1847 matches found
CVE-2026-21509-PoC
CVE-2026-21509 — 用于防御可见性的教育性虚拟 PoC ⚠️ 本仓库提供的是一个无害、非利用性质的 Proof of Concept。 其目的是支持防御性研究 、EDR/AV 可见性测试 以及培训 。 它不利用 CVE‑2026‑21509，仅包含虚拟 OLE 工件 。 📝 概述 本仓库包含一个教育性 PoC ，用于模拟与 CVE‑2026‑21509 （一个 Microsoft Office 安全功能绕过 漏洞）相关的结构标记。 该 PoC 生成一个无害的 DOCX 文件 ，其中包含虚拟的嵌入式 OLE 组件，用于遥测观察 、沙箱分析 、EDR 规则验证 以及 SOC 培训...
CVE-2026-21509
CVE-2026-21509 — Microsoft Office OLE 安全功能绕过 由 Sentinel AI Defense 撰写的研究报告。仅限防御性分析——对于这一已被积极利用的漏洞， 此处不发布任何可用的利用代码或 PoC。 Microsoft Office 中的一项安全功能绕过漏洞，允许特制文档加载本应被 OLE 缓解措施阻止的 COM 组件。 该漏洞已被 APT28 UAC-0001 针对乌克兰和东欧目标积极利用。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2026-21509-ole-bypass 概述...
CVE-2022-30190-follina
CVE-2022-30190-follina 这只是针对新MSDT-Exploit的又一个PoC 要编辑该文档，只需用7z、xarchiver等打开，然后更改 word\rels\document.xml.rels 中的值为你的IP。 该漏洞利用必须在 window.location.href 之前包含至少3541个字符，并且这些字符必须在脚本标签内。现在大约有9000个，只是为了确保。 更多关于该漏洞的信息：...
CVE-2026-84548
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...
CVE-2026-84548
CVE-2026-84548 is an integer overflow vulnerability in Apple macOS , fixed in macOS Golden Gate 27 , macOS Sequoia 15.8 , and macOS Tahoe 26.7 via improved input validation. Processing a maliciously crafted document can trigger an out-of-bounds read , potentially leading to high confidentiality a...
EUVD-2026-77889
An integer overflow was addressed with improved input validation. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7. Processing a maliciously crafted document may lead to an out-of-bounds read...
USN-8756-1: Yelp vulnerability
It was discovered that Yelp allowed help documents to execute arbitrary scripts. An attacker could possibly use this issue to trick a user into opening a specially crafted help document and obtain sensitive information...
follina
follina POC CVE-2022-30190、別名 follina についてのすべて。これは、Microsoft Support Diagnostic Tools MSDT に影響を与える RCE 脆弱性で、Office アプリ Word など を介して悪用されます。非常にシンプルな POC です。詳細な脅威インテリジェンスについては、以下のソースを参照してください。 使い方 root@kitploit: usage: follina.py -h --command COMMAND --ip IP --port PORT --output OUTPUT --reverse...
Astra Linux – Vulnerability in GhostScript
A heap-based buffer overwrite vulnerability was discovered in the lp8000printpage function of GhostScript, located in the gdevlp8k.c file. This flaw allows an attacker to trick a user into opening a specially crafted PDF file, triggering a heap buffer overflow that could lead to memory corruption...
CVE-2022-30190
CVE-2022-30190 Follina 教育目的のマルウェア開発、悪用、分析、緩和 ソーシャルエンジニアリングによる配信から悪用、フォレンジック分析、パッチ開発までを網羅した、Follina脆弱性の完全文書化された概念実証です。 ⚠️ 教育目的のみ。 このリポジトリ内のすべての活動は、SLIITのIE4012攻撃的ハッキング戦術と戦略モジュールの一環として、隔離された仮想マシンラボ環境内でのみ実施されました。これを管理されたラボ以外で使用しないでください。実際のシステムやネットワークに対してテストしないでください。 📋 概要 CVE-2022-30190 、通称 Follina...
CVE-2018-10583
更新后的 python3 利用程序，针对 CVE-2018-10583 LibreOffice/Open Office - '.odt' 信息泄露 原始致谢：https://www.exploit-db.com/exploits/44564 使用方法 1. 使用 pip 或 pip3 安装 ezodf 模块 2. 使用 python3 运行该利用程序，它将生成一个 bad.odt 文件，将其上传到目标机器 3. 然后监听发往你的 SMB 服务器的请求：impacket-smbserver share share -smb2support 或 sudo impacket-ntlmrelay...
CVE-2017-11882
CVE-2017-11882 元のスクリプトは https://github.com/embedi/CVE-2017-11882 から CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Research:...
PYSEC-2026-3910 pypdf: Possible long runtimes/large memory usage when retrieving outlines
Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes and large memory consumption. This requires accessing the outlines of a document with either lots of entries or nested outlines with long re-used nesting paths. Patches This has been fixed in pypdf==6.16.1...
CVE-2026-85730
A flaw was found in smol-toml, a TOML parser and serializer. A remote attacker could exploit an infinite loop in the parse function by providing a specially crafted TOML document. This occurs when a value within an array or inline table is followed by a comment without a trailing newline...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow vulnerability in PDF files in Google Chrome prior to version 104.0.5112.79 allowed a remote attacker who convinced a user to perform certain user interactions to potentially exploit heap corruption through a crafted PDF file...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFs in Google Chrome before version 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in PDFium in Google Chrome prior to version 128.0.6613.84 allowed a remote attacker to perform an out-of-bounds memory read through a crafted PDF file. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFs in Google Chrome before version 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFs in Google Chrome before version 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption through a crafted PDF file. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of “after free” in PDFs in Google Chrome before version 149.0.7827.103 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: High...