CVE-2024-29988-exploit

CVE-2024-29988-exploit 微软 SmartScreen 恶意执行的漏洞利用程序（2024 年 4 月） 描述 在微软 2024 年 4 月的 Patch Tuesday 更新中发现了一个关键漏洞 CVE-2024-29988。 该漏洞允许威胁行为者绕过微软的 Mark of the Web（MotW）功能，从而执行任意代码。 Trend Micro 零日计划（ZDI）的高级威胁研究员 Peter Girnus 观察到攻击者在野外利用此漏洞。 Microsoft SmartScreen 提示包含一个安全功能绕过漏洞，允许攻击者绕过 Mark of the...

CVE-2023-36003

CVE-2023-36003：Windows Defender 利用保护绕过 PoC 本仓库包含 CVE-2023-36003 的概念验证（PoC），这是一个影响 Windows Defender 利用保护的关键安全功能绕过漏洞。 概述 CVE-2023-36003 是 Windows Defender 中的一个漏洞，允许攻击者绕过旨在防止漏洞执行的缓解功能。成功利用后，恶意软件或恶意代码可规避标准的利用保护机制，从而增加系统被成功入侵的风险。 漏洞类型： 安全功能绕过 受影响组件： Windows Defender / 利用保护 发现/记录日期： 2023 年 11 月（微软补丁星期二...

-EXPLOIT-CVE-2023-36025

EXPLOIT CVE-2023-36025 - 描述 Windows SmartScreen 安全功能绕过漏洞 使用 注意：handler 正在等待目标的 tcp 请求 附注：配置 CVE-2023-36025.vbs 文件，将 ip 和 port 改为机器正在用于 TCP handler 的 IP 和端口 配置反向 TCP handler msfconsole use exploit/multi/handler set payload windows/shellreversetcp set LHOST set LPORT run...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office 安全功能绕过 CVE-2026-21509 是一个 Microsoft Office 安全功能绕过漏洞 CVSS 7.8 ，被 APT28（俄罗斯黑客组织） 积极利用攻击乌克兰 安全决策中依赖不可信输入（CWE-807 ）——"破坏 kill bit" 允许通过恶意文档绕过受保护视图 和OLE 缓解措施 影响 Office 2016、2019、2021、2024、Microsoft 365 应用 2026年1月 发布紧急带外补丁 概述 CVE-2026-21509 是 Microsoft Office...

cve-2026-21509-mitigation

Script de Mitigación CVE-2026-21509 Versión en chino tradicional: READMEzh-TW.md Descripción general Este script aplica una mitigación basada en el registro para proteger contra CVE-2026-21509 vulnerabilidad de omisión de la característica de seguridad de Microsoft Office, que ha sido explotada...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Vulnerabilidad de Día Cero en Microsoft Office Estado: Explotada activamente → Parche de emergencia publicado Gravedad: 🔴 Alta Tipo de Riesgo: Omisión de Funciones de Seguridad 🔍 ¿Qué es? CVE-2026-21509 es una vulnerabilidad grave en Microsoft Office que permite a los atacantes...

CVE-2026-21509-PoC

CVE-2026-21509 — PoC Educativo Simulado para Visibilidad de Defensores ⚠️ Este repositorio proporciona una Prueba de Concepto inofensiva y no explotable. Su propósito es apoyar la investigación defensiva , las pruebas de visibilidad de EDR/AV y la formación. No explota CVE‑2026‑21509 y contiene...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 - Vulnerabilidad de Omisión de la Característica de Seguridad del Shell de Windows Sugerencia de Título del Repositorio: CVE-2026-21510-Windows-Shell-Bypass-Analysis Este README proporciona una visión general completa de CVE-2026-21510 , una vulnerabilidad de día cero de alta...

firewall-cve

firewall-cve Vulnerabilidad de omisión de la función de seguridad de las reglas de firewall de AppContainer de Windows CVE-2021-41338 Vulnerabilidad de seguridad publicada: 12 de octubre de 2021 CNA asignado: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Vector de ataque Local Complejidad de...

BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints

A security flaw has been discovered in BerriAI litellm up to 1.82.5. Affected is the function asyncprecallhook of the file enterprise/enterprisehooks/bannedkeywords.py of the component Completions Interface. The manipulation of the argument prompt results in incorrect authorization. The attack ma...

CVE-2026-21509

CVE-2026-21509 — Microsoft Office OLE 安全功能绕过 由 Sentinel AI Defense 撰写的研究报告。仅限防御性分析——对于这一已被积极利用的漏洞， 此处不发布任何可用的利用代码或 PoC。 Microsoft Office 中的一项安全功能绕过漏洞，允许特制文档加载本应被 OLE 缓解措施阻止的 COM 组件。 该漏洞已被 APT28 UAC-0001 针对乌克兰和东欧目标积极利用。 📄 完整报告：https://sentinelaidefense.com/posts/cve-2026-21509-ole-bypass 概述...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_54550)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654550 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 10.0 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2025_18152)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202518152 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial ...

Rocky Linux 8 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_54542)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654542 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 10.2 [CIQ] Security Update: curl / curl-debuginfo / curl-debugsource / libcurl / etc Multiple Vulnerabilities (crlsa-2026_69125)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202669125 advisory. libcurl: libcurl: Security feature bypass due to improper mTLS connection reuse CVE-2026-8932 curl: curl: Information disclosure via incorrect .netrc...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_54541)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654541 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-10.0 / aspnetcore-runtime-dbg-10.0 / etc Multiple Vulnerabilities (crlsa-2026_55857)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202655857 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 10.2 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2026_54590)

The Rocky Linux 10.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654590 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET...

Rocky Linux 9 [CIQ] Security Update: aspnetcore-runtime-8.0 / aspnetcore-runtime-dbg-8.0 / etc Multiple Vulnerabilities (crlsa-2026_54574)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202654574 advisory. .NET: .NET Core: .NET Security Feature Bypass Vulnerability CVE-2026-62899 .NET: .NET Information Disclosure Vulnerability CVE-2026-62900 .NET: .NET Denia...

Rocky Linux 10.0 [CIQ] Security Update: aspnetcore-runtime-9.0 / aspnetcore-runtime-dbg-9.0 / etc Multiple Vulnerabilities (crlsa-2025_18153)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202518153 advisory. dotnet: .NET Information Disclosure Vulnerability CVE-2025-55248 dotnet: .NET Security Feature Bypass Vulnerability CVE-2025-55315 dotnet: .NET Denial ...