225 matches found
CVE-2019-9730
CVE-2019-9730: Synaptics Audio Driver LPE La vulnerabilidad en este paquete de controlador residía en el servicio de sistema CxUtilSvc. Este alojaba un objeto COM que el código con pocos privilegios puede usar para realizar lecturas y escrituras arbitrarias en el registro como SYSTEM. El código...
CVE-2015-6132
CVE-2015-6132 Microsoft Office / Plantación de DLL en objetos COM PoC original: https://www.exploit-db.com/exploits/38968/ Ejecutar poc.rtf con mqrt.dll en el mismo directorio activará la dll, que en este caso pop calc también funcionará crear una DLL de descarga/ejecución Exportar la dll para...
IDiagnosticProfileUAC
IDiagnosticProfileUAC Just another UAC bypass using auto-elevated COM object Virtual Factory for DiagCpl 12C21EA7-2EB8-4B55-9249-AC243DA8C666. This COM object can be used to create instance of DiagnosticProfile D0B7E02C-E1A3-11DC-81FF-001185AE5E76 COM object which exposes SaveDirectoryAsCab metho...
KnockOutlook
KnockOutlook "La mejor sensación es ganar por nocaut." - Nonito Donaire Resumen KnockOutlook es un proyecto en C que interactúa con el objeto COM de Outlook para realizar varias operaciones útiles en compromisos de red team. Uso desde la línea de comandos root@kitploit: / /// / // \ / // / / / / ...
CVE-2026-66804-CrossDevice-Service-EoP
CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...
vba2clr
TLDR: Just experimenting with different ways to load CLR .NET assemblies on VBA locally and remotely by using AppDomain.ExecuteAssembly or any other handy method after getting arround AccessVBOM programmatic access to visual basic project is not trusted from VBA. vba2clr..vba: Sets AccessVBOM...
CVE-2026-57105
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:11+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:07+00:00| seen|...
UPnPHostFileRead
Description Local arbitrary file read PoC exploit for the Wind...
EUVD-2018-13759
Malware in sbrugna...
EUVD-2020-8874
Malware in sbrugna...
EUVD-2020-4354
Malware in sbrugna...
EUVD-2004-1899
Malware in sbrugna...
EUVD-2020-2178
Malware in sbrugna...
EUVD-2020-12251
Malware in sbrugna...
EUVD-2020-8893
Malware in sbrugna...
EUVD-2019-10035
Malware in sbrugna...
CVE-2020-1375
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...
CVE-2019-1405
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...