545 matches found
authelia
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...
CVE-2026-42978-PoC-Research
CVE-2026-42978 PoC & Research — Windows Push Notifications Use-After-Free Race condition in Windows Push Notifications service WpnService that runs as NT AUTHORITY\SYSTEM. An attacker with local access can trigger a use-after-free during platform shutdown and potentially elevate privileges. CVE:...
PrivExchange
PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
CVE-2026-42978-PoC-Research
CVE-2026-42978 AIセキュリティツール向けWindowsプッシュ通知モジュール 次世代AIセキュリティエコシステム、マルチプロトコルターミナル & 自律エージェントスイート ウェブサイト · 製品ドキュメント · ホストアプリケーション · コミュニティチャット ウェブサイトナビゲーション: ホーム · アップデート · ダウンロード · モジュール 公式ホストアプリケーション 製品: AI Security Tool サイト: zerodayevil.github.io ドキュメント:...
hermes-the-messenger
Hermes the messenger Windows でプッシュ通知を介して永続化を実現する PoC 技術的な詳細と背景については、こちらのブログ記事をお読みください: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence 使い方 何はともあれ、Azure のセットアップが必要です。次に、プッシュ通知のために自身を登録するため、実行可能ファイルを一度実行する必要があります。引数として Azure アプリのオブジェクト ID...
CVE-2026-69300
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69300
CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...
EUVD-2026-73441
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-73426
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...
EUVD-2026-73373
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
CVE-2026-62697 is a use after free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact to confident...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62690
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
