MSDT_CVE-2022-30190

MSDTCVE-2022-30190 Este repositorio habla sobre Follina MSDT desde la perspectiva de Defender Índice Acerca de Cronología Entendiendo el exploit Lista de IOCs Estrategia de detección Pruebas e investigación Planes de mitigación Referencias Acerca de El error es una vulnerabilidad de ejecución...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 FOLLINA-CVE-2022-30190 का कार्यान्वयन यह रिपॉजिटरी भेद्यता FOLLINA-CVE-2022-30190 के लिए एक शोषण उपकरण शामिल करता है। अस्वीकरण यह उपकरण सुरक्षा परीक्षण और अनुसंधान उद्देश्यों के लिए विकसित किया गया है। इस उपकरण को क्लोन/फोर्क करने पर, मूल डेवलपर उपयोगकर्ताओं के कार्यों के ल...

CVE-2022-30190

CVE-2022-30190 aka Follina 脆弱性の説明 Follinaは、Microsoft サポート診断ツール（Microsoft Support Diagnostic Tool、MSDT）に存在する脆弱性です。アプリケーションがURLプロトコルを介してMSDTを呼び出してサポートを実行すると、リモートコード実行の脆弱性が発生します。悪用に成功すると、攻撃者は実行中のアプリケーションの権限に基づいて任意のコードを実行できます。 脆弱性の再現環境 root@kitploit: Host OS: Ubuntu 22.04 LST Guest OS: Windows 10 Pro...

LittleCorporal

LittleCorporal LittleCorporal: Ein automatisierter Maldoc-Generator in C root@kitploit: C:\LittleCorporal\bin\ReleaseLittleCorporal.exe C:\beacon.bin explorer.exe . . . . | | ||/ |/ || | \ \ | | | | | \ \ \ | / / \ / / \ \ \ / \ \ \ | | | || || | | | | |\ /\ \ | / | | // | | | ||| || |/\ ...

CVE-2018-8174-msf

CVE-2018-8174-msf Dieses Metasploit-Modul erstellt ein bösartiges Word-Dokument, um die CVE-2018-8174 - VBScript-Speicherfehler-Schwachstelle auszunutzen. Dieses Modul ist ein sehr schneller Port und verwendet das Exploit-Beispiel, das in freier Wildbahn gefunden wurde. Der Exploit funktioniert n...

CVE-2017-11882

CVE-2017-11882 43b script originale da https://github.com/embedi/CVE-2017-11882 109b script originale da https://github.com/unamer/CVE-2017-11882/ un applauso, ora il codice di unamer può eseguire shellcode CVE-2017-11882: https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/ MITRE...

certbot

.. This file contains a series of comments that are used to include sections of this README in other files. Do not modify these comments unless you know what you are doing. tag:intro-begin |build-status| .. |build-status| image::...

cve-2021-40444

cve-2021-40444 Reverse engineering dei file dannosi "A Letter Before Court 4.docx" che sfruttano cve-2021-40444 I file inclusi il documento Word dannoso e il file cab possono essere scaricati su any.run: https://app.any.run/tasks/36c14029-9df8-439c-bba0-45f2643b0c70/ Nota! Il nome di dominio nel...

Ring0VBA

Ring0VBA CVE-2018-6606 का VBA का उपयोग करते हुए - https://disrel.com/posts/Ring0VBA-Getting-Ring0-Using-a-Goddamn-Word-Document/...

ICT287_CVE-2022-30190_Exploit

ICT287CVE-2022-30190Exploit Progetto sullo sfruttamento e sulle strategie di mitigazione della vulnerabilità CVE-2022-30190 📌 Informazioni Questo repository contiene il mio progetto finale per ICT287, in cui esploro la vulnerabilità CVE-2022-30190 "Follina". Il progetto comprende: Analisi...

five-nights-at-follina-s

Cinque Notti da Follina Un progetto di cybersecurity della Fullstack Academy che esamina l'intero ciclo della vulnerabilità Follina CVE-2022-30190, dallo sfruttamento alla rilevazione e difesa. Team: Brian Aldrich YoungWa Kim Jay O'Neill Binyang Jeffrey Xu Questo set di strumenti presuppone che t...

follina-spring

Sfruttamento di Follina MS-MSDT con Spring Boot Questo repository contiene una semplice applicazione Spring Boot che funge sia da server per ospitare/attivare payload Follina , sia da generatore di documenti Word dannosi pronti per essere utilizzati come vettori d'attacco per sfruttare...

CVE-2018-8174-msf

CVE-2018-8174-msf Questo è un modulo metasploit che crea un documento Word dannoso per sfruttare la vulnerabilità CVE-2018-8174 - corruzione della memoria di VBScript. Questo modulo è un porting molto rapido e utilizza il campione di exploit trovato in natura. L'exploit funziona solo per Microsof...

CVE-2026-70310 Microsoft Word Information Disclosure Vulnerability

...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the document conversion process. An attacker can cause the server to make arbitrary outbound HTTPS requests or access local image files by uploading a specially crafted DOCX document that references...

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

EUVD-2026-36737

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

CVE-2026-6047

LibreOffice can import documents in the OOXML format DOCX. A heap buffer overflow existed when replaying deferred parser events for a text box element. A handler object was assumed to be of one type and written to at that type's field layout, but it could be a smaller object, so the write landed...

EUVD-2026-26117

OpenClaw before 2026.4.8 contains a filesystem policy bypass vulnerability in docx upload processing that allows local file reads outside workspace boundaries. Attackers can exploit uploadfile and uploadimage endpoints to access files beyond the intended workspace-only filesystem policy...

PT-2026-35793

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.4.8 Description A filesystem policy bypass exists in the processing of docx uploads, enabling local file reads outside of workspace boundaries. This allows attackers to access files beyond the intended...