CVE-2018-8174

CVE-2018-8174 MS Word MS WordPad via IE VBS Engine RCE MS Word and MS WordPad RCE via IE VBS RCE https://github.com/smgorelik/Windows-RCE-exploits/tree/master/Web/VBScript Save the index.html to webserver then use the python script to generate RTF Exploit Shellcode is static Down\Exec Putty.exe...

Malicious Package

Overview wordpad-text-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malware in wordpad-text-ui

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in wordpad-text-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4d50aa948a360a788613f1fee19f4d1853c93d8792a5899c620e56d40c53ad On npm install, the declared postinstall hook runs node main.js, which decodes an obfuscated URL stored as...

MAL-2026-5885 Malicious code in wordpad-text-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0d4d50aa948a360a788613f1fee19f4d1853c93d8792a5899c620e56d40c53ad On npm install, the declared postinstall hook runs node main.js, which decodes an obfuscated URL stored as...

EUVD-2018-19960

Malware in sbrugna...

EUVD-2023-40509

Malicious code in bioql PyPI...

MS04-041: A vulnerability in WordPad could allow code execution

MS04-041: A vulnerability in WordPad could allow code execution Applies To Office Products Microsoft has released security bulletin MS04-41. The security bulletin contains all the relevant information about the security update, including file manifest information and deployment options. To view t...

Unmasking the Hidden Threat: Inside a Sophisticated Excel-Based Attack Delivering Fileless Remcos RAT

Unmasking the Hidden Threat: Inside a Sophisticated Excel-Based Attack Delivering Fileless Remcos RAT By Trellix · September 11, 2024 This blog was also written by Trishaan Kalra Introduction In the rapidly evolving landscape of cybersecurity, attackers are continuously refining their methods to...

September 12, 2017—KB4039111

September 12, 2017—KB4039111 Applies To Windows Embedded Standard 2009 Windows Embedded POSReady 2009 Improvements and fixes This update includes quality improvements. No new operating system features are being introduced in this update. Key changes include: Addressed issue where the WordPad...

August 28, 2017—KB4039873 (Update for Preview of Monthly Rollup)

August 28, 2017—KB4039873 Update for Preview of Monthly Rollup Applies To Windows Server 2012 Standard Improvements and fixes This non-security update addresses an issue with WSUS update metadata processing that can cause some clients to time out with a 0x8024401c error. If you installed earlier...

August 15, 2017—KB4034659 (Preview of Monthly Rollup)

August 15, 2017—KB4034659 Preview of Monthly Rollup Applies To Windows Server 2012 Windows Embedded 8 Standard Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4034665 released August 8, 2017 and also includes these new quality improvements as ...

August 15, 2017—KB4034670 (Preview of Monthly Rollup)

August 15, 2017—KB4034670 Preview of Monthly Rollup Applies To Windows 7 Service Pack 1 Windows Server 2008 R2 Service Pack 1 Improvements and fixes This non-security update includes improvements and fixes that were a part of KB4034664 released August 8, 2017 and also includes these new quality...

MS09-010: Description of the update for Windows WordPad Converter: April 14, 2009

MS09-010: Description of the update for Windows WordPad Converter: April 14, 2009 Applies To Microsoft Windows Server 2003 Service Pack 1 Microsoft Windows XP Professional x64 Edition Microsoft Windows Server 2003 Service Pack 2 Microsoft Windows XP Professional x64 Edition Microsoft Windows XP...

Microsoft WordPad Information Disclosure Vulnerability

Microsoft WordPad is a word processor from Microsoft USA. The Microsoft WordPad information disclosure vulnerability can be exploited by an attacker to obtain sensitive information...

Search component Windows Bypass Security Restrictions

The vulnerability of the WordPad text editor on the Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions from a remote location...

WordPad Disclosure

The vulnerability of the WordPad text editor on the Windows operating system is related to the disclosure of NTLM passwords. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

Microsoft patches 12 critical vulnerabilities, nine of which are in Layer 2 Tunneling Protocol

Microsoft disclosed 104 vulnerabilities in its extensive range of software and services, the most in a single Patch Tuesday since July. What is most notable is that this batch of vulnerabilities includes 12 that are considered "critical," nine of which are remote code execution vulnerabilities in...

Microsoft Releases October 2023 Patches for 103 Flaws, Including 2 Active Exploits

Microsoft has released its Patch Tuesday updates for October 2023, addressing a total of 103 flaws in its software, two of which have come under active exploitation in the wild. Of the 103 flaws, 13 are rated Critical and 90 are rated Important in severity. This is apart from 18 security...

Patch Tuesday - October 2023

Microsoft is addressing 105 vulnerabilities this October Patch Tuesday, including three zero-day vulnerabilities, as well as 12 critical remote code execution RCE vulnerabilities, and one republished third-party vulnerability. WordPad: zero-day NTLM hash disclosure Another Patch Tuesday, another...