CVE-2026-58068

A vulnerability in Veeam Agent for Microsoft Windows allows a local attacker to trigger a denial-of-service (DoS) condition by terminating arbitrary processes on the system. This issue affects versions 13.0.4.1341 and all earlier version 13 and 6 builds; however, unsupported product versions are ...

Microsoft-Windows-SMBGhost-Vulnerability-Checker---CVE-2020-0796---SMBv3-RCE

أداة فحص ثغرة SMBGhost في Microsoft Windows - CVE-2020-0796 - SMBv3-RCE الماسح مخصص فقط لاختبار ما إذا كان الخادم معرضًا للخطر. وهو غير مخصص للبحث أو التطوير، ومن هنا جاءت الحمولة الثابتة. يتحقق من إصدار SMB 3.1.1 وإمكانية الضغط عبر طلب التفاوض Negotiate Request. يمكن العثور على نسخة من التقاط...

PT-2026-107422

This vulnerability in Veeam Agent for Microsoft Windows allows a low-privileged local user to make the agent write files to arbitrary locations when an administrator installs it...

PT-2026-107430

This vulnerability in Veeam Agent for Microsoft Windows allows any local user to terminate arbitrary processes on the system...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

EUVD-2026-93575

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

CVE-2026-46442-PoC

Preuve de Concept CVE-2026-46442 Avis de recherche académique et défensive Ce dépôt contient une preuve de concept PoC développée strictement à des fins d'analyse académique, de recherche défensive et de validation de vulnérabilité. L'objectif de ce projet est d'aider les chercheurs en sécurité,...

CurveBall

CurveBall CVE-2020-0601 - PoC CVE-2020-0601, communément appelée CurveBall, est une vulnérabilité dans laquelle la signature des certificats utilisant la cryptographie à courbe elliptique ECC n'est pas correctement vérifiée. L'ECC repose sur différents paramètres. Ces paramètres sont normalisés...

Scanners-for-CVE-2020-0796-Testing

Scanners-for-CVE-2020-0796-Testing قائمة الماسحات - ثغرة تنفيذ التعليمات البرمجية عن بُعد في Microsoft Windows SMBv3 CVE-2020-0796 قائمة ماسحات ثغرة تنفيذ التعليمات البرمجية عن بُعد في Microsoft Windows SMBv3 CVE-2020-0796 توجد ثغرة حرجة لتنفيذ التعليمات البرمجية عن بُعد في الطريقة التي يعالج بها...

CVE-2020-0601

سلسلة الحمقى المعروفة باسم CurveBall أو CVE-2020-0601 مجموعة من موارد CVE-2020-0601 ChainOfFools | CurveBall عام ملخص من توجيه وكالة الأمن القومي ينص على ما يلي: اكتشفت وكالة الأمن القومي ثغرة أمنية حرجة CVE-2020-0601 تؤثر على وظائف التشفير في Microsoft Windows®1. تسمح ثغرة التحقق من صحة الشهادات...

CVE-2019-0785

CVE-2019-0785 Microsoft Windows DHCP للاستغلال. الرجاء الانتظار، هل يمكنك؟ أنا قادم!...

CVE-2024-43451-POC

الوصف الاسم : CVE-2024-43451 درجة CVSSv3 : 6.5 الإصدارات المتأثرة : جميع إصدارات مايكروسوفت ويندوز قبل تحديث نوفمبر 2024 CVE-2024-43451 هي ثغرة من نوع zero-day في مايكروسوفت ويندوز تسمح للمهاجمين بالتقاط هاشات كلمات المرور NTLMv2 بأقل تفاعل من المستخدم، مما قد يؤدي إلى سرقة بيانات الاعتماد. تتضمن...

Microsoft Windows dxgkrnl Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the dxgkrnl.sys...

...[ More ]

This Metasploit module exploits CVE-2000-0979, an information disclosure vulnerability in the share-level password authentication of Microsoft Windows 9x/Me SMB servers. The server validates passwords one character at a time, allowing an attacker to enumerate the correct password byte-by-byte bas...

Security Bulletin: Multiple vulnerabilities in IBM Semeru affect IBM Sterling Connect:Direct for Microsoft Windows

Summary There are vulnerabilities in IBM Semeru Runtime version 17 used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVEs CVE-2026-61308, CVE-2026-70907, CVE-2026-60589, CVE-2026-16440 Vulnerability Details...

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google Chrome-Microsoft Windows exploit chain as zero-days through fake websites. The attacks, detected on September 3 and 4, 2026, involved the chaining of two vulnerabilities in Chrome CVE-2026-85046,...

The vulnerability of Microsoft Windows Defender operating systems, which allows a hacker to trigger a service failure.

The vulnerability of Microsoft Windows Defender operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service interruptions...

CVE-2026-92254: Improper Input Validation

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 driver versions 1.3.0.0 and earlier on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and...