certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

five-nights-at-follina-s

Five Nights at Follina's 一个Fullstack Academy网络安全项目，研究Follina漏洞（CVE-2022-30190）的完整生命周期，从利用到检测与防御。 团队： Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu 这套工具假定你有一个网络主机，或者可以使用Python搭建一个简单的Web服务器来托管生成或示例的payload文件。 免责声明 "Example...

LittleCorporal

LittleCorporal LittleCorporal：一个C自动化恶意文档生成器 root@kitploit: C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ \ //|| | / /|| // / / / ||...

CVE-2022-30190

CVE-2022-30190 aka Follina 漏洞說明 Follina存在於微軟支援診斷工具（Microsoft Support Diagnostic Tool，MSDT）中，當有應用程式透過URL協定呼叫MSDT進行支援時，就會出現遠端程式攻擊漏洞，成功的開採將允許駭客基於所執行應用程式的權限，來執行任意程式。 漏洞復現環境 root@kitploit: Host OS: Ubuntu 22.04 LST Guest OS: Windows 10 Pro x64, version 2004, build 19041.1237 Microsoft office: word 201...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 Implementación de FOLLINA-CVE-2022-30190 Este repositorio contiene una herramienta de explotación para la vulnerabilidad FOLLINA-CVE-2022-30190 Aviso legal Esta herramienta fue desarrollada con fines de pruebas de seguridad e investigación. Al clonar / hacer fork de esta...

cve-2021-40444

cve-2021-40444 Ingeniería inversa de los archivos maliciosos "A Letter Before Court 4.docx" que explotan cve-2021-40444 Los archivos incluyendo el documento de Word malicioso y el archivo .cab pueden descargarse en any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ ¡Nota! El...

follina-spring

Follina MS-MSDT 利用 —— 基于 Spring Boot 本仓库包含一个简单的 Spring Boot 应用程序，它既可作为服务器来 托管/激活 Follina payload ，也可作为 恶意 Word 文档的生成器 ，用于作为攻击向量利用 CVE-2022-30190。 此漏洞涉及通过 MSDT （Microsoft Windows 支持诊断工具） 实现 远程代码执行 。 服务端 Payload 若要提供你选择的唯一 payload，应执行以下操作： 定义 payload ，例如： root@kitploit: export...

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 本仓库从 Defender 视角讨论 Follina MSDT 漏洞 目录 关于 时间线 理解漏洞利用 IOC 列表 检测策略 测试与研究 缓解方案 参考 关于 该漏洞是 Microsoft Windows 支持诊断工具 MSDT 的远程代码执行漏洞，由 Shadow Chaser Group 的 crazyman 报告。Microsoft 现已将其跟踪为 CVE-2022-30190。该漏洞影响所有仍在接收安全更新的 Windows 版本（Windows 7+ 及 Server 2008+）。 正如安全研究员 naosec...

msdt-follina

Vector de Ataque MS-MSDT "Follina" John Hammond | 30 de mayo de 2022 Crea un ataque MS-MSDT "Follina" con un documento malicioso de Microsoft Word y aloja un payload con un servidor HTTP. Uso root@kitploit: usage: follina.py -h --command COMMAND --output OUTPUT --interface INTERFACE --port PORT...

Ring0VBA

Ring0VBA CVE-2018-6606 usando VBA - https://disrel.com/posts/Ring0VBA-Getting-Ring0-Using-a-Goddamn-Word-Document/...

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Proyecto sobre la explotación y estrategias de mitigación de CVE-2022-30190 📌 Acerca de Este repositorio contiene mi proyecto final para ICT287, donde exploro la vulnerabilidad CVE-2022-30190 "Follina". El proyecto abarca: Análisis detallado del exploit Proceso de...

CVE-2017-11882

CVE-2017-11882 43b original script from https://github.com/embedi/CVE-2017-11882 109b original script from https://github.com/unamer/CVE-2017-11882/ Kudos, now unamer's code can execute shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

CVE-2018-8174-msf

CVE-2018-8174-msf Este es un módulo de Metasploit que crea un documento malicioso de Word para explotar CVE-2018-8174 - vulnerabilidad de corrupción de memoria en VBScript. Este módulo es un puerto muy rápido y utiliza la muestra de exploit que se encontró en la naturaleza. El exploit funciona so...

CVE-2018-8174-msf

CVE-2018-8174-msf Este es un módulo de metasploit que crea un documento de Word malicioso para explotar CVE-2018-8174 - vulnerabilidad de corrupción de memoria en VBScript. Este módulo es un port muy rápido y utiliza la muestra de exploit que se encontró en la naturaleza. El exploit solo funciona...

CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability

...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the document conversion process. An attacker can cause the server to make arbitrary outbound HTTPS requests or access local image files by uploading a specially crafted DOCX document that references...

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

EUVD-2026-36737

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

EUVD-2026-26117

OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit uploadfile and uploadimage endpoints to access files beyond the intended workspace-only filesystem policy...