CVE-2022-30190-follina

CVE-2022-30190-follina Just another PoC for the new MSDT-Exploit To edit the Doc, just open with 7z, xarchiver, ... to change the value in word\rels\document.xml.rels to your IP. The exploit must contain at least 3541 characters before the window.location.href, and they must be within the script...

CVE-2026-63270

A flaw was found in LibreOffice. This vulnerability allows information disclosure when a user opens a specially crafted document. An attacker can construct malicious URLs within document features that expand local environment variables or configuration settings, enabling the exfiltration of...

follina

follina POC Все о CVE-2022-30190, также известной как follina, которая является RCE-уязвимостью, затрагивающей Microsoft Support Diagnostic Tools MSDT в приложениях Office, таких как Word. Это очень простой POC, не стесняйтесь ознакомиться с источниками ниже для получения дополнительной информаци...

CVE-2022-30190

CVE-2022-30190 Follina Образовательная разработка вредоносного ПО, эксплуатация, анализ и устранение Полностью документированное доказательство концепции, демонстрирующее уязвимость Follina — от социальной инженерии до эксплуатации, криминалистического анализа и разработки патча. ⚠️ Только в...

CVE-2018-10583

Обновлённый python3-эксплойт для CVE-2018-10583 LibreOffice/Open Office - '.odt' Information Disclosure оригинальные кредиты: https://www.exploit-db.com/exploits/44564 Использование 1. Установите модуль ezodf с помощью pip или pip3 2. Запустите эксплойт с помощью python3 — он создаст файл bad.odt...

CVE-2017-11882

CVE-2017-11882 Le script original provient de https://github.com/embedi/CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Recherche:...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-21509-PoC

CVE-2026-21509 — Образовательный фиктивный PoC для проверки видимости Defender ⚠️ Этот репозиторий предоставляет безвредный, неэксплуатируемый Proof of Concept. Его цель — поддержка защитных исследований , тестирования видимости EDR/AV и обучения. Он не эксплуатирует CVE‑2026‑21509 и содержит...

CVE-2026-21509

CVE-2026-21509 — Обход функции безопасности OLE в Microsoft Office Исследование авторства Sentinel AI Defense. Только защитный анализ — здесь не публикуется ни рабочего эксплойта, ни PoC для активно эксплуатируемой уязвимости. Обход функции безопасности в Microsoft Office, позволяющий специально...

CVE-2026-81546

The Affinity by Canva application before 3.3.0 September 2026 release did not perform adequate bounds checking when parsing Affinity document files leading to a stack-based buffer overflow. A threat actor could craft a Affinity document that when opened by a user in Affinity could result in...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

CVE-2026-84548

CVE-2026-84548 is an integer overflow vulnerability in Apple macOS , fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 via improved input validation. Processing a maliciously crafted document can trigger an out-of-bounds read , potentially leading to high confidentiality a...

EUVD-2026-77889

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

CVE-2026-84548

An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...

USN-8756-1: Yelp vulnerability

It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...

Astra Linux – Vulnerability in Poppler

In Poppler 0.74.0, the PDFDoc::markObject method in PDFDoc.cc mishandles dict marking, resulting in stack consumption in the Dict::find function located in Dict.cc. This issue can be triggered by passing a malicious PDF file to the pdfunite binary...

Astra Linux – Vulnerability in GhostScript

A heap-based buffer overwrite vulnerability was discovered in the lp8000printpage function of GhostScript, located in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a specially crafted PDF file, triggering a heap buffer overflow that could lead to memory corruption...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFs in Google Chrome before version 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...