Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1110 CNY

100%
Buy Us a Coffee

CVE-2018-16858 PoC — LibreOffice 路径遍历漏洞

Source
https://github.com/Henryisnotavailable/CVE-2018-16858-Python
Associated Vulnerability
Title:LibreOffice 路径遍历漏洞 (CVE-2018-16858)
Description:It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bundled with a document. An attacker could craft a document, which when opened by LibreOffice, would execute a Python method from a script in any arbitrary file system location, specified relative to the LibreOffice install location.
Description
Python implementation of CVE-2018-16858
Readme
# CVE-2018-16858-Python
Python implementation of CVE-2018-16858 
Based on work from [here](https://insert-script.blogspot.com/2019/02/libreoffice-cve-2018-16858-remote-code.html) and [here](https://www.exploit-db.com/exploits/46727)
File Snapshot

 [4.0K]  /data/pocs/6e747abbf1cf9ec41dad697699f2a896a0253120
├── [ 28K]  FODT-Template
├── [1.5K]  main.py
└── [ 234]  README.md

0 directories, 3 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →