vba2clr

TLDR: VBA から AccessVBOM（Visual Basic プロジェクトへのプログラムによるアクセスが信頼されていない）を回避した後、AppDomain.ExecuteAssembly またはその他の便利なメソッドを使用して、CLR（.NET）アセンブリをローカルおよびリモートで VBA に読み込むさまざまな方法を試しているだけです。 vba2clr..vba: AccessVBOM レジストリキーを 1 に設定します。 Word.Application COMオブジェクトをインスタンス化します。（Excel.Application、MS PowerPoint、Access...

CVE-2025-24893-Reverse-Shell

CVE-2025-24893 - XWiki 원격 코드 실행 익스플로잇 CVE-2025-24893 PoC – XWiki 매크로 원격 코드 실행 Artemir의 원본 PoC에서 영감을 받음 설명 이것은 취약한 버전의 XWiki 에서 원격 코드 실행RCE 취약점인 CVE-2025-24893 에 대한 개념 증명PoC 익스플로잇입니다. 이 결함은 SolrSearch 엔드포인트 내에서 사용자 입력의 부적절한 삭제sanitization에 있으며, RSS 피드 쿼리를 통해 샌드박스되지 않은 매크로 주입에 취약합니다. 이 스크립트는 async...

OESA-2026-3928 rpm security update

The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

xwiki-cve-2025-24893

XWiki SolrSearch の認証不要 RCE CVE-2025-24893 貢献者 ホワイトハットスクール4期25クラス イム・ドゥヨン@endusdksla 概要 XWikiはウィキ構文とマクロをサーバー側で解釈してレンダリングします。問題は、Main.SolrSearchページがゲストに公開されているにもかかわらず、ユーザー入力であるtextパラメータを十分な検証なしにXWiki構文として評価することです。...

CVE-2020-10131

CVE-2020-10131 - CVE-2020-10131 - SearchBlox 製品 V-9.2.1 以前は CSV マクロインジェクションに対して脆弱です。 製品説明: SearchBlox は、複雑な組織向けのエンタープライズ検索を簡素化します。SearchBlox の直感的でインテリジェントなツールは、すぐに使えるセットアップ、安全な暗号化、低い総所有コストを提供します。AI を活用したソリューションは、検索ジャーニーの各ステップを最適化し、エンゲージメントを劇的に向上させます。SearchBlox は、金融サービス、ヘルスケア、政府のリーダーにとって簡単な選択です。 説...

OESA-2026-3862 rpm security update

The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

OESA-2026-3861 rpm security update

The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

OESA-2026-3863 rpm security update

The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

OESA-2026-3860 rpm security update

The RPM Package Manager RPM is a powerful package management system capability as below Security Fixes: A flaw was found in rpmbuild. When rpmbuild processes a crafted tarball in tarball mode, a specially designed tar member name can lead to macro injection. This vulnerability allows a remote...

BIT-GRAFANA-2026-19475 SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

SUSE CVE-2026-19475

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-19475

An authenticated user with permission to query a SQL datasource Microsoft SQL Server, PostgreSQL, or MySQL could bypass the fix for CVE-2026-33375 by injecting the $timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing fails to reject. Evaluating the injected macro...

Linux Distros Unpatched Vulnerability : CVE-2026-19475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause,...

CVE-2026-19475

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-19475 SQL Data Source Plugin: OOM DoS via $__timeGroup macro

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

CVE-2026-19475

Grafana is vulnerable to a denial of service via a bypass of the fix for CVE-2026-33375 . An authenticated user with permission to query a SQL data source can inject the timeGroup macro through a WHERE clause , which Grafana's regex-based macro parsing does not reject. Evaluating the injected mac...

EUVD-2026-70104

An authenticated user with permission to query a SQL data source can bypass the fix for CVE-2026-33375 by injecting the timeGroup macro through a WHERE clause, which Grafana's regex-based macro parsing does not reject. Evaluating the injected macro causes uncontrolled memory consumption that can...

SUSE CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367

A vulnerability was found in RPM's rpmbuild tarball processing. When processing a crafted source archive, the getTarSpec function in tools/rpmbuild.cc passes an attacker-controlled tar archive member name to rpmExpand as part of a %basename:... macro expression. A specially crafted .spec member...

CVE-2026-78367

A macro injection vulnerability in RPM's rpmbuild tarball processing mode allows a remote attacker to achieve arbitrary code execution . The root cause is in the getTarSpec() function (tools/rpmbuild.cc), which passes an attacker-controlled tar member name to rpmExpand() within a %{basename:...} ...