CVE-2023-36884-Scripts-for-Intune-Remediation-SCCM-Compliance-Baseline

Este repositorio no tiene un README...

OutOfTune

OutOfTune Inspirado por el Pytune original, OutOfTune registra un dispositivo rogue en Entra ID, lo inscribe en Intune MDM y verifica el estado de cumplimiento resultante. Solo es compatible con dispositivos Windows, ya que ese era mi objetivo principal; posiblemente agregue otros en el futuro...

Maestro

Maestro Maestro هي أداة ما بعد الاستغلال مصممة للتفاعل مع Intune/EntraID من وكيل C2 على محطة عمل المستخدم دون الحاجة إلى معرفة كلمة مرور المستخدم أو تدفقات مصادقة Azure أو التلاعب بالرموز أو وحدة تحكم إدارة قائمة على الويب. تجعل Maestro التفاعل مع Intune وEntraID وخدمات Azure أخرى محتملة من C2 أس...

CloudSec

Kit de Seguridad en la Nube El Arte de la Explotación de la Nube Bienvenido al Kit de Seguridad en la Nube: un recurso especializado diseñado para investigadores de seguridad ofensiva, red teamers y adversarios. Este repositorio está dedicado a la weaponización sistemática de vulnerabilidades,...

CVE-2022-41099-Fix

Je ne fournis aucune responsabilité ni garantie concernant ce script, veuillez le tester complètement avant utilisation. CVE-2022-41099-Fix Mettre à jour le fichier WINRE.WIM pour corriger CVE-2022-41099 REF: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-41099 Catalogue Microsoft...

BlackLotus

BlackLotus BlackLotus, também conhecido como CVE-2023-24932, scripts de remediação para Intune, ConfigMgr e uso ad-hoc genérico. Postagem do blog: https://ajf.one/blacklotus Notas Gerais Estes scripts de remediação NÃO iniciam nenhuma reinicialização. Eles foram projetados para serem executados '...

Follina-Workaround-CVE-2022-30190

Follina の回避策 CVE-2022-30190 説明 この2つのスクリプトは、MSRCのブログに詳述されているCVE-2022-30190の脆弱性を緩和するためにMicrosoftが提供する回避策を適用し、また公式パッチがリリースされた場合には回避策を復元するために使用できます。 最初のスクリプト 'FollinaMitigation.ps1' は、レジストリキーをバックアップした後、回避策を適用するためにそれを削除します。 2番目のスクリプト 'FollinaImportKey.ps1' は、以前にエクスポートされたレジストリキーをインポートします。 詳細はこちらをご覧ください...

PrintNightmare-CVE-2021-34527

PrintNightmare CVE-2021-34527 À l'heure actuelle, vous avez très probablement déjà entendu parler de la vulnérabilité zero-day CVE-2021-34527 dans toutes les versions de Windows depuis 2003. Bien qu'un correctif soit déployé par Microsoft...

YellowKey-WinRE-Remediation

Rimedio WinRE per YellowKey Pacchetto di rimedio Intune per la mitigazione del bypass di BitLocker/WinRE CVE-2026-45585 YellowKey descritto nella procedura fornita. Questo pacchetto rimuove autofstx.exe dal valore BootExecute dell'immagine WinRE offline e aggiorna la registrazione di WinRE in mod...

YellowKey-BitLocker-Bypass-CVE-2026-45585-Detect-Fix-Automatically-via-Microsoft-Intune

Questo repository non contiene un README...

EUVD-2026-17983

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only authenticated himmelblau users whose...

CVE-2026-31979

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the task...

CISA Urges Endpoint Management System Hardening After Cyberattack Against US Organization

CISA is aware of malicious cyber activity targeting endpoint management systems of U.S. organizations based on the March 11, 2026 cyberattack against U.S.-based medical technology firm Stryker Corporation, which affected their Microsoft environment.1 To defend against similar malicious cyber...

EUVD-2026-11332

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Prior to 3.1.0 and 2.3.8, the himmelblaud-tasks daemon, running as root, writes Kerberos cache files under /tmp/krb5cc without symlink protections. Since commit 87a51ee, PrivateTmp is explicitly removed from the task...

EUVD-2026-11321

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From 3.0.0 to before 3.1.0, if Himmelblau is deployed without a configured tenant domain in himmelblau.conf, authentication is not tenant-scoped. In this mode, Himmelblau can accept authentication attempts for...

EUVD-2019-9830

Malware in sbrugna...

EUVD-2021-18852

Malware in sbrugna...

EUVD-2024-23477

Malicious code in bioql PyPI...

EUVD-2025-23414

Malicious code in bioql PyPI...

EUVD-2022-29346

Malicious code in bioql PyPI...