159328 matches found
EUVD-2026-92421
URLs could be constructed which expanded environment variable or INI file values, so potentially sensitive information could be exfiltrated to a remote server on opening a document containing such links. The check added for CVE-2024-12426 did not cover every place a document can supply a URL...
CVE-2026-69836-EXP
CVE-2026-69836 Entra ID: Prueba de Concepto de RCE No Autenticado Resumen CVE-2026-69836 es una vulnerabilidad crítica de ejecución remota de código no autenticada en Microsoft Entra ID debida a la deserialización inadecuada de datos no confiables CWE-502. La falla permite a los atacantes ejecuta...
CVE-2026-104808
DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...
CVE-2026-104808 Mitel MiVoice Office 400 stored Cross-Site Scripting
DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...
EUVD-2026-92298
DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...
CVE-2026-105250
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...
OneDrive-UDC2
OneDrive UDC2 Un canal C2 definido por el usuario de Cobalt Strike que utiliza OneDrive como capa de transporte. Lo que necesitas Un inquilino de Microsoft Entra ID con un usuario que tenga OneDrive for Business. Un registro de aplicación con el permiso de aplicación Files.ReadWrite.All...
CVE-2021-40444-exp
CVE-2021-40444 PoC Generador de documentos docx maliciosos para explotar CVE-2021-40444 Ejecución remota de código en Microsoft Office Word La creación de este script se basa en ingeniería inversa sobre la muestra utilizada en ataques reales:...
CVE-2026-25250
🕷️ CVE-2026-25250: Validación Incorrecta de la Cadena de Carga de Arranque Confiable Un cargador de arranque de terceros firmado por Microsoft que carga un binario EFI secundario sin verificación de firma ni integridad, colapsando la cadena de confianza de Secure Boot desde dentro. 📑 Tabla de...
YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune
Este repositorio no tiene un README...
CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...
CVE-2026-105250
A security vulnerability exists in vgmstream up to version r2117 . The flaw is located in the Microsoft IMA Decoder component, specifically within the decode_ms_ima function of the file src/coding/ima_decoder.c . This issue is caused by a divide by zero error, which can be triggered remotely. Det...
CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...
CVE-2026-105250 vgmstream Microsoft IMA Decoder ima_decoder.c decode_ms_ima divide by zero
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...
EUVD-2026-92277
A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...
keysweeper
KEYSWEEPER // SIGINT // SAMY.PL // REL TO ALL // APPLIED HACKING KeySweeper KeySweeper es un dispositivo sigiloso basado en Arduino, camuflado como un cargador USB de pared funcional, que intercepta, descifra, registra y reporta a través de GSM de forma inalámbrica y pasiva todas las pulsaciones ...
CVE-2017-0199-v5.0
Exploit toolkit CVE-2017-0199 - v5.0 El exploit toolkit CVE-2017-0199 - v5.0 es un práctico script de Python que ofrece a pentesters e investigadores de seguridad una forma rápida y eficaz de probar la ejecución remota de código RCE en Microsoft Office. Puede generar un archivo RTF/PPSX malicioso...
CVE-2024-21413
CVE-2024-21413 Este script es la Prueba de Concepto PoC de CVE-2024-21413, una vulnerabilidad de seguridad significativa descubierta en Microsoft Windows Outlook que tiene una fuerte puntuación CVSS crítica de 9.8. Nombrada como el error MonikerLink, esta vulnerabilidad permite al atacante ejecut...
CVE-2023-21716-Analysis-ICT287
CVE-2023-21716 Análisis-ICT287: Ejecución Remota de Código en Microsoft Word Resumen Este repositorio documenta el análisis y la reproducción de CVE-2023-21716, una vulnerabilidad de desbordamiento de búfer basada en heap en el analizador RTF de Microsoft Word con una puntuación CVSS de 9.8...
Vidar-Stealer-Reverse-Engineering
Análisis de Ingeniería Inversa de Vidar Stealer 2.0 Resumen Este análisis cubre una ingeniería inversa en profundidad de Vidar Stealer 2.0 , un sofisticado ladrón de información que utiliza técnicas avanzadas de evasión para pasar desapercibido. Los hallazgos clave incluyen: Manipulación del...