146762 matches found
Exploit for Deserialization of Untrusted Data in Microsoft
🎉 CVE-2025-59287 - Simple Tool for Managing Vulnerabilities...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
CVE-2026-21509 — Educational Dummy PoC for Defender Visibility...
“The bugs pick you”: Inside Wouter’s security research journey
If you ask Wouter when his security journey began, he’ll take you back to a childhood in the Netherlands, tinkering with the 8086 PC his parents brought home when he was five or six. That early curiosity, fueled by racing games, trial-and-error exploration, and a tendency to pull things apart jus...
January 29, 2026-KB5074831 Cumulative Update Preview for .NET Framework 3.5 and 4.8.1 for Windows 11, version 24H2
None None...
Security Updates for Microsoft Office Products (CVE-2026-21509)
The Microsoft Office Products are missing security updates. It is, therefore, affected by a security feature bypass vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...
ROS-20260129-73-0061
A vulnerability in the V8 JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to an operation exceeding buffer boundaries in memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted HTML...
Exploit for Reliance on Untrusted Inputs in a Security Decision in Microsoft
CVE-2026-21509-PoC Educational PoC for CVE‑2026‑21509...
Malicious Package
Overview microsoft.applicationinsights.persistencechannel is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that...
Exploit for Server-Side Request Forgery in Microsoft
CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-C...
PT-2026-5123
Microsoft has issued an emergency patch for a zero-day vulnerability CVE-2021-21509 in Office, allowing attackers to bypass OLE mitigations and execute malware. CISA has included the flaw in their KEV catalog. Microsoft Office SecurityPatch ZeroDayVulnerability https://t.co/WMeToNOuIK...
CVE-2026-21509
Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a security feature locally...
ClickFix Attacks Expand Using Fake CAPTCHAs, Microsoft Scripts, and Trusted Web Services
Cybersecurity researchers have disclosed details of a new campaign that combines ClickFix-style fake CAPTCHAs with a signed Microsoft Application Virtualization App-V script to distribute an information stealer called Amatera. "Instead of launching PowerShell directly, the attacker uses this scri...
Exploit for CVE-2026-21509
🛡️ CVE-2026-21509 — Microsoft Office Zero-Day !OFFICEhttps...
Exploit for Server-Side Request Forgery in Microsoft
CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Micr...
Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active Exploitation
Microsoft on Monday issued out-of-band security patches for a high-severity Microsoft Office zero-day vulnerability exploited in attacks. The vulnerability, tracked as CVE-2026-21509 , carries a CVSS score of 7.8 out of 10.0. It has been described as a security feature bypass in Microsoft Office...
Exploit for CVE-2026-21509
🛡️ CVE-2026-21509 — Microsoft Office Zero-Day !OFFICEhttps...
ZeroDay vulnerability fixed in Microsoft Office
Microsoft has fixed a ZeroDay vulnerability in Microsoft Office. The vulnerability is in the way Microsoft Office handles untrusted input, which allows attackers to bypass security features locally. This can affect the integrity of security decisions made by the software. The reliance on untruste...
Fake Microsoft Teams Billing Phishing Alerts Reach 6,135 Users via 12,866 Emails
Scammers are abusing Microsoft Teams invitations to send fake billing notices, with 12,866 emails reaching around 6,135 users in a phone-based phishing campaign...
