CVE-2022-30190

CVE-2022-30190 Reprodução do RCE do Microsoft Office Word CVE-2022-30190 Resumo da vulnerabilidade Documentos do MS Office docx podem conter referências externas a objetos OLE como arquivos HTML. Existe um cenário HTML ms-msdt: que chama a ferramenta de diagnóstico msdt, capaz de executar código...

cve-2021-40444

cve-2021-40444 Engenharia reversa dos arquivos maliciosos "A Letter Before Court 4.docx" explorando cve-2021-40444 Arquivos incluindo o word malicioso e arquivo cab podem ser baixados em any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Nota! O nome de domínio no código...

CVE-2018-0802

CVE-2018-0802 CVE-2018-08022: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0802 MITRE CVE-2018-0802: https://vulners.com/cve/CVE-2018-0802 0patch शोषण और पैच वीडियो: https://www.youtube.com/watch?v=XU-U4K270Z4 Qihoo 360 ब्लॉग पोस्ट...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE उर्फ msdt follina जानकारी : PowerShell को निष्पादित करने के लिए हमलों में इस्तेमाल किया गया नया Microsoft Office ज़ीरो-डे सारांश 29 मई 2022 को, NaoSec टीम, एक स्वतंत्र साइबर सुरक्षा अनुसंधान टीम ने, Virustotal पर साझा किया गया एक दुर्भावनापूर्ण Office...

Follina_MSDT_CVE-2022-30190

A Microsoft explica que “existe uma vulnerabilidade de execução remota de código quando o MSDT é chamado usando o protocolo URL de um aplicativo chamador, como o Word. Um invasor que explore com sucesso essa vulnerabilidade pode executar código arbitrário com os privilégios do aplicativo chamador...

PoC-CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE المعروف بـ msdt follina معلومة : ثغرة يوم الصفر الجديدة في Microsoft Office تُستخدم في هجمات لتنفيذ PowerShell ملخص في 29 مايو 2022، اكتشف فريق NaoSec، وهو فريق مستقل لأبحاث الأمن السيبراني، مستند Office ضارًا تمت مشاركته على Virustotal. يستخدم هذا...

CVE-2022-30190

CVE-2022-30190 المعروف أيضًا باسم Follina وصف الثغرة توجد Follina في أداة تشخيص الدعم من مايكروسوفت Microsoft Support Diagnostic Tool، MSDT. عندما يستدعي تطبيق MSDT عبر بروتوكول URL للحصول على الدعم، تظهر ثغرة تنفيذ التعليمات البرمجية عن بُعد. الاستغلال الناجح يسمح للمهاجم بتنفيذ تعليمات برمجية...

Exploit for CVE-2022-30190

...

Exploit for CVE-2022-30190

POC CVE-2022-30190 : CVE 0-day MS Offic RCE aka msdt follina...

Microsoft Windows Code Injection Vulnerability

Microsoft Windows allow remote attackers to execute arbitrary code via a crafted OLE object...

CVE-2014-4114

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow remote attackers to execute arbitrary code via a crafted OLE object in an Office document, as exploited in the wild with a...

CVE-2014-5236

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange OX AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted 1 OLE Object or 2 image in an OpenDocument text file...

Path traversal

Multiple absolute path traversal vulnerabilities in documentconverter in Open-Xchange OX AppSuite before 7.4.2-rev10 and 7.6.x before 7.6.0-rev10 allow remote attackers to read application files via a full pathname in a crafted 1 OLE Object or 2 image in an OpenDocument text file...

Open Document format creates twist in maldoc landscape

By Warren Mercer and Paul Rascagneres. Introduction Cisco Talos recently observed attackers changing the file formats they use in an attempt to thwart common antivirus engines. This can happen across other file formats, but today, we are showing a change of approach for an actor who has deemed...

Microsoft Office Excel OLE Object Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Office Excel. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsi...

End of support for Office 2016 and Office 2019

None None...

Atlantis Word Processor uninitialized TDocOleObject code execution vulnerability

Summary An exploitable uninitialized variable vulnerability exists in the RTF-parsing functionality of Atlantis Word Processor. A specially crafted RTF file can leverage an uninitialized stack address, resulting in an out-of-bounds write, which in turn could lead to code execution. Tested Version...

Microsoft Publisher Elevation of Privilege Vulnerability

Microsoft Publisher 2010 SP2 is a desktop publishing software from the Office suite of Microsoft USA that can be used to create press releases, postcards, and more. An elevation of privilege vulnerability exists in Microsoft Publisher 2010 SP2 that stems from the program failing to take advantage...

Outlook Bug Allowed Hackers to Use .RTF Files To Steal Windows Passwords

A vulnerability in Microsoft Outlook allowed hackers to steal a user’s Windows password just by having the target preview an email with a Rich Text Format RTF attachment that contained a remotely hosted OLE object. The bug was patched by Microsoft as part of its April Patch Tuesday fixes, over a...

Disable Risky Windows Features: Hardentools

Hardentools is a collection of simple utilities designed to disable a number of “features” exposed by operating systems Microsoft Windows, for now, and primary consumer applications. These features, commonly thought for Enterprise customers, are generally useless to regular users and rather pose ...