Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2024-21378 — Remote Code Execution in Microsoft Outlook

netspi.com | vulnerability | CVE-2024-21378 | #rce | #microsoft | #red-team | #outlook | #cve-2024-21378 | #mapi | #ruler

Summary

NetSPI details CVE-2024-21378, authenticated RCE in Microsoft Outlook via synced form objects that sidestep the 2017 script allowlisting patch, weaponized through an updated Ruler pentesting tool.
CVE
CVE-2024-21378
Published
Collected

original ↗

Related coverage

Critical · vulnerability · github.com
CVE-2026-60004: Gitea diffpatch Git Hook Installation Remote Code Execution Exploit PoC
When self-registration is enabled, any unauthenticated attacker can create an account and immediately achieve host-level remote code execution on self-hosted Gitea instances.
tool · github.com
Comment2Shell: Zero-Click Pre-Auth RCE Exploit Kit for WordPress (CVE-2026-93485)
Affects all WordPress installations from version 4.7.0 through 7.1.0 without requiring credentials or interaction beyond opening a post. Administrators should verify upgrading to 7.1.1 or backported releases, and monitor server logs for suspicious comment payloads and unexpected plugin uploads.
tool · github.com
PoC for CVE-2026-67401: cPanel/WHM EmailTrack SQL Injection Leading to Root RCE
cPanel is widely used in shared web hosting environments. This vulnerability allows low-privileged tenants with mail permissions to achieve full host takeover as root. Administrators should urgently patch cPanel to the latest builds across all supported series.
research · github.com
[CVE-2024-6100] CyberKimi Benchmarks: Autonomous Exploitation Traces & Evidence
Provides verifiable, transparent evidence of advanced LLMs performing complex, multi-step binary and browser exploitation autonomously under strict ASLR and memory randomization defenses.
vulnerability · bishopfox.com
Master Key Included: Detecting SolarWinds ARM CVE-2026-28326
CVE-2026-28326 is an unauthenticated RCE in SolarWinds ARM where a hardcoded shared secret on TCP 55555 leads to SYSTEM-level code execution. Patch now.
High · vulnerability · github.com
WordPress Core Unauthenticated Path Traversal to LFI & RCE PoC (CVE-2026-87902)
While remote code execution depends on runtime prerequisites like PEAR, the unauthenticated LFI primitive resides directly in WordPress Core and affects all major branches from 4.7.0 through 7.1.1.
back