56 matches found
AzTokenFinder
AzTokenFinder Is a small tool to extract JWT or JWT like looking data from different processes, like PowerShell, Excel, Word or others. The idea was inspired from the blog post https://mrd0x.com/stealing-tokens-from-office-applications/ from the amazing @mrd0x. In the new release, I added the...
Microsoft Office Microsoft 365 Apps for Enterprise Information Disclosure
The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these applications...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office and Office 365 packages relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Microsoft Excel Data Protection Bypass
The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise products is related to a flaw in data protection mechanisms. Exploiting this vulnerability can allow attackers to circumvent security restrictions...
Microsoft Office 缓冲区错误漏洞
Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is a code execution vulnerability in Microsoft Office, which is caused by improper...
Microsoft Office Disclosure Information Disclosure
The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is...
Microsoft Office Buffer Overflow Information Disclosure
The vulnerability of Microsoft Word packages in Microsoft Office and Microsoft 365 Apps for Enterprise lies in the reading of data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
Microsoft Outlook Office Sensitive Data Protection
The vulnerability of the Microsoft Outlook client, as well as Microsoft Office suites, Excel, and 365 Enterprise Apps, is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow attackers to carry out spear-phishing attacks...
Microsoft Office Memory Usage Code Execution
The vulnerability of Microsoft Office package applications and Microsoft 365 Apps for Enterprise lies in the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages relates to the possibility of using memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Visio Code Execution
The vulnerability of Microsoft Visio graphical editors in Microsoft Office and Microsoft 365 Apps for Enterprise applications is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
EUVD-1999-1412
Malware in sbrugna...
EUVD-2024-18392
Malicious code in bioql PyPI...
Microsoft Outlook Client Code Execution
The vulnerability of the Microsoft Outlook client and Microsoft Office programs, as well as 365 Apps for Enterprise, is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Office Memory Use After Free
The vulnerability of Microsoft Office packages and 365 Apps for Enterprise lies in the ability to exploit memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Access Memory Use After Free Code Execution
The vulnerability of the Microsoft Access database management system, Microsoft Office applications, and 365 Enterprise Apps is related to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Teams (work or school) for macOS com.microsoft.teams2.modulehost.app helper app library injection vulnerability
Talos Vulnerability Report TALOS-2024-1991 Microsoft Teams work or school for macOS com.microsoft.teams2.modulehost.app helper app library injection vulnerability August 19, 2024 CVE Number CVE-2024-41138 SUMMARY A library injection vulnerability exists in the com.microsoft.teams2.modulehost.app...
CVE-2024-20677
A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have acces...
CVE-2024-20677
A security vulnerability exists in FBX that could lead to remote code execution. To mitigate this vulnerability, the ability to insert FBX files has been disabled in Word, Excel, PowerPoint and Outlook for Windows and Mac. Versions of Office that had this feature enabled will no longer have acces...
PT-2023-8134 · Microsoft · Office Word +8
Name of the Vulnerable Software and Affected Versions: Microsoft Office versions prior to the January 9, 2024 security update Office 2019 Office 2021 Office LTSC for Mac 2021 Microsoft 365 Description: A security issue exists in FBX that could lead to remote code execution. The vulnerability is...