CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

Microsoft Outlook 远程代码执行漏洞 PoC 本脚本展示了 CVE-2024-21413 的概念验证（PoC），这是 Microsoft Outlook 中一个 CVSS 评分为 9.8 的关键安全漏洞。该漏洞被称为 MonikerLink 漏洞，其影响范围广泛，包括可能泄露本地 NTLM 数据以及远程代码执行的风险。此外，它还突出了一种能够绕过 Office Protected View 的攻击媒介，从而将其威胁扩展到其他 Office 软件。 用法： 要使用此脚本： 1. 将仓库克隆到本地机器：...

Microsoft Windows Localized Filenames Improper Input Validation NTLM Response Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose NTLM responses on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

EUVD-2026-64126

Git for Windows is the Windows port of Git. Prior to 2.55.0.windows.4, a malicious remote Git server can advertise a bundle URI that reaches transportgetremotebundleuri, fetchbundleuriinternal, and copyuritofile in bundle-uri.c during clone or fetch when transfer.bundleuri=true. Non-HTTPS values...

PT-2026-79447

Name of the Vulnerable Software and Affected Versions Git for Windows versions prior to 2.55.0.windows.4 Description A malicious remote Git server can advertise a bundle URI that is processed by the transport get remote bundle uri, fetch bundle uri internal, and copy uri to file functions in...

CVE-2026-54206

CVE-2026-54206 affects Tobit Laboratories AG TeamDavid’s Webbox. The issue is a server-side inclusion/SSRF via the pathname parameter in the sending functionality, which can be set to UNC paths (e.g., \Server\Share). The server processes these paths without validation, causing outbound connection...

firefox: multiple issues

CVE-2015-4513 Miscellaneous memory safety hazards: Christian Holler, David Major, Jesse Ruderman, Tyson Smith, Boris Zbarsky, Randell Jesup, Olli Pettay, Karl Tomlinson, Jeff Walden, and Gary Kwong reported memory safety problems and crashes that affect Firefox ESR 38.3 and Firefox 41. -...