AADInternals

AADInternals AADInternals è un modulo PowerShell per amministrare Azure AD e Office 365 Per dettagli, visita https://aadinternals.com/aadinternals Installazione Esegui il seguente comando PowerShell per installare root@kitploit: Install-Module AADInternals...

oletools

python-oletools oletools is a package of python tools to analyze Microsoft OLE2 files also called Structured Storage, Compound File Binary Format or Compound Document File Format, such as Microsoft Office 97-2003 documents, MSI files or Outlook messages, mainly for malware analysis, forensics and...

Follina-CVE-and-CVE-2021-40444

Explorando as Vulnerabilidades Follina CVE e CVE-2021-40444 Sumário 1. Introdução 2. Pré-requisitos 3. Configuração e Instalação 4. Uso 5. Explicação Detalhada 6. Comandos 7. Aviso Legal Introdução Este repositório contém scripts e recursos para explorar as vulnerabilidades Follina CVE e...

CVE-2022-30190---Follina---Poc-Exploit

Follina - CVE-2022-30190 Follina è una zero-day che consente l'esecuzione di codice nei prodotti Office. Installazione root@kitploit: git clone https://github.com/WesyHub/CVE-2022-30190---Follina---Poc-Exploit.git Utilizzo Esempio : root@kitploit: python3 FollinaSploit.py -c calc -o poc.docx -p 8...

2017-11882_Generator

CVE-2017-11882 In Microsoft Office-Software besteht eine Sicherheitsanfälligkeit bezüglich der Ausführung von Code aus der Ferne, wenn die Software Objekte im Arbeitsspeicher nicht ordnungsgemäß behandelt. Ein Angreifer, der diese Sicherheitsanfälligkeit erfolgreich ausnutzt, könnte im Kontext de...

CVE-2022-30190

Exploitation von Follina CVE-2022-30190 Follina CVE-2022-30190 ist eine kritische Schwachstelle zur Remote-Code-Ausführung RCE, die das Microsoft Support Diagnostic Tool MSDT betrifft. Dieser Fehler wurde ursprünglich über eine bösartige Datei entdeckt, die auf VirusTotal gefunden wurde, und vom...

msdt-CVE-2022-30190

msdt-follina-office CVE-2022-30190- Una vulnerabilità RCE Zero-Click in MSDT...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

CVE-2018-8174-msf

CVE-2018-8174-msf Questo è un modulo metasploit che crea un documento Word dannoso per sfruttare la vulnerabilità CVE-2018-8174 - corruzione della memoria di VBScript. Questo modulo è un porting molto rapido e utilizza il campione di exploit trovato in natura. L'exploit funziona solo per Microsof...

CVE-2023-25292

CVE-2023-25292 Reflected Cross Site Scripting XSS in Intermesh BV Group-Office versione 6.6.145, consente agli aggressori di ottenere privilegi elevati e informazioni sensibili tramite il cookie GOLANGUAGE Dettagli della Vulnerabilità Prodotto: Group Office Application Versione: 6.6.145 Tipo di...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

VulnCheck KEV: CVE-2026-63520

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

CVE-2023-23397

CVE-2023-23397 Patch für eine kritische Sicherheitslücke in MS Outlook – CVSS 9.8 Im Ordner "Patch" sind 3 PowerShell-Skripte enthalten. Falls Ihre Patch-Management-Software ein Evaluierungs- und ein Behebungsskript verwendet, verwenden Sie die entsprechenden Dateien/Skripte. Das All-In-One-Skrip...

macphish

macphish Office for Mac Macro Payload Generator Attack vectors There are 4 attack vectors available: beacon creds meterpreter meterpreter-grant For the 'creds' method, macphish can generate the Applescript script directly, in case you need to run it from a shell. beacon On execution, this payload...

CVE-2026-70105

Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information over a network...

The vulnerability in Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to disclose protected information.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

PrestaShop - Information Disclosure

User enumeration vulnerability in the AdminLogin controller in PrestaShop 1.7 through 8.2.2 allows remote attackers to obtain administrators user email addresses via manipulation of the idemployee and resettoken parameters. An attacker who has access to the Back Office login URL can trigger the...

Security Updates for Microsoft Office Products C2R (August 2026)

The Microsoft Office Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally. CVE-2026-63513, CVE-2026-63519, CVE-2026-63533, CVE-2026-64898,...

Security Updates for Microsoft Office Products (August 2026) (macOS)

The version of Microsoft Office for Mac installed on the remote host is affected by multiple vulnerabilities as referenced in the august-11-2026 advisory. - Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally. CVE-2026-70311 - Access of resource using...

CVE-2026-65678

creationtimestamp| type| source ---|---|--- 2026-08-11 19:02:05+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:17:36+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:02:02+00:00| seen|...