CVE-2026-108443

Off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108440

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108442

Use after free in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108444

Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code over a network...

CVE-2026-108428

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108429

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108431

Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108432

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108430

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108426

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108427

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

DroppedConnection

DroppedConnection Emulates a Cisco ASA Anyconnect VPN service, accepting any credentials and logging them before serving VBS to the client that gets executed in the context of the user. Blog post:...

CVE-2026-25769

🚨 CVE-2026-25769 - Wazuh Insecure Deserialization RCE Critical Worker ➜ Master Remote Code Execution in Wazuh Cluster Mode Unsafe deserialization in Wazuh cluster communications allows a compromised worker node to achieve root RCE on the master node. 📌 Overview CVE ID: CVE-2026-25769 Product: Waz...

SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis

SharePoint ToolShell CVE-2025-53770 Incident Analysis Overview This project documents the investigation of a real-world exploitation attempt targeting a SharePoint server using the ToolShell vulnerability CVE-2025-53770. The attack demonstrates a full exploitation chain including remote code...

CVE-2021-24499

CVE-2021-24499 | Workreap - Freelance Marketplace and Directory WordPress Theme 2.2.2 - Arbitrary File Upload WordPress Theme Workreap 2.2.2 - Unauthenticated File Upload Leading to Remote Code Execution A powerful and accurate mass exploitation tool for CVE-2021-24499 vulnerability in WordPress...

EUVD-2026-102464

Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-108452

A path traversal vulnerability (CWE-22) exists in Microsoft Office SharePoint , where improper limitation of a pathname to a restricted directory allows an authorized attacker to execute code over a network . The vulnerability is associated with the security update for SharePoint Server Subscript...

EUVD-2026-102462

Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

EUVD-2026-102463

Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code over a network...

CVE-2026-108450

A Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute arbitrary code over a network. The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). The impact is categorized as High severity, with the po...