FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 Implementierung von FOLLINA-CVE-2022-30190 Dieses Repository enthält ein Exploit-Tool für die Schwachstelle FOLLINA-CVE-2022-30190 Haftungsausschluss Dieses Tool wurde für Sicherheitstests und Forschungszwecke entwickelt. Durch das Klonen / Forken dieses Tools übernimmt der...

MS-MSDT-Office-RCE-Follina

MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina Ein Klick 1. Erstellen Sie eine DOCX-Datei. 2. In der DOCX-Datei: Einfügen Objekt Bitmap-Bild OK 3. Speichern Sie die Paint-Datei in der geöffneten Paint-Anwendung. 4. Speichern Sie Ihre DOCX-Datei. 5. Öffnen Sie Ihre Datei als Archiv mi...

cve-2019-6453-poc

CVE-2019-6453: RCE su mIRC 7.55 mediante injection di argomenti attraverso gestori di protocollo URI personalizzati Abbiamo trovato una vulnerabilità di Remote Code Execution in mIRC attraverso il gestore di protocollo URI irc://. Poiché mIRC non utilizza alcun tipo di segnaposto come -- per...

mIRC-CVE-2019-6453

CVE-2019-6453: mIRC 7.55 पर कस्टम URI प्रोटोकॉल हैंडलर के माध्यम से आर्गुमेंट इंजेक्शन द्वारा RCE लेख का लिंक हमें mIRC में irc:// URI प्रोटोकॉल हैंडलर के माध्यम से एक Remote Code Execution भेद्यता मिली। क्योंकि mIRC तर्क सूची के अंत को चिह्नित करने के लिए -- जैसे किसी भी संकेत का उपयोग नहीं करता...

CVE-2026-33829

CVE-2026-33829 Questo repository contiene uno strumento automatizzato in Bash progettato per auditare e verificare in modo passivo e controllato se gli asset con sistema operativo Windows sono vulnerabili alla manipolazione non sicura del gestore di protocollo search:. Lo script agisce come un...

CVE-2026-33829-Writeup

CVE-2026-33829-Analisi Caso di studio di vulnerabilità: CVE-2026-33829 Coercizione NTLM nello Strumento di cattura di Windows Riepilogo esecutivo Questa analisi descrive la replica tecnica di CVE-2026-33829 , una vulnerabilità di divulgazione di informazioni presente nell'architettura applicativa...

CVE-2026-19503 Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

CVE-2026-19503

CVE-2026-19503 affects MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver. The issue arises from insufficient validation of the scheme for authorization and token endpoints returned in an OIDC issuer’s discovery document, allowing a user connected to an uncontrolled MongoDB deployment using...

Astra Linux – Vulnerability found in Linux 6.12, Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: icmp: Fixed a NULL pointer dereference in icmptagvalidation. icmptagvalidation unconditionally dereferes the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse—only about 15 out o...

CVE-2026-70606

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession...

EUVD-2026-53445

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, when a custom protocol handler returned a ProtocolResponse with a url and no session, Electron made the upstream request through defaultSession...

CVE-2026-70606

Electron prior to versions 40.10.6, 41.9.1, 42.5.1, and 43.0.0 has a vulnerability where a ProtocolResponse with a URL and no session could cause the upstream request to go through the defaultSession instead of the registering session. This could allow a cached response to be reused across otherw...

Linux Distros Unpatched Vulnerability : CVE-2026-67298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP versions 3.28.0 and earlier contain a heap buffer overflow in the server-side RAIL channel handler railserverhandlemessages in...

CVE-2026-65606 SiYuan before v3.7.2 Cross-Site Scripting to RCE

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...

EUVD-2026-48242

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...

CVE-2026-65606

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, SiYuan Desktop opens a custom tab and inserts the link’s icon parameter into the tab header via innerHTML without ...

CVE-2026-65606 SiYuan before v3.7.2 Cross-Site Scripting to RCE

SiYuan before v3.7.2 contains a cross-site scripting vulnerability in the siyuan:// protocol handler. When a siyuan://plugins/ link references a name that is not an installed plugin, the application opens a custom tab and inserts the link's icon parameter into the tab header via innerHTML without...

CVE-2026-15619

CVE-2026-15619 affects mosaxiv clawlet prior to 0.2.10. The vulnerable element is the web_fetch function in tools/tool_web_fetch.go of the IPv4 Handler. The issue arises from manipulating the url argument, enabling server-side request forgery (SSRF). The attack can be initiated remotely, and an e...

CVE-2026-11451

A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler. Executing a manipulation of the argument mediadir can lead to command injection. It is possible to launch the attack remotely. Upgrading to version...

CVE-2026-11451

A flaw has been found in GL.iNet GL-MT3000 4.4.5. This impacts the function snprintf of the file /cgi-bin/glc of the component FTP Protocol Handler. Executing a manipulation of the argument mediadir can lead to command injection. It is possible to launch the attack remotely. Upgrading to version...