CVE-2018-4878

Autor y Créditos Autor: Vincent Yiu @vysecurity Créditos: @evi1cg: Ayudándome a probar y mantener mi motivación @smgoreli: PoC original de Calc.exe @kbandla: Él lo sabe, y yo lo sé. ; Descargo de responsabilidad Desarrollado para fomentar más desarrollo de scripts Aggressor. ¡Úselo solo en prueba...

CVE-2018-4878

作者与致谢 作者：Vincent Yiu @vysecurity 致谢： @evi1cg：帮助我测试并让我保持动力 @smgoreli：原始 Calc.exe PoC @kbandla：他懂，我也懂。; 免责声明 开发此脚本是为了鼓励更多的 Aggressor 脚本开发。仅限在授权的渗透测试中使用！ 描述 一个 Aggressor 脚本，利用 CVE-2018-4878 漏洞对 2018 年 2 月之前的 Shockwave Flash 播放器版本发起 Internet Explorer 路过式攻击。 使用方法：...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

Microsoft Excel allows user-assisted attackers to execute arbitrary javascript and redirect users to arbitrary sites via an Excel spreadsheet with an embedded Shockwave Flash Player ActiveX Object, which is automatically executed when the user opens the spreadsheet...

CVE-2006-3014

CVE-2006-3014 affects Microsoft Excel where embedding a Shockwave Flash Player ActiveX Object inside an XLS can automatically execute, enabling user-assisted arbitrary JavaScript execution and redirection when the spreadsheet is opened. According to SUSE and CPAI advisories, the issue originates ...