LetsDefend-SOC173-Follina-0-Day-Detected

LetsDefend-SOC173-Follina-0-Day-Detected Somos apresentados a um alerta de segurança que indica a deteção da vulnerabilidade Follina CVE-2022-30190. Um documento Word malicioso acionou a execução do msdt.exe, sugerindo possível execução remota de código no host JonasPRD. A nossa tarefa é investig...

CVE-2022-30190

CVE-2022-30190 - Microsoft Support Diagnostic Tool Über Dieses Skript versucht, ein Microsoft Office-Dokument zu erstellen, das remote Code ausführt. Einrichtung root@kitploit: git clone https://github.com/joshuavanderpoll/CVE-2022-30190.git cd CVE-2022-30190 python3 CVE-2022-30190.py --help...

MS-MSDT-Office-RCE-Follina

MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina Ein Klick 1. Erstellen Sie eine DOCX-Datei. 2. In der DOCX-Datei: Einfügen Objekt Bitmap-Bild OK 3. Speichern Sie die Paint-Datei in der geöffneten Paint-Anwendung. 4. Speichern Sie Ihre DOCX-Datei. 5. Öffnen Sie Ihre Datei als Archiv mi...

CVE-2026-65656

CVE-2026-65656 concerns a Microsoft Office vulnerability where improper neutralization of special elements used in a command (command injection) can let an attacker with local access execute code locally. The issue is described as a local, user-interaction-requiring flaw with a CVSS v3.1 base sco...

CVE-2026-65657

Microsoft Office contains a use-after-free vulnerability (CVE-2026-65657) that allows a local attacker to execute code on the affected host. CVSS v3.1 base score 7.8 (HIGH), attack vector LOCAL, attack complexity LOW, privileges required NONE, user interaction REQUIRED, and impact HIGH for confid...

libreoffice security update

An update is available for libreoffice. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list LibreOffice is an open source, community-developed office productivity...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the ApplyTemplate process in models/attachment.go when handling Office document attachments as ZIP archives. An attacker can cause the server to exhaust memory resources by uploadi...

GHSA-42JC-V69J-G38F Gophish contains a denial of service vulnerability

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate function in models/attachment.go processes Office documents as ZI...

CVE-2026-39904 Gophish 0.12.1 Denial of Service via Office Document Upload

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate function in models/attachment.go processes Office documents as ZI...

CVE-2026-39904 Gophish 0.12.1 Denial of Service via Office Document Upload

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate function in models/attachment.go processes Office documents as ZI...

CVE-2026-39904 Gophish 0.12.1 Denial of Service via Office Document Upload

Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a crafted Office document as an email template attachment. The ApplyTemplate function in models/attachment.go processes Office documents as ZI...

Exploit for CVE-2022-30190

Explotación de Follina CVE-2022-30190 Follina CVE-2022-3...

PT-2026-38382

Name of the Vulnerable Software and Affected Versions Gotenberg versions 8.31.0 and earlier Description A Server-Side Request Forgery SSRF issue exists in the LibreOffice conversion endpoint "/forms/libreoffice/convert". While some SSRF hardening is present in the Go code, the application passes...

CVE-2026-3665

A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsxconsumer::readofficedocument of the file source/detail/serialization/xlsxconsumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. Th...

EUVD-2026-10173

A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsxconsumer::readofficedocument of the file source/detail/serialization/xlsxconsumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. Th...

CVE-2026-3665 xlnt-community xlnt XLSX File xlsx_consumer.cpp read_office_document null pointer dereference

A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsxconsumer::readofficedocument of the file source/detail/serialization/xlsxconsumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. Th...

CVE-2026-3665 xlnt-community xlnt XLSX File xlsx_consumer.cpp read_office_document null pointer dereference

A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsxconsumer::readofficedocument of the file source/detail/serialization/xlsxconsumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. Th...

CVE-2026-3665

The CVE-2026-3665 entry concerns the xlnt-community xlnt XLSX File Parser (up to version 1.6.1). The affected element is xlnt::detail::xlsx_consumer::read_office_document in source/detail/serialization/xlsx_consumer.cpp, where manipulation leads to a null pointer dereference. Exploitation require...

CVE-2026-3665 xlnt-community xlnt XLSX File xlsx_consumer.cpp read_office_document null pointer dereference

A vulnerability was identified in xlnt-community xlnt up to 1.6.1. The affected element is the function xlnt::detail::xlsxconsumer::readofficedocument of the file source/detail/serialization/xlsxconsumer.cpp of the component XLSX File Parser. The manipulation leads to null pointer dereference. Th...

CVE-2018-19448

In Foxit Reader SDK ActiveX Professional 5.4.0.1031, an uninitialized object in IReaderContentProvider::GetDocEventHandler occurs when embedding the control into Office documents. By opening a specially crafted document, an attacker can trigger an out of bounds write condition, possibly leveragin...