CVE-2022-30190-follina

CVE-2022-30190-follina Solo otro PoC para el nuevo MSDT-Exploit Para editar el documento, solo ábrelo con 7z, xarchiver, ... para cambiar el valor en word\rels\document.xml.rels a tu IP. El exploit debe contener al menos 3541 caracteres antes de window.location.href, y deben estar dentro de la...

CVE-2026-21509

CVE-2026-21509 — Bypass de Recurso de Segurança OLE do Microsoft Office Artigo de pesquisa por Sentinel AI Defense. Apenas análise defensiva — nenhum exploit funcional ou PoC é publicado aqui para uma vulnerabilidade ativamente explorada. Um bypass de recurso de segurança no Microsoft Office que...

CVE-2022-30190

CVE-2022-30190 Follina تطوير برمجيات خبيثة تعليمي، استغلال، تحليل وتخفيف إثبات مفهوم موثق بالكامل يوضح ثغرة Follina - بدءًا من التسليم عبر الهندسة الاجتماعية وصولًا إلى الاستغلال والتحليل الجنائي وتطوير التصحيح. ⚠️ للاستخدام التعليمي فقط. نُفذت جميع الأنشطة في هذا المستودع حصريًا داخل بيئة مختبر...

CVE-2018-10583

CVE-2018-10583 के लिए अपडेटेड python3 एक्सप्लॉइट LibreOffice/Open Office - '.odt' सूचना प्रकटीकरण मूल श्रेय : https://www.exploit-db.com/exploits/44564 उपयोग 1. pip या pip3 के साथ ezodf मॉड्यूल इंस्टॉल करें 2. python3 के साथ एक्सप्लॉइट चलाएँ, यह एक bad.odt फ़ाइल उत्पन्न करेगा, इसे बॉक्स पर अपलोड...

follina

follina POC Tutto su CVE-2022-30190, conosciuta anche come follina: una vulnerabilità RCE che colpisce Microsoft Support Diagnostic Tools MSDT nelle applicazioni Office come Word. Questo è un POC molto semplice; sentiti libero di consultare le fonti qui sotto per ulteriori threat intelligence...

CVE-2017-11882

CVE-2017-11882 Das ursprüngliche Skript stammt von https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...

EUVD-2026-61173

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

CVE-2026-75935 Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

PT-2026-77296

Uncontrolled memory allocation in the binary Ion stream cursor in Amazon ion-java before 1.12.0 might allow remote actors to cause a denial of service via a crafted Ion binary document containing a declared-length field that causes excessive heap preallocation. To remediate this issue, users shou...

CVE-2026-34789

FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, src/App/PropertyPythonObject.cpp in PropertyPythonObject::Restore passes the attacker-controlled module attribute from serialized PropertyPythonObject XML directly to PyImportImportModule while restoring a...

USN-8627-1 yelp vulnerability

It was discovered that Yelp incorrectly handled certain crafted help documents due to an overly permissive Content Security Policy. An attacker could trick a user into opening a specially crafted document, possibly resulting in the disclosure of sensitive information...

Astra Linux – Vulnerability in pypdf2

pypdf is a free and open-source Python-based PDF library. Prior to version 6.7.2, an attacker who exploited this vulnerability could create a PDF that would lead to an infinite loop. This required reading the file. This issue has been fixed in pypdf 6.7.2. As a workaround, one can manually apply...

EUVD-2026-54615

pypdf is a free and open-source pure-python PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consumption when pypdf/cmap.py function parsebfrange parses unusually large source-code or destination-string tokens in a font /ToUnicode CMap during text extraction. This issue is fixed...

CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...

CVE-2026-20346 ClamAV PDF File Format Processing Memory Corruption Vulnerability

A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of memory corruption on an affected device. This vulnerability is due to improper boundary checks for content in PDF file...

DEBIAN-CVE-2026-17990

Insufficient validation of untrusted input in WebAuthn in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Low...

CVE-2026-17875

Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file. Chromium security severity: Medium...

CVE-2026-17803

CVE-2026-17803 describes an insufficient validation of untrusted input in Chrome's Save to Drive component, enabling a sandbox escape when processing a crafted PDF. Affected software is Google Chrome/Chromium, with the vulnerability present in builds prior to 151.0.7922.72. Red Hat, Debian, OSV, ...

CVE-2026-17803

Insufficient validation of untrusted input in Save to Drive in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted PDF file. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...