CVE-2019-11932

CVE-2019-11932 system의 주소와 가젯gadget은 정보 공개 취약점으로 알아낸 실제 주소로 교체해야 합니다. system과 가젯의 주소를 교체한 후, 코드를 실행하여 손상된 GIF 파일을 생성하세요: notroot@osboxes:/Desktop/gif$ make ..... ..... ..... notroot@osboxes:/Desktop/gif$ ./exploit exploit.gif buffer = 0x7ffc586cd8b0 size = 266 47 49 46 38 39 61 18 00 0A 00 F2 00 ...

CVE-2018-8174-msf

CVE-2018-8174-msf 이는 CVE-2018-8174 - VBScript 메모리 손상 취약점을 악용하는 악성 Word 문서를 생성하는 Metasploit 모듈입니다. 이 모듈은 매우 빠른 포팅으로, 야생에서 발견된 익스플로잇 샘플을 사용합니다. 이 익스플로잇은 32비트 Microsoft Office에서만 작동합니다. 이 모듈에는 개선해야 할 부분이 많이 있지만, 시간이 나면 향후 업데이트하겠습니다. 설치 1. CVE-2018-8174.rb 파일을...

evince-cve-2017-1000083

이 저장소에는 README가 없습니다...

CVE-2017-11882

CVE-2017-11882 원본 스크립트는 https://github.com/embedi/CVE-2017-11882 에서 가져왔습니다. CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 연구:...

CVE-2018-8174-msf

CVE-2018-8174-msf 이것은 CVE-2018-8174 - VBScript 메모리 손상 취약점을 악용하는 악성 워드 문서를 생성하는 metasploit 모듈입니다. 이 모듈은 매우 빠른 포트이며 실제 현장에서 발견된 익스플로잇 샘플을 사용합니다. 이 익스플로잇은 Microsoft Office 32비트에서만 작동합니다. 이 모듈은 개선해야 할 점이 많지만, 시간이 나면 나중에 업데이트할 예정입니다. 설치 1. CVE-2018-8174.rb를...

WordPress SP Project & Document Manager <4.22 - Authenticated Shell Upload

WordPress SP Project & Document Manager plugin before 4.22 is susceptible to authenticated shell upload. The plugin allows users to upload files; however, the plugin attempts to prevent PHP and other similar executable files from being uploaded via checking the file extension. PHP files can still...

[SECURITY] Fedora 45 Update: xreader-4.6.9-2.fc45

X-Apps Document Reader is a document viewer capable of displaying multiple and single page document formats like PDF and PostScript...

[SECURITY] Fedora 45 Update: atril-1.28.7-2.fc45

Mate-document-viewer is simple document viewer. It can display and print Portable Document Format PDF, PostScript PS, Encapsulated PostScript EPS, DVI, DJVU, epub and XPS files. When supported by the document format, mate-document-viewer allows searching for text, copying text to the clipboard,...

CVE-2019-11932-whatsApp-exploit

CVE-2019-11932-whatsap-exploit system의 주소와 가젯은 정보 유출 취약점을 통해 발견된 실제 주소로 교체되어야 합니다. system과 가젯의 주소를 교체한 후, 손상된 GIF 파일을 생성하기 위해 코드를 실행하세요: 이제 해봅시다 root@mranonymousTZ:/root/Desktop/CVE-2019-11932-whatsap-exploit$ chmod +x build.py root@mranonymousTZ:/root/Desktop/CVE-2019-11932-whatsap-exploit$...

DocPlz

DocPlz 재미와 교육 목적을 위한 문서 탈취Documents Exfiltration 프로젝트 https://github.com/TheD1rkMtr/DocPlz/assets/123980007/8026985e-e285-4a76-a1d7-f4c0fa3ad240...

CVE-2026-59265

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2025-68461

CVE-2025-68461 Roundcube Webmail 1.5.12 이전 버전 및 1.6 1.6.12 이전 버전은 SVG 문서의 animate 태그를 통한 크로스 사이트 스크립팅XSS 취약점에 취약합니다. 이 탐지 방법은 어떻게 작동하나요? 응답의 "rcversion" JSON 필드에서 Roundcube 버전을 추출하여 major.minor.patch 형식으로 파싱한 다음, 버전이 -t template.yaml 또는 호스트 목록을 스캔하려면 다음을 실행합니다: nuclei -l -t template.yaml 예시 출력 참고...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

CVE-2026-59265

Apache OpenOffice v4.1.16 and earlier are vulnerable to a code execution issue within the Java integration . A specially crafted untrusted document can trigger the execution of arbitrary code, including remote code, when opened by a user. To mitigate this risk, users should disable Java runtime i...

CVE-2026-59265 Apache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeover

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

EUVD-2026-91764

A code execution issue in the Java integration in Apache OpenOffice v4.1.16 and earlier allows a crafted untrusted document to trigger executing arbitrary even remote code when opened by the user. This issue is expected to be fixed in version 4.1.17, which is in the release candidate phase. Until...

Belati

Belati Belati - The Traditional Swiss Army Knife For OSINT Belati is tool for Collecting Public Data & Public Document from Website and other service for OSINT purpose. This tools is inspired by Foca and Datasploit for OSINT : Current Version v0.2.4 Belati In Action Why I Made this? Just for...

novahot

novahot novahot is a webshell framework for penetration testers. It implements a JSON-based API that can communicate with trojans written in any language. By default, it ships with trojans written in PHP, ruby, and python. Beyond executing system commands, novahot is able to emulate interactive...

MetaFinder

MetaFinder 검색 엔진을 통해 도메인 내 문서를 검색합니다. 목표는 메타데이터를 추출하는 것입니다. 설치: pip3 install metafinder 업그레이드는 다음 명령어로 가능합니다: pip3 install metafinder --upgrade 사용법 MetaFinder는 2가지 방법으로 사용할 수 있습니다: CLI metafinder -d domain.com -l 20 -o folder -t 10 -go -bi -ba 매개변수: d: 대상 도메인을 지정합니다. l: 각 검색 엔진에서 검색할 최대 결과 수를...

ColumbiaSoft DocumentLocator - Improper Authentication

Instances of ColumbiaSoft's Document Locator prior to version 7.2 SP4 and 2021.1 are vulnerable to an Improper Authentication/SSRF vulnerability. This template identifies vulnerable instances of the ColumbiaSoft Document Locater application by confirming external DNS interaction/lookups by...