MrTaherAmine / CVE-2018-10583
An information disclosure vulnerability occurs when LibreOffice 6.0.3 and Apache OpenOffice Writer 4.1.5 automatically process and initiate an SMB connection embedded in a malicious file, as demonstrated by "xlink:href=file://192.168.0.2/test.jpg" within an "office:document-content" element in a ".odt XML document".
☆9Updated 6 years ago
Related projects ⓘ
Alternatives and complementary repositories for CVE-2018-10583
- CMSmap tool v0.6 - Simple CMS Scanner☆15Updated 7 years ago
- ☆11Updated 7 years ago
- Parse X509 certificates to get the (sub)domains in it.☆28Updated 6 years ago
- PHDAYS |||☆17Updated 11 years ago
- Demonstrating why Dynamic Method Invocation with unrestricted method names (the old default of Struts) is dangerous.☆12Updated 6 years ago
- the Open Source Windows Privilege Escalation Guide☆10Updated 7 years ago
- A tool to help you manage your leaks☆34Updated 7 years ago
- BurpSuite Pro Python Extension☆18Updated 11 years ago
- cve-2014-0130 rails directory traversal vuln☆18Updated 7 years ago
- CVE-2017-10271 WEBLOGIC RCE (TESTED)☆37Updated 6 years ago
- Hacking Wordlist collections for password cracking are attached in the below files☆16Updated 6 years ago
- Listing subdomains about a main domain☆58Updated 6 years ago
- ☆13Updated 9 years ago
- Various tools for managing bug bounty recon and exploration.☆46Updated last year
- A C# web handler that is vulnerable to XXE with PoC. This is to serve as an example of what vulnerable C# code looks like.☆26Updated 11 years ago
- BlackHat Europe 2017 Slides☆26Updated 6 years ago
- DoS PoC's for SAP products☆48Updated 6 years ago
- Enumerate subdomains through Virustotal☆32Updated 5 years ago
- Creating a vulnerable environment and the PoC☆15Updated 4 years ago
- ☆20Updated 5 years ago
- ActionScript Proof of Concept to perform cross-domain reads☆16Updated 11 years ago
- CVE-2017-10366: Oracle PeopleSoft 8.54, 8.55, 8.56 Java deserialization exploit☆25Updated 6 years ago
- Generate pentest reports based on github issues.☆17Updated last year
- Advance URL Fuzzing + Whois Domain running on python☆17Updated 2 years ago
- Simple socket-based gateway to the Burp Collaborator☆33Updated 7 years ago