CVE-2017-11882-

CVE-2017-11882 43b 元のスクリプトは https://github.com/embedi/CVE-2017-11882 から 109b 元のスクリプトは https://github.com/unamer/CVE-2017-11882/ から （感嘆符、今やunamerのコードはシェルコードを実行できるようになりました〜） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

CVE-2017-11882

CVE-2017-11882 43b 元のスクリプトは次から入手しました: https://github.com/embedi/CVE-2017-11882 109b 元のスクリプトは次から入手しました: https://github.com/unamer/CVE-2017-11882/ （敬意を表して、今やunamerのコードはシェルコードを実行できるようになりました〜） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

backdoorppt

backdoorppt - 'Office spoof extensions tool' Version release: v1.7-Stable Author: pedro ubuntu r00t-3xp10it Distros Supported: Linux Kali, Ubuntu, Mint Suspicious-Shell-Activity© SSA RedTeam develop @2017 Transform your payload.exe into one fake word doc .ppt Simple script that allow users to add...

Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled Java or PHP source outside a generated documentation comment. The affected sanitizers remove comment terminators rather than neutralizing them, allowing a terminator to reform from...

GHSA-RM89-RHWJ-9J92 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Impact An attacker who controls or tampers with an OpenAPI description can cause Kiota to emit attacker-controlled Java or PHP source outside a generated documentation comment. The affected sanitizers remove comment terminators rather than neutralizing them, allowing a terminator to reform from...

CVE-2026-105796 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place attacker-controlled OpenAPI text...

CVE-2026-105796

The Kiota OpenAPI-based HTTP Client code generator is vulnerable to code injection in versions 0.5.0 through 1.35.0 for both Java and PHP generators. The root cause is a flaw in the documentation-comment sanitizers that delete block-comment terminators instead of neutralizing them. This allows ov...

CVE-2026-105796 Kiota: Code injection through doc-comment delimiter reformation in Kiota Java and PHP generators

Kiota is an OpenAPI based HTTP Client code generator. From 0.5.0 until 1.35.0, Kiota's Java and PHP documentation-comment sanitizers delete block-comment terminators rather than neutralizing them, allowing overlapping characters to reform a terminator and place attacker-controlled OpenAPI text...

CVE-2017-11882-exp

CVE-2017-11882 43b 元のスクリプトは https://github.com/embedi/CVE-2017-11882 から 109b 元のスクリプトは https://github.com/unamer/CVE-2017-11882/ から（敬意を表します。現在unamerのコードはshellcodeを実行できるようになりました〜） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

UBUNTU-CVE-2019-25777

YAML versions before 1.27001 for Perl allow a loaded perl/glob document to replace any package variable, which can lead to arbitrary code execution. A perl/glob document names a package and a symbol, and supplies the value assigned to it. Nothing restricts the name, so the target can be @INC or...

Maldoc-Analysis

Maldoc-Analysis 2023年3月、新たなマルウェアとして特定されたサンプルが確認されました。そのマルウェアは拡張子.xlsおよび.docのファイルに由来し、「Bank Slip.xls」という名前で知られています。そのマルウェアの活動は、CVE-2017-11882およびCVE-2018-0802として知られる脆弱性に関連しています。...

CVE-2026-30691

CVE-2026-30691 - 脆弱性勧告 公式MITRE脆弱性レコード詳細およびCVE-2026-30691の技術ドキュメント -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Suggested description Cross-Site Scripting XSS vulnerability in @cyntler/react-doc-viewer v1.17.1 allows remote attackers to execute arbitrary JavaScript via a crafted .txt file. The...

CVE-2017-11882

CVE-2017-11882 43b 元スクリプトは https://github.com/embedi/CVE-2017-11882 から 109b 元スクリプトは https://github.com/unamer/CVE-2017-11882/ から（敬意を表します。今やunamerのコードはshellcodeを実行できます〜） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882:...

Exploit-Win32.CVE-2012-0158.F.doc

Exploit-Win32.CVE-2012-0158.F.doc ウイルスの名前はMicrosoft Defenderの検出名であり、一般的なアンチウイルスです。...

CVE-1999-0678

CVE-1999-0678: 検出と修復プロジェクト 著者: Pham Huu Minh 日付: 2025年12月 プロジェクト概要 このプロジェクトは、Apache Web Server上のレガシーな ディレクトリトラバーサル脆弱性 CVE-1999-0678 を対象とした、脆弱性評価の完全なライフサイクルを示します。目標は、攻撃をシミュレートし、IDSで検出し、セキュリティホールを恒久的に修正することでした。 技術スタック 攻撃者: Kali Linux Curl, Firefox, GVM 被害者: Ubuntu Server Apache2, Snort IDS ツール:...

[SECURITY] Fedora 45 Update: gnome-doc-utils-0.20.10-48.fc45

gnome-doc-utils is a collection of documentation utilities for the GNOME project. Notably, it contains utilities for building documentation and all auxiliary files in your source tree...

Rocky Linux 9.6 [CIQ] Security Update: libevent / libevent-devel / libevent-doc Multiple Vulnerabilities (ciqsa-2026_1554)

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20261554 advisory. This advisory aggregates security fixes for the libevent SRPM in CIQ LTS 9.6. It addresses 6 CVEs: CVE-2026-63382, CVE-2026-63383, CVE-2026-63384,...

AlmaLinux 9.2 [TuxCare] Security Update: redis / redis-devel / redis-doc (ALMALINUX9.2:CLSA-2025:1760107506)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1760107506 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL...

Rocky Linux 9.2 [CIQ] Security Update: git / git-all / git-core / git-core-debuginfo / git-core-doc / etc Multiple Vulnerabilities (ciqsa-2026_0420)

The Rocky Linux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260420 advisory. This advisory aggregates security fixes for the git SRPM in CIQ LTS 9.2. It addresses 2 CVEs: CVE-2025-48384, CVE-2025-48385. Tenable has extracted the...

CentOS Linux 7.9 [CIQ] Security Update: lemon / sqlite / sqlite-devel / sqlite-doc / sqlite-tcl (ciqsa-2026_0689)

The CentOS Linux 7.9 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260689 advisory. This advisory aggregates security fixes for the sqlite SRPM in CIQ CentOS Bridge 7.9. It addresses 1 CVE: CVE-2019-5827. Tenable has extracted the preceding...