CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Reproducción de vulnerabilidad de Office Resumen de la vulnerabilidad El 8 de septiembre, hora de Beijing, el CERT de NSFOCUS monitoreó un comunicado de seguridad de Microsoft que revelaba la vulnerabilidad de ejecución remota de código en Microsoft MSHTML. Los atacantes...

halogen

Halogen is a tool to automate the creation of yara rules based on the image files embedded within a malicious document. This can assist cyber security professionals in writing detection rules for malicious threats as well as help responders in identifying with particular threat they are dealing...

halogen

Halogen是一个自动化工具，用于根据恶意文档中嵌入的图像文件创建yara规则。它可以帮助网络安全专业人员编写针对恶意威胁的检测规则，并帮助响应者识别他们正在处理的特定威胁。目前，Halogen能够基于JPG和PNG文件创建规则。 Halogen help python3 halogen.py -h usage: halogen.py -h -f FILE -d DIR -n NAME --png-idat --jpg-sos --jpg-sof2sos --jpg-jump -c CONTAINER --clam --rprefix RPREFIX Halogen:...

CVE-2026-34621

Análisis del Zero-Day de Adobe Acrobat Notas de ingeniería inversa y material de apoyo para un análisis del modelo de confianza de JavaScript en Adobe Acrobat y su relación con la vía de abuso de zero-day reportada que involucra APIs privilegiadas de Acrobat. Descripción General Este repositorio...

Rocky Linux 8 [CIQ] Security Update: libreoffice-calc-debuginfo / libreoffice-core-debuginfo / etc (crlsa-2026_28922)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202628922 advisory. LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents CVE-2026-4430 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 8 [CIQ] Security Update: poppler / poppler-cpp / poppler-cpp-debuginfo / poppler-cpp-devel / etc (crlsa-2024_5305)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20245305 advisory. poppler: pdfinfo: crash in broken documents when using -dests parameter CVE-2024-6239 Tenable has extracted the preceding description block directly from the CIQ...

Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2026_28290)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202628290 advisory. LibreOffice: LibreOffice: Denial of Service via crafted OOXML documents CVE-2026-4430 Tenable has extracted the preceding description block directly from the CIQ...

RTF-Cleaner

RTF-Cleaner Deofuscador de RTF para documentos CVE-2017-0199 para encontrar URLs estáticamente. Use esta herramienta para encontrar URLs estáticamente en documentos RTF ofuscados. Uso: .\rtfCleanerUniversal.ps1 ruta-al-archivo Ejemplo: .\rtfCleanerUniversal.ps1...

Office-Malware-Forensics-Lab-REMnux-Static-Analysis

Office Malware Forensics Lab — REMnux Static Analysis Static analysis of two malicious Office files, done entirely inside an isolated REMnux VM. Nothing was ever executed — just inspected. Setup REMnux VM, no shared folders with the host Tools: sha256sum, file, unzip, and the oletools suite oleid...

CVE-2022-30190

Explotación de Follina CVE-2022-30190 Follina CVE-2022-30190 es una vulnerabilidad crítica de ejecución remota de comandos RCE que afecta a la Herramienta de diagnóstico de soporte de Microsoft MSDT. Esta falla fue descubierta originalmente a través de un archivo malicioso detectado en VirusTotal...

KidnapRAG

KidnapRAG: Un Ataque de Caja Negra para Secuestrar el Razonamiento en Sistemas de Generación Aumentada por Recuperación RAG Basados en Agentes 🎓 Paper | 📄 Datasets | 🚀 Inicio Rápido Inicio Rápido Ejecute los siguientes comandos desde el directorio padre del repositorio clonado KidnapRAG. cd...

CamoDocs

CamoDocs Repositorio oficial del artículo de EMNLP 2026 CamoDocs: A Poisoning Attack Against Retrieval-Augmented Language Models Using Camouflaged Documents. CamoDocs es un ataque de envenenamiento de bases de conocimiento contra la Generación Aumentada por Recuperación RAG que no requiere...

Follina-CVE-and-CVE-2021-40444

Explotando las vulnerabilidades Follina y CVE-2021-40444 Tabla de contenidos 1. Introducción 2. Requisitos previos 3. Configuración e instalación 4. Uso 5. Explicación detallada 6. Comandos 7. Descargo de responsabilidad Introducción Este repositorio contiene scripts y recursos para explotar las...

CVE-2023-50465

MonicaHQ XSS Exploitation of MonicaHQ XSS Create an account Create a contact In Documents, upload a malicious SVG file alert"Monicahq XSS Poc"; Access the uploaded file...

Publications

Publicaciones Una lista de documentos de investigación publicados...

EUVD-2026-66211

Trestle SSTI in Jinja2 include tags allows arbitrary code execution Incomplete fix of CVE-2026-46439...

CVE-2026-76907

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...

CVE-2026-76907

The LaSuite Doc platform (versions 4.8.2 through 5.4.0) is vulnerable to public document enumeration via the GET /api/v1.0/documents/search/ endpoint. The root cause is that the API accepts sequential seven-digit document paths to scope searches without requiring the public document UUID. An unau...

CVE-2026-76907 LaSuite Doc: Public Documents Enumeration

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...

EUVD-2026-86251

LaSuite Doc is a collaborative note taking, wiki and documentation platform. From 4.8.2 until 5.4.0, GET /api/v1.0/documents/search/ accepts sequential seven-digit document paths to scope descendant searches without requiring the caller to possess the public document UUID. An unauthenticated call...