RazerEoP

RazerEoP Razer Synapse 3 宏模块中任意文件删除/移动的 PoC。 该模块允许用户将创建的宏导出到磁盘上的文件，文件操作由以 nt authority\system 身份运行的 razer 服务完成。 我尝试通过他们的 BB 计划向 razer 报告此问题，得到的回复是这不是一个 bug，而是一个漏洞 🤣。 随后我将其报告给 HackerOne，但由于报告年代久远，该报告被以 Informative 状态关闭。 受影响版本 为 3.7.1209.121307 及以下。 任意删除...

luckystrike

luckystrike Una utilidad basada en PowerShell para la creación de documentos maliciosos de macros de Office. Para ser utilizado únicamente con fines de pentesting o educativos. Primeros pasos 1. Lee esto: http://www.shellntel.com/blog/2016/9/13/luckystrike-a-database-backed-evil-macro-generator. ...

HTB-Mailing-A-Complete-Walkthrough

HTB: Mailing —— 完整通关指南 作者：Mursalin 如果你一直在刷 HackTheBox 靶机，Mailing 就是那种真正能让你学到东西的机器之一。它被评为 Easy 难度，运行在 Windows 上，并且串联了几个真实世界的漏洞——目录遍历、凭据泄露、CVE-2024-21413，以及一个 LibreOffice 宏利用漏洞。让我们一步一步地过一遍。 信息收集 像往常一样，我们先用 nmap 扫描来了解我们要面对的东西： nmap -p- --min-rate 10000 10.10.11.14 nmap -p ports -sCV 10.10.11.14...

cve-2024-21683-rce

cve-2024-21683-rce CVE-2024-21683 是一个严重的远程代码执行（RCE）漏洞，影响 Atlassian 的 Confluence Server 和 Data Center。 该漏洞的 CVSS 得分为 8.3，属于高严重性类别。攻击者可以通过精心构造的恶意 JavaScript 文件，利用此漏洞执行远程代码，无需用户交互。 然而，攻击者需要先登录到 Confluence 系统，并具备足够的权限以添加新的宏语言。 漏洞详情 漏洞类型 ：远程代码执行（RCE） 受影响版本 ：Confluence 5.2 版本及其后所有版本 攻击条件 ： 攻击者必须已经认证为...

CVE-2025-24893

CVE-2025-24893 – XWiki远程代码执行RCE 概述 CVE-2025-24893 是 XWiki （一个广泛使用的开源企业维基平台）中的一个 严重未授权远程代码执行（RCE） 漏洞。 该漏洞存在于 SolrSearch 宏中，该宏错误地处理了嵌入在搜索查询中的 Groovy 表达式。 此漏洞允许 远程、未授权的攻击者 在服务器上执行任意 Groovy 代码，可能导致完全控制受影响的系统。 漏洞详情 CVE ID： CVE-2025-24893 严重性： 严重 CVSS v3.1 评分： 9.8 AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H EP...

Rocky Linux 8 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2025_11030)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202511030 advisory. emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 Tenable has extracted the preceding description block directly from the CIQ security...

Rocky Linux 9 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc (crlsa-2025_3408)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20253408 advisory. libreoffice: Macro URL arbitrary script execution CVE-2025-1080 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note...

Rocky Linux 9 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2025_9448)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20259448 advisory. emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 Tenable has extracted the preceding description block directly from the CIQ security advisor...

Rocky Linux 8 [CIQ] Security Update: autocorr-af / autocorr-bg / autocorr-ca / autocorr-cs / autocorr-da / etc Multiple Vulnerabilities (crlsa-2024_1514)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20241514 advisory. libreoffice: Improper Input Validation leading to arbitrary gstreamer plugin execution CVE-2023-6185 libreoffice: Insufficient macro permission validation...

Rocky Linux 9 [CIQ] Security Update: emacs / emacs-common / emacs-common-debuginfo / emacs-debuginfo / etc (crlsa-2025_4787)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20254787 advisory. emacs: arbitrary code execution via Lisp macro expansion CVE-2024-53920 Tenable has extracted the preceding description block directly from the CIQ security advisor...

CVE-2025-24893

CVE-2025-24893 XWiki 远程代码执行 RCE 漏洞利用 一个针对 CVE-2025-24893 的 Python3 漏洞利用程序，该漏洞是一个影响 XWiki 平台的严重未认证远程代码执行 RCE 漏洞。 该脚本利用了 SolrSearch 宏组件中的代码/表达式注入漏洞 CWE-95。该漏洞允许攻击者在底层操作系统上执行任意 Groovy/Java 代码。漏洞利用程序会自动进行 Base64 编码，以规避 Java 的 Runtime.getRuntime.exec 函数的命令解释限制。 📊 漏洞详情 CVE ID: CVE-2025-24893 CVSS 评分： 9...

7-Zip-CVE-2025-0411-POC

🦀 Rust 宏 无后坐力 image Download 🚀 概述 「Rust 宏 无后坐力」提供了一款无缝体验，用于减少 Rust 游戏中的武器后坐力。该工具利用高效的脚本和定制宏，让玩家在游戏中获得更出色的控制力和精准度。它专为可靠性而优化，更新迅速，并充分考虑了用户安全。通过可调节的灵敏度、可自定义的按键绑定以及武器类型的自动切换检测，提升您的游戏内表现！ 🖥️ 操作系统兼容性表 🖥️ 操作系统| 🏁 支持状态| 🔑 安装说明 ---|---|--- Windows 10 / 11| ⚡ 完全支持| 简易安装指南 macOS Intel/ARM| 🛠️ 实验性| 需要 Rosetta...

Linux Distros Unpatched Vulnerability : CVE-2026-101281

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file...

CVE-2019-15053

CVE-2019-15053 FAB-2019-00156 由我发现的漏洞 CVE-2019-15053 公告：advisory.txt 基本信息 Advisory ID..........: FAB-2019-00156 Product..............: HTML Include and replace macro Manufacturer.........: The Plugin People Affected Versions..: 1.4.2 and before Tested Versions....: 1.4.2 Vulnerability Type...:...

CVE-2026-101281

A flaw was found in OpenDMARC. The Sender Policy Framework SPF macro handling logic improperly validates the sender domain during message processing. A remote attacker can exploit this vulnerability by sending specially crafted email messages, potentially bypassing email authentication checks...

DEBIAN-CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

UBUNTU-CVE-2026-101281

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

CVE-2026-101281 Trusted Domain Project OpenDMARC SPF Macro opendmarc_spf.c opendmarc_sp2_find_mailfrom_domain improper authentication

A flaw has been found in Trusted Domain Project OpenDMARC up to 1.4.2. Affected by this vulnerability is the function opendmarcsp2findmailfromdomain of the file libopendmarc/opendmarcspf.c of the component SPF Macro Handler. This manipulation causes improper authentication. The attack is possible...

CVE-2026-101281

A flaw in Trusted Domain Project OpenDMARC (up to version 1.4.2) affects the SPF Macro Handler component. Specifically, the function opendmarc_sp2_find_mailfrom_domain within the file libopendmarc/opendmarc_spf.c can be manipulated to cause improper authentication . This vulnerability is exploita...