CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, or commonly referred to as CurveBall, is a vulnerability in which the signature of certificates using elliptic curve cryptography ECC is not correctly verified. ECC relies on different parameters. These parameters are standardized for many curves...

Exchange_IOC_Hunter

ExchangeIOCHunter Description: Hunt for IOCs in IIS Logs - CVE-2021-26855, CVE-2021-26857, CVE-2021-26858, CVE-2021-27065 Artefacts Supported: C2 IP Addresses used for scanning and exploitation File Names observed in exploitation attempts Remote Code Execution RCE Usage: powershell...

PT-2026-104773

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...

PT-2026-104745

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decode ms ima of the file src/coding/ima decoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...

CVE-2026-104808: Improper Neutralization of Input During Web Page Generation

DigitalCanion has discovered a stored Cross-Site Scripting XSS vulnerability that allows an authenticated malicious user to inject persistent JavaScript or HTML content, resulting in a denial-of-service condition within the web application. The specific flaw exists within the web portal listening...

CVE-2026-105250: Divide By Zero

A security vulnerability has been detected in vgmstream up to r2117. Affected is the function decodemsima of the file src/coding/imadecoder.c of the component Microsoft IMA Decoder. Such manipulation leads to divide by zero. The attack can be executed remotely...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina Info : New Microsoft Office zero-day used in attacks to execute PowerShell Summary On the 29th of May 2022, the NaoSec team, an independent Cyber Security Research Team, discovered a malicious Office document shared on Virustotal. This...

CVE-2023-21554

MSMQ Vulnerability Proof of Concept This repository contains a ready-to-run proof of concept that targets Microsoft Message Queuing listening on TCP port 1801. This work is based on and uses materials from the original project at https://github.com/leongxudong/MSMQ-Vulnerability This repository...

CVE-2023-23397

CVE-2023-23397 Exploitation & Mitigation Demo 📌 Overview This project demonstrates the detection, exploitation, and mitigation of CVE-2023-23397 , a critical zero-click NTLM relay vulnerability in Microsoft Outlook for Windows. Exploited via calendar invites, this vulnerability allows attackers t...

ExchangeSmash

proxylogon my exploit for the proxylogon chain Microsoft Exchange Server - CVE-2021-26855 Run: the exploit uses Impacket package, to install it run this: user@host:$ python3 -m pip install impacket then clone the exploit repo, and enter the exploit directory: user@host:$ git clone...

CVE-2017-0261

CVE-2017-0261 and Exploit Sample Analysis 0x01 Vulnerability Description Cause: When opening an Office document, FLTLDR.EXE is used to render an embedded EPS file containing the vulnerability. The file is written in PostScript language and can be exploited by an attacker through a "save-restore"...

CVE-2023-21554-PoC

CVE-2023-21554 — QueueJumper PoC Доказательство концепции для CVE-2023-21554 , также известной как QueueJumper , затрагивающей Microsoft Message Queuing MSMQ. PoC реализует взаимодействие по протоколу MSMQ/SRMP, связанное с уязвимостью, и может использоваться для исследования поведения службы MSM...

CVE-2022-30190

CVE-2022-30190 Follina Educational Malware Development, Exploitation, Analysis and Mitigation A fully documented proof-of-concept demonstrating the Follina vulnerability - from social engineering delivery through to exploitation, forensic analysis, and patch development. ⚠️ Educational Use Only...

cve-2021-26855

cve-2021-26855 GET /ecp/x.png HTTP/1.1 Host: 192.168.170.134 Cookie: X-BEResource=localhost1942062522 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:109.0 Gecko/20100101 Firefox/110.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8...

CVE-2023-23396

CVE-2023-23396 Here you can download the exploit. Here you can read my report. Here you can buy me a unicorn 🦄 PS At the time of writing 2023-04-07 the client version of Microsoft Excel is still vulnerable here's more information. Share the Knowledge!...

CVE-2025-53786

Exploit CVE-2025-53786 Ce projet fournit une preuve de concept PoC exploitant une vulnérabilité critique dans les déploiements hybrides de Microsoft Exchange Server, identifiée sous le nom CVE-2025-53786. Cette vulnérabilité permet à un attaquant disposant d'un accès administrateur à un serveur...

follina.py

Уязвимость «Follina» MS-MSDT n-day в Microsoft Office RCE Быстрый POC для воспроизведения уязвимости «Follina» Office RCE в целях локального тестирования. Запуск скрипта создаст файл полезной нагрузки clickme.docx или clickme.rtf в вашем текущем рабочем каталоге и запустит веб-сервер с файлом...

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot Field| Details...

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Detection rules for CVE-2025-53770 alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...

CVE-2023-23397-Report

CVE-2023-23397-Report An exploitation demo of Outlook Elevation of Privilege Vulnerability CVE-2023-23397 is a critical EoP vulnerability in Microsoft Outlook that is triggered when an attacker sends a message with an extended MAPI property with a UNC path to an SMB TCP 445 share on a threat...