1885 matches found
mbanyamer-Microsoft-PowerPoint-Use-After-Free-Remote-Code-Execution-RCE
CVE-2025-47175 - Microsoft PowerPoint: PoC удаленного выполнения кода через Use-After-Free UAF Обзор Этот репозиторий содержит PoC-эксплойт Proof of Concept для уязвимости CVE-2025-47175 , обнаруженной в Microsoft PowerPoint. Уязвимость представляет собой ошибку типа Use-After-Free UAF, которая...
CVE-2017-8759
CVE-2017-8759 Этот репозиторий содержит примеры эксплойтов для CVE-2017-8759 для Microsoft PowerPoint, а также описание того, как подобные уязвимости были и могут быть использованы с помощью тех же методов. Немного предыстории Цель публикации этого репозитория — осветить альтернативные методы...
EUVD-2025-211024
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse savepresentation,...
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse savepresentation,...
CVE-2025-71427
The Office-PowerPoint-MCP-Server (versions prior to 2.0.8 ) is vulnerable to a path traversal flaw. This vulnerability allows MCP callers to read and write files outside the intended working directory by providing absolute paths or ../ sequences. An attacker can leverage prompt injection to manip...
CVE-2025-71427 Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse savepresentation,...
CVE-2025-71427 Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying absolute paths or ../ sequences. Attackers can steer an AI agent via prompt injection to abuse savepresentation,...
CVE-2022-30190_EXP_PowerPoint
CVE-2022-30190EXPPowerPoint Ceci est un exploit de CVE-2022-30190 sur PowerPoint. Modifiez le suffixe du fichier en 'zip' et décompressez le fichier, vous pouvez éditer \ppt\slides\rels\slide1.xml.rels et remplacer par l'ip:port de votre vps comme ceci, puis recompressez de la même manière et...
ppsx-file-generator
Введение Автор: Temesgen Yibeltal [email protected] на основе кода https://github.com/bhdresh/CVE-2017-8570 теперь удалён ppsx-file-generator — это инструмент на Python, который создаёт файл слайд-шоу PowerPoint, выполняющий код из удалённого источника на основе существующего файла. Что он...
PT-2026-104054
Name of the Vulnerable Software and Affected Versions Office-PowerPoint-MCP-Server versions prior to 2.0.8 Description A path traversal issue allows callers to read and write files outside the intended working directory by using absolute paths or ../ sequences. An attacker can use prompt injectio...
Security Updates for Microsoft PowerPoint Products C2R (September 2026)
The Microsoft PowerPoint Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797, CVE-2026-80081 -...
Security Updates for Microsoft PowerPoint Products (September 2026)
The Microsoft PowerPoint Products are missing a security update. They are, therefore, affected by multiple vulnerabilities: - Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVE-2026-69678, CVE-2026-69767, CVE-2026-69797 - Out-of-bound...
CVE-2026-80086
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-80081
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network...
CVE-2026-78513
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally...
CVE-2026-72977
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-72975
Out-of-bounds read in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...
CVE-2026-72956
Untrusted pointer dereference in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information over a network...