1030 matches found
2017-11882_Generator
CVE-2017-11882 Microsoft Office 软件在处理内存中的对象时存在一个远程代码执行漏洞。成功利用此漏洞的攻击者可以在当前用户上下文中运行任意代码。 2017-11882Generator 这是从 Embedi 制作的原始 PoC 重新编辑而来的，用于生成包含远程命令执行的单个 .rtf 文件。 使用方法 python 2017-11882Generator.py -x commandtoexecute -o outputfilename 示例： python 2017-11882Generator.py -x "cmd /c calc" -o test.rtf...
PoC-CVE-2025-63406
CVE-2025-63406 – 安全研究概念验证 PoC 本仓库包含一个与影响 GroupOffice 平台的安全问题 CVE-2025-63406 相关的 面向研究的概念验证 PoC 。 此项目的目的是研究和理解漏洞的行为 ，协助安全团队进行风险评估 ，并在受控环境中帮助验证补丁和缓解措施 。 ⚠️ 重要通知 本 PoC 严格用于授权的安全研究、审计和教育分析 。 不得 在未获得明确许可的情况下针对系统使用。 🔍 关于漏洞 CVE-2025-63406 描述了 GroupOffice 对象内部处理的一种情况，特别是 FieldSet 、Field 和 Task...
CVE-2026-92176 pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability
pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...
PT-2026-92191
pdfforge PDF Architect App Object Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of pdfforge PDF Architect. User interaction is required to exploit this vulnerability in that the target must...
CVE-2026-68346
In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41getacpimutestate evaluates a DSM method to get the ACPI mute state and reads the first byte from the returned object. However, the returned ACPI object is owned by the...
CVE-2026-57246 Foxit PDF Editor/Reader Signature Buffer Overflow Vulnerability
When dealing with abnormally constructed objects, there is a lack of argument validation; JavaScript triggers signature verification, but the signature plugin does not perform validation when copying the abnormal string, causing the application to crash...
CVE-2026-59510 Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read
AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717c48ea903706abecdf2, the PDF.getfilepath function constructed a file path by joining the configured PDF storage directory with a path derived from a PDF object identifier, withou...
CVE-2026-59510 Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read
AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717c48ea903706abecdf2, the PDF.getfilepath function constructed a file path by joining the configured PDF storage directory with a path derived from a PDF object identifier, withou...
CVE-2026-59510
The CVE concerns AIL Framework’s PDF object handling. The vulnerable code in PDF.get_filepath() joined the configured PDF storage directory with a path derived from a PDF object identifier without ensuring the final path stayed inside the PDF_FOLDER. Authenticated attackers could supply crafted i...
CVE-2026-59510 Authenticated Path Traversal in AIL Framework PDF Object Handling Enables Potential Arbitrary File Read
AIL Framework contains a path traversal vulnerability in its PDF object handling. Prior to commit 14c618fce4d1df02358717c48ea903706abecdf2, the PDF.getfilepath function constructed a file path by joining the configured PDF storage directory with a path derived from a PDF object identifier, withou...
CVE-2022-37368
This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
CVE-2021-31472
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit Reader 10.1.1.37576. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Google Chrome 安全漏洞
Google Chrome is a web browser developed by Google. A security vulnerability exists in Google Chrome versions prior to 142.0.7444.59, which stems from a flaw in the V8 engine's handling of object types. The vulnerability can be exploited by an attacker to trigger heap corruption via specially...
EUVD-2010-4179
Malware in sbrugna...
EUVD-2020-12145
Malware in sbrugna...
EUVD-2020-12149
Malware in sbrugna...
EUVD-2021-21478
Malware in sbrugna...
EUVD-2021-18342
Malware in sbrugna...