According to Microsoft, both unpatched flaws are being used in limited, targeted...

Siemens Solid Edge WebPartHelper ActiveX Remote Code Execution

Siemens Solid Edge ST4 and ST5 contain a flaw in the OpenInEditor method in the WPHelper.dll ActiveX control. This issue may allow a context-dependent attacker to potentially execute arbitrary commands. Recent assessments: wchen-r7 at September 12, 2019 6:07pm UTC reported: Vulnerability: the...

Microsoft Office - OLE Remote Code Execution

Source: https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11882 Research:...

Microsoft Office - OLE Remote Code Execution

Microsoft Office - OLE Remote Code Execution Source: https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11882 Research:...

IBM System Director Agent DLL Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

SAP NetWeaver HostControl Command Injection

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3...

Sun Java Web Start Double Quote Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sun Java Web Star...

Java - Web Start Double Quote Injection Remote Code Execution (Metasploit)

======================================================== Java Web Start Double Quote Inject Remote Code Execution ======================================================== Date: Jun 12 2012 updated: Jun 6 2013 Author: Rh0 Version: At least Java 1.6.31 to 1.6.35 and 1.7.03 to 1.7.07 Tested on:...

Sun Java Web Start Double Quote Injection Vulnerability

This Metasploit module exploits a flaw in the Web Start component of the Sun Java Runtime Environment. Parameters intial-heap-size and max-heap-size in a JNLP file can contain a double quote which is not properly sanitized when creating the command line for javaw.exe. This allows the injection of...