191 matches found
ZipExec
ZipExec ZipExec est un outil de preuve de concept POC permettant d'encapsuler des outils binaires dans un fichier zip protégé par mot de passe. Ce fichier zip est ensuite encodé en base64 en une chaîne qui est reconstruite sur le disque. Cette chaîne encodée est ensuite chargée dans un fichier...
dcomhijack
Перехват DLL через DCOM Недавно мы обнаружили следующие классы DCOM, подверженные перехвату DLL. Если злоумышленник может записывать данные в связанный путь, он может перемещаться латерально, создавая экземпляр COM-объекта. Некоторые классы имеют дополнительные возможности перехвата DLL, не...
presentations
Мои презентации Больше материалов можно найти на моём личном сайте: https://sites.google.com/site/zhiniangpeng Эксплуатация RCE до аутентификации и уязвимостей побега из песочницы в EXSi, Typhooncon 2023 OLE-объекты всё ещё опасны сегодня — эксплуатация Microsoft Office, POC 2023...
Vulnerability fixed in Microsoft Developer Tools
Microsoft has fixed a vulnerability in Inbox COM Objects. A malicious party could exploit the vulnerability to execute arbitrary code in the context of the vulnerable application without prior authentication. Inbox Component Object Model COM objects is an architecture for developers to develop...
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2026-21219: Use After Free
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
Microsoft Windows SDK < 10.0.26100.7463 Inbox COM Objects (Global Memory) RCE (January 2026)
The version of Microsoft Windows SDK installed on the remote host is prior to 10.0.26100.7463. It is, therefore, affected by a remote code execution vulnerability: - Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. CVE-2026-21219 Note that Nessus has no...
The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Inbox COM Objects Code Execution Vulnerability
Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2025-58734
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-59282
Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58738
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58735
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58734
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58731
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58732
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58730
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58730
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
