191 matches found
ZipExec
ZipExec ZipExec는 바이너리 기반 도구를 비밀번호로 보호된 zip 파일로 감싸는 Proof-of-ConceptPOC 도구입니다. 이 zip 파일은 base64로 인코딩되어 문자열로 변환되고, 디스크에 다시 생성됩니다. 이 인코딩된 문자열은 JScript 파일에 로드되어 실행되면, 디스크에 비밀번호로 보호된 zip 파일을 다시 생성하고 실행합니다. 이 과정은 COM 객체를 사용하여 Windows의 GUI 기반 함수에 접근하고, 생성된 JScript 로더를 통해 zip 내부의 로더를 압축 해제 없이 실행함으로써 프로그래...
dcomhijack
DCOM DLL ハイジャック 私たちは最近、DLL ハイジャックの影響を受ける以下の DCOM クラスを発見しました。攻撃者が関連するパスに書き込める場合、COM オブジェクトをインスタンス化することで横移動が可能になります。一部のクラスには、ここに記載されていない追加の DLL ハイジャックの機会もあります。 クラス| DLL パス| プロセス| アーキテクチャ ---|---|---|--- WordPad Document| C:\Program Files\Windows NT\Accessories\XmlLite.dll| wordpad.exe| x64...
presentations
내 발표 더 많은 자료는 제 개인 사이트에서 확인할 수 있습니다: https://sites.google.com/site/zhiniangpeng EXSi의 preauth RCE 및 샌드박스 탈출 취약점 악용, Typhooncon 2023 OLE 객체는 오늘날에도 여전히 위험합니다 — Microsoft Office 악용, POC 2023 Django-Simple-Captcha — JumpServer Preauth RCE, Mosec BaijiuCon 2023 APT vs GPT, 2023년 캠퍼스 토크 vSphere 공격·방어 기...
Vulnerability fixed in Microsoft Developer Tools
Microsoft has fixed a vulnerability in Inbox COM Objects. A malicious party could exploit the vulnerability to execute arbitrary code in the context of the vulnerable application without prior authentication. Inbox Component Object Model COM objects is an architecture for developers to develop...
Inbox COM Objects (Global Memory) Remote Code Execution Vulnerability
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2026-21219: Use After Free
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
Microsoft Windows SDK < 10.0.26100.7463 Inbox COM Objects (Global Memory) RCE (January 2026)
The version of Microsoft Windows SDK installed on the remote host is prior to 10.0.26100.7463. It is, therefore, affected by a remote code execution vulnerability: - Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally. CVE-2026-21219 Note that Nessus has no...
The vulnerability of Inbox COM objects in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of Inbox COM objects in Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Inbox COM Objects Code Execution Vulnerability
Microsoft Inbox COM Objects is a built-in COM component of the Windows operating system from the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Inbox COM Objects, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2025-58734
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-59282
Concurrent execution using shared resource with improper synchronization 'race condition' in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58738
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58735
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58734
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58731
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58732
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58730
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
CVE-2025-58730
Use after free in Inbox COM Objects allows an unauthorized attacker to execute code locally...
