225 matches found
KnockOutlook
KnockOutlook "La mejor sensación es ganar por nocaut." - Nonito Donaire Resumen KnockOutlook es un proyecto en C que interactúa con el objeto COM de Outlook para realizar varias operaciones útiles en compromisos de red team. Uso desde la línea de comandos root@kitploit: / /// / // \ / // / / / / ...
CVE-2015-6132
CVE-2015-6132 Microsoft Office / COM Object DLL Planting Original poc: https://www.exploit-db.com/exploits/38968/ Running poc.rtf with mqrt.dll in the same directory will trigger the dll, which in this case pop calc making Down/exec Dll will work as well Exporting the dll to run from Samba/WebDav...
vba2clr
TLDR: Just experimenting with different ways to load CLR .NET assemblies on VBA locally and remotely by using AppDomain.ExecuteAssembly or any other handy method after getting arround AccessVBOM programmatic access to visual basic project is not trusted from VBA. vba2clr..vba: Sets AccessVBOM...
CVE-2019-9730
CVE-2019-9730: Synaptics Audio Driver LPE La vulnerabilidad en este paquete de controlador residía en el servicio de sistema CxUtilSvc. Este alojaba un objeto COM que el código con pocos privilegios puede usar para realizar lecturas y escrituras arbitrarias en el registro como SYSTEM. El código...
CVE-2026-66804-CrossDevice-Service-EoP
CVE-2026-66804: Cross Device Virtual Camera EoP I independently discovered and reported the issue now tracked as CVE-2026-66804. MSRC confirmed my submission as a duplicate of an earlier report with the same underlying Windows Camera FrameServer root cause. A standard Windows user can create a...
IDiagnosticProfileUAC
IDiagnosticProfileUAC Just another UAC bypass using auto-elevated COM object Virtual Factory for DiagCpl 12C21EA7-2EB8-4B55-9249-AC243DA8C666. This COM object can be used to create instance of DiagnosticProfile D0B7E02C-E1A3-11DC-81FF-001185AE5E76 COM object which exposes SaveDirectoryAsCab metho...
CVE-2026-57105
creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:11+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:07+00:00| seen|...
UPnPHostFileRead
Description Local arbitrary file read PoC exploit for the Wind...
EUVD-2020-8874
Malware in sbrugna...
EUVD-2018-13759
Malware in sbrugna...
EUVD-2020-4354
Malware in sbrugna...
EUVD-2020-2178
Malware in sbrugna...
EUVD-2004-1899
Malware in sbrugna...
EUVD-2020-8893
Malware in sbrugna...
EUVD-2019-10035
Malware in sbrugna...
EUVD-2020-12251
Malware in sbrugna...
CVE-2020-1375
An elevation of privilege vulnerability exists when Windows improperly handles COM object creation, aka 'Windows COM Server Elevation of Privilege Vulnerability'...
CVE-2019-1405
An elevation of privilege vulnerability exists when the Windows Universal Plug and Play UPnP service improperly allows COM object creation, aka 'Windows UPnP Service Elevation of Privilege Vulnerability'...