Lucene search
+L

278 matches found

Kitploit
Kitploit
added 2026/08/27 3:58 a.m.1 views

MSDT_CVE-2022-30190

MSDTCVE-2022-30190 Este repositorio habla sobre Follina MSDT desde la perspectiva de Defender Índice Acerca de Cronología Entendiendo el exploit Lista de IOCs Estrategia de detección Pruebas e investigación Planes de mitigación Referencias Acerca de El error es una vulnerabilidad de ejecución...

9.3CVSS8.1AI score0.99234EPSS
SaveExploits63References8
Kitploit
Kitploit
added 2026/08/26 11:10 p.m.2 views

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 FOLLINA-CVE-2022-30190 का कार्यान्वयन यह रिपॉजिटरी भेद्यता FOLLINA-CVE-2022-30190 के लिए एक शोषण उपकरण शामिल करता है। अस्वीकरण यह उपकरण सुरक्षा परीक्षण और अनुसंधान उद्देश्यों के लिए विकसित किया गया है। इस उपकरण को क्लोन/फोर्क करने पर, मूल डेवलपर उपयोगकर्ताओं के कार्यों के ल...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/08/26 11:08 p.m.2 views

CVE-2022-30190

CVE-2022-30190 aka Follina 脆弱性の説明 Follinaは、Microsoft サポート診断ツール(Microsoft Support Diagnostic Tool、MSDT)に存在する脆弱性です。アプリケーションがURLプロトコルを介してMSDTを呼び出してサポートを実行すると、リモートコード実行の脆弱性が発生します。悪用に成功すると、攻撃者は実行中のアプリケーションの権限に基づいて任意のコードを実行できます。 脆弱性の再現環境 root@kitploit: Host OS: Ubuntu 22.04 LST Guest OS: Windows 10 Pro...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63References2
Kitploit
Kitploit
added 2026/08/26 10:09 p.m.2 views

LittleCorporal

LittleCorporal LittleCorporal: Ein automatisierter Maldoc-Generator in C root@kitploit: C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ ...

5.5AI score
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 9:22 p.m.3 views

CVE-2018-8174-msf

CVE-2018-8174-msf Dieses Metasploit-Modul erstellt ein bösartiges Word-Dokument, um die CVE-2018-8174 - VBScript-Speicherfehler-Schwachstelle auszunutzen. Dieses Modul ist ein sehr schneller Port und verwendet das Exploit-Beispiel, das in freier Wildbahn gefunden wurde. Der Exploit funktioniert n...

7.6CVSS6.7AI score0.88508EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/08/26 8:51 p.m.2 views

CVE-2017-11882

CVE-2017-11882 43b script originale da https://github.com/embedi/CVE-2017-11882 109b script originale da https://github.com/unamer/CVE-2017-11882/ un applauso, ora il codice di unamer può eseguire shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

9.3CVSS7.7AI score0.99945EPSS
SaveExploits33References2
Kitploit
Kitploit
added 2026/08/26 4:56 p.m.37 views

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

5.8AI score
SaveExploits0References6
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.3 views

cve-2021-40444

cve-2021-40444 Reverse engineering dei file dannosi "A Letter Before Court 4.docx" che sfruttano cve-2021-40444 I file inclusi il documento Word dannoso e il file cab possono essere scaricati su any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Nota! Il nome di dominio nel...

8.8CVSS6.9AI score0.9745EPSS
SaveExploits38
Kitploit
Kitploit
added 2026/08/26 6:31 a.m.2 views

Ring0VBA

Ring0VBA CVE-2018-6606 का VBA का उपयोग करते हुए - https://disrel.com/posts/Ring0VBA-Getting-Ring0-Using-a-Goddamn-Word-Document/...

7.8CVSS7.4AI score0.01186EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/08/26 3:37 a.m.1 views

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Progetto sullo sfruttamento e sulle strategie di mitigazione della vulnerabilità CVE-2022-30190 📌 Informazioni Questo repository contiene il mio progetto finale per ICT287, in cui esploro la vulnerabilità CVE-2022-30190 "Follina". Il progetto comprende: Analisi...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63References1
Kitploit
Kitploit
added 2026/08/25 8:57 a.m.1 views

five-nights-at-follina-s

Cinque Notti da Follina Un progetto di cybersecurity della Fullstack Academy che esamina l'intero ciclo della vulnerabilità Follina CVE-2022-30190, dallo sfruttamento alla rilevazione e difesa. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu Questo set di strumenti presuppone che t...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63References4
Kitploit
Kitploit
added 2026/08/25 6:15 a.m.3 views

follina-spring

Sfruttamento di Follina MS-MSDT con Spring Boot Questo repository contiene una semplice applicazione Spring Boot che funge sia da server per ospitare/attivare payload Follina , sia da generatore di documenti Word dannosi pronti per essere utilizzati come vettori d'attacco per sfruttare...

9.3CVSS7.8AI score0.99234EPSS
SaveExploits63
Kitploit
Kitploit
added 2026/08/25 4:27 a.m.2 views

CVE-2018-8174-msf

CVE-2018-8174-msf Questo è un modulo metasploit che crea un documento Word dannoso per sfruttare la vulnerabilità CVE-2018-8174 - corruzione della memoria di VBScript. Questo modulo è un porting molto rapido e utilizza il campione di exploit trovato in natura. L'exploit funziona solo per Microsof...

7.6CVSS6.7AI score0.88508EPSS
SaveExploits10
Cvelist
Cvelist
added 2026/08/11 5:05 p.m.34 views

CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability

...

5.5CVSS0.00277EPSS
SaveExploits0References1
Snyk
Snyk
added 2026/06/18 1:04 p.m.10 views

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the document conversion process. An attacker can cause the server to make arbitrary outbound HTTPS requests or access local image files by uploading a specially crafted DOCX document that references...

8.7CVSS5.9AI score0.00474EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/15 4:22 p.m.27 views

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

6.9CVSS5.6AI score0.0012EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/15 4:22 p.m.17 views

EUVD-2026-36737

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

6.9CVSS5.7AI score0.0012EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/15 12:00 a.m.10 views

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

6.9CVSS6.2AI score0.0012EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/28 6:10 p.m.13 views

EUVD-2026-26117

OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit uploadfile and uploadimage endpoints to access files beyond the intended workspace-only filesystem policy...

6.5CVSS5.2AI score0.00327EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/04/28 12:00 a.m.16 views

PT-2026-35793

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.8 Description A filesystem policy bypass exists in the processing of docx uploads, enabling local file reads outside of workspace boundaries. This allows attackers to access files beyond the intended...

6.5CVSS5.8AI score0.00327EPSS
SaveExploits0References7
Rows per page
Query Builder