CVE-2025-54100

CVE-2025-54100 – PowerShell Response Parsing PoC A concise Proof-of-Concept showing how CVE-2025-54100 can lead to Remote Code Execution RCE in Windows PowerShell 5.1 through malicious HTML parsing. Table of Contents What is CVE-2025-54100? How the PoC Works Quick Start Triggering From a Victim...

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit

Microsoft-Office-Word-MSHTML-Remote-Code-Execution-Exploit CVE-2021-40444 EXPLOIT TO USE IN METASPLOIT, ALLOWS ATTACKERS TO GET AN REMOTE CODE EXECUTION THROUGH MICROSOFT OFFICE WORD BY INJECTING MALICIOUS CODE IN THE FILE...

CVE-2021-40444-POC

CVE-2021-40444-POC An attempt to reproduce Microsoft MSHTML Remote Code Execution RCE Vulnerability using Metasploit Framework. works best if not run in FlareVM PREPARATION Git Clone the repository from https://github.com/lockedbyte/CVE-2021-40444 Prepare the .dll template to be used later with...

CVE-2021-40444

Microsoft MSHTML Remote Code Execution Vulnerability CVE-2021-40444 How to disable ActiveX controls on an individual system ? 1. To disable installing ActiveX controls in Internet Explorer in all zones, paste the following into a text file and save it with the .reg file extension: Windows Registr...

CVE-2021-40444

EXP Ladon CVE-2021-40444 Office Vulnerability Exploitation Vulnerability Overview On September 8th Beijing time, NSFOCUS CERT monitored that Microsoft released a security advisory disclosing the Microsoft MSHTML remote code execution vulnerability. Attackers can craft malicious ActiveX controls f...

CVE-2014-4140

Some rough notes 0:007 u MSHTML!CHtmRootParseCtx::AddText+0x104: 6efff0a5 8b8e88000000 mov ecx,dword ptr esi+88h 6efff0ab 898d70ffffff mov dword ptr ebp-90h,ecx 6efff0b1 8945ac mov dword ptr ebp-54h,eax 6efff0b4 8b5118 mov edx,dword ptr ecx+18h 6efff0b7 8bca mov ecx,edx 6efff0b9 83e103 and ecx,3...

CVE-2014-4109

This crash is difficult to reproduce. The included proof of concept makes it a little easier to trigger the crashing code path. My super scientific process of checking the crash was to click on the url with one hand and press enter with the other. It usually crashes within 15 attempts. "IE=9" als...

CVE-2014-1773

CClipStack::PushClipRect Invalid Array Indexing First, starting with the callstack from the crash with pageheap enabled: ChildEBP RetAddr 0919aac8 6b58459f MSHTML!CWorldTransform::IsAxisAligned 0919ab40 6ba228e9 MSHTML!CDispSurface::CClipStack::PushClipRect+0x1a2 0919aba4 6be25b58...

MSHTML-CVE-2021-40444

https://github.com/lockedbyte/CVE-2021-40444 Check Actual README from NotREADME.md I made small adjustments and make process automated if you have DLL sudo bash run.sh -i interface -d dll if you want me to compile dll for ya sudo bash run.sh -i interface -c "command"...

Windows Download Stager, rundll32 mshtml

rundll32 javascript mshtml RunHTMLApplication — loads remote .sct/.js. Host stager.sct see regsvr32sctstager delivery=sctcontent. !/usr/bin/env python3 -- coding: utf-8 -- from kittysploit import from lib.c2.downloadstagers import buildrundll32mshtml, buildstagerurl class ModulePayload: info =...

APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch Tuesday

A recently disclosed security flaw patched by Microsoft may have been exploited by the Russia-linked state-sponsored threat actor known as APT28, according to new findings from Akamai. The vulnerability in question is CVE-2026-21513 CVSS score: 8.8, a high-severity security feature bypass affecti...

MSHTML Bypass Security

The vulnerability of the MSHTML component in Windows operating systems is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security functions remotely...

Microsoft Patch Tuesday for February 2026 — Snort rules and prominent vulnerabilities

Microsoft has released its monthly security update for February 2026, which includes 59 vulnerabilities affecting a range of products, including two that Microsoft marked as "Critical". CVE-2026-21522 is a critical elevation of privilege vulnerability affecting Microsoft ACI Confidential...

CVE-2026-21513

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability

...

CVE-2026-21513 MSHTML Framework Security Feature Bypass Vulnerability

...

MSHTML Framework Security Feature Bypass Vulnerability

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-21513: Protection Mechanism Failure

Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network...

KB5077181: Windows 11 Version 24H2 / Windows 11 Version 25H2 Security Update (February 2026)

The remote Windows host is missing security update 5077181. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Access of resource using incompatible...

KB5075971: Windows Server 2012 Security Update (February 2026)

The remote Windows host is missing security update 5075971. It is, therefore, affected by multiple vulnerabilities - Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network. CVE-2026-21513 - Heap-based buffer overflow in Microso...