CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC A concise Proof-of-Concept showing how CVE-2025-54100 can lead to Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. Table of Contents What is CVE-2025-54100? How the PoC Works Quick Start Triggering From a Victim...

CVE-2021-40444-POC

CVE-2021-40444-POC Un intento de reproducir la vulnerabilidad de ejecución remota de código RCE de Microsoft MSHTML utilizando Metasploit Framework. funciona mejor si no se ejecuta en FlareVM PREPARACIÓN Clona el repositorio desde https://github.com/lockedbyte/CVE-2021-40444 Prepara la plantilla...

CVE-2014-4109

Este crash es difícil de reproducir. El proof of concept incluido facilita un poco desencadenar la ruta de código que provoca el fallo. Mi proceso super científico para verificar el crash era hacer clic en la url con una mano y presionar enter con la otra. Generalmente crashea dentro de 15...

CVE-2014-1773

CClipStack::PushClipRect: indexación de matriz no válida Primero, comenzando con la pila de llamadas del fallo con pageheap habilitado: root@kitploit: ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2...

CVE-2014-4140

Algunas notas aproximadas 0:007 u MSHTML!CHtmRootParseCtx::AddText+0x104: 6efff0a5 8b8e88000000 mov ecx,dword ptr esi+88h 6efff0ab 898d70ffffff mov dword ptr ebp-90h,ecx 6efff0b1 8945ac mov dword ptr ebp-54h,eax 6efff0b4 8b5118 mov edx,dword ptr ecx+18h 6efff0b7 8bca mov ecx,edx 6efff0b9 83e103 a...

CVE-2021-40444

Vulnerabilidad de ejecución remota de código en Microsoft MSHTML CVE-2021-40444 ¿Cómo deshabilitar los controles ActiveX en un sistema individual? 1. Para deshabilitar la instalación de controles ActiveX en Internet Explorer en todas las zonas, pegue lo siguiente en un archivo de texto y guárdelo...

CVE-2021-40444

〖EXP〗Ladon CVE-2021-40444 Reproducción de vulnerabilidad de Office Resumen de la vulnerabilidad El 8 de septiembre, hora de Beijing, el CERT de NSFOCUS monitoreó un comunicado de seguridad de Microsoft que revelaba la vulnerabilidad de ejecución remota de código en Microsoft MSHTML. Los atacantes...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT PARA USAR EN METASPLOIT, PERMITE A LOS ATACANTES OBTENER UNA EJECUCIÓN REMOTA DE CÓDIGO A TRAVÉS DE MICROSOFT OFFICE WORD AL INYECTAR CÓDIGO MALICIOSO EN EL ARCHIVO...

MSHTML-CVE-2021-40444

https://github.com/lockedbyte/CVE-2021-40444 Consulta el README real desde NotREADME.md Hice pequeños ajustes y automaticé el proceso si tienes DLL sudo bash run.sh -i interface -d dll si quieres que compile el dll por ti sudo bash run.sh -i interface -c "command"...

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday

A recently disclosed security flaw patched by Microsoft may have been exploited by the Russia-linked state-sponsored threat actor known as APT28, according to new findings from Akamai. The vulnerability in question is CVE-2026-21513 CVSS score: 8.8, a high-severity security feature bypass affecti...

Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for February 2026, which includes 59 vulnerabilities affecting a range of products, including two that Microsoft marked as "Critical". CVE-2026-21522 is a critical elevation of privilege vulnerability affecting Microsoft ACI Confidential...

CVE-2026-21513

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability

...

CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability

...

MSHTML Framework Security Feature Bypass Vulnerability

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

KB5075912: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (February 2026)

The remote Windows host is missing security update 5075912. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...

KB5075897: Windows Server version 23H2 Security Update (February 2026)

The remote Windows host is missing security update 5075897. It is, therefore, affected by multiple vulnerabilities - A heap-based buffer overflow issue was discovered in libjpeg-turbo in h2v2mergedupsampleinternal function of jdmrgext.c file. The vulnerability can only be exploited with 12-bit da...

VulnCheck KEV: CVE-2026-21513

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

KB5075971: Windows Server 2012 Security Update (February 2026)

The remote Windows host is missing security update 5075971. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Heap-based buffer overflow in Microso...

KB5077181: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (February 2026)

The remote Windows host is missing security update 5077181. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...