94 matches found
gollina
$ gollina -h gollina Follina MS-MSDT 0-day MS Office RCE PoC in Go -- @dwisiswant0 Usage: gollina -c COMMAND OPTIONS... Options: -h, --host Listener host default: 0.0.0.0 -p, --port Listener port default: 8090 -n, --name Word file name w/o extension, default: gollina -c, --command Arbitrary comma...
detect_CVE-2026-21509
Detecciones para la vulnerabilidad CVE-2026-21509 en MS Office Este repositorio contiene una regla YARA para detectar documentos RTF con una posible explotación de CVE-2026-21509, y un script de Python para comprobar si los archivos de MS Office contienen objetos OLE Shell.Explorer.1, que están...
EvilClippy
该工具在我们于BlackHat Asia大会（2019年3月28日）上的演讲中发布。该演讲的视频录像可在 https://www.youtube.com/watch?v=9ULzZA70Dzg 获取。 Evil Clippy 一款跨平台助手，用于创建恶意的MS Office文档。可以隐藏VBA宏、篡改VBA代码（通过P-code）并干扰宏分析工具。支持Linux、OSX和Windows。 如果你是初次接触该工具，建议先阅读我们关于Evil Clippy的博客文章：...
CVE-2017-11882
CVE-2017-11882 43b 原脚本来自于 https://github.com/embedi/CVE-2017-11882 109b 原脚本来自于 https://github.com/unamer/CVE-2017-11882/ （膜一波，现在unamer的代码已经可以执行shellcode了） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-118...
CVE-2017-11882-
CVE-2017-11882 43b 原脚本来自于 https://github.com/embedi/CVE-2017-11882 109b 原脚本来自于 https://github.com/unamer/CVE-2017-11882/ （膜一波，现在unamer的代码已经可以执行shellcode了） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-118...
CVE-2017-11882
CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 研究: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about 补丁分析:...
CVE-2017-11882
CVE-2017-11882 43b 原脚本来自于 https://github.com/embedi/CVE-2017-11882 109b 原脚本来自于 https://github.com/unamer/CVE-2017-11882/ （膜一波，现在unamer的代码已经可以执行shellcode了） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-118...
CVE-2023-36884-MS-Office-HTML-RCE
CVE-2023-36884: RCE en MS Office HTML con documentos manipulados El 11 de julio de 2023, Microsoft publicó un parche destinado a abordar múltiples vulnerabilidades de ejecución remota de código RCE explotadas activamente. Esta acción también sacó a la luz una campaña de phishing orquestada por un...
CVE-2018-0802_CVE-2017-11882
RTF118820802 CVE-2017-11882 CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11882 MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-11882 Investigación: https://embedi.com/blog/skeleton-closet-ms-office-vulnerability-you-didnt-know-about Análisis d...
CVE-2017-11882
CVE-2017-11882 43b 原脚本来自于 https://github.com/embedi/CVE-2017-11882 109b 原脚本来自于 https://github.com/unamer/CVE-2017-11882/ （膜一波，现在unamer的代码已经可以执行shellcode了） CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE CVE-2017-11882: https://vulners.com/cve/CVE-2017-118...
macro_pack
macropack Short description Warning: MacroPack is not maintained since 2021, if you are a pro and need Offensive infosec tools for initial access, assume breach, EDR bypass, check https://www.balliskit.com MacroPack Community is a tool used to automatize obfuscation and generation of retro format...
macro_pack
macropack 简短描述 警告：MacroPack自2021年起不再维护，如果您是专业人士，需要用于初始访问、假设入侵、EDR绕过等进攻性信息安全工具，请查看https://www.balliskit.com MacroPack Community 是一款用于自动化混淆和生成旧格式（如MS Office文档或VBS类格式）的工具。它还处理各种快捷方式格式。该工具可用于红队演练、渗透测试、演示和社会工程评估。MacroPack将简化反恶意软件解决方案的绕过，并自动化从VB源码到最终Office文档或其他载荷类型的过程。使用非常简单： 无需配置 一切都可以通过单行代码完成...
EUVD-2020-21916
Malware in sbrugna...
CVE-2020-29550
An issue was discovered in URVE Build 24.03.2020. The password of an integration user account used for the connection of the MS Office 365 Integration Service is stored in cleartext in configuration files as well as in the database. The following files contain the password in cleartext:...
SmokeLoader Malware Exploits MS Office Flaws to Steal Browser Credentials
SmokeLoader malware has resurfaced with enhanced capabilities and functionalities, targeting your personal data...
Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine
A new sophisticated cyber attack has been observed targeting endpoints geolocated to Ukraine with an aim to deploy Cobalt Strike and seize control of the compromised hosts. The attack chain, per Fortinet FortiGuard Labs, involves a Microsoft Excel file that carries an embedded VBA macro to initia...
PHPJabbers Car Rental 3.0 CSV Injection
Exploit Title: PHPJabbers Car Rental v3.0 - CSV Injection Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/car-rental-script/ Version: v3.0 Tested on: Windows 10, Windows 11, MS Offi...
PHPJabbers Shuttle Booking Software 2.0 CSV Injection
Exploit Title: PHPJabbers Shuttle Booking Software v2.0 - CSV Injection Date: 19/11/2023 Exploit Author: BugsBD Limited Discover by: Rahad Chowdhury Vendor Homepage: https://www.phpjabbers.com/ Software Link: https://www.phpjabbers.com/shuttle-booking-software/ Version: v2.0 Tested on: Windows 10...
[SECURITY] [DLA 3426-3] netatalk regression update
Debian LTS Advisory DLA-3426-3 [email protected] https://www.debian.org/lts/security/ Markus Koschany August 13, 2023 https://wiki.debian.org/LTS Package : netatalk Version : 3.1.12ds-3+deb10u3 CVE ID : CVE-2022-23123 Debian Bug : 1043504 Another regression was identified in Netatalk, t...
