authelia

!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...

CVE-2026-42978-PoC-Research

CVE-2026-42978 PoC & Research — Windows Push Notifications Use-After-Free Race condition in Windows Push Notifications service WpnService that runs as NT AUTHORITY\SYSTEM. An attacker with local access can trigger a use-after-free during platform shutdown and potentially elevate privileges. CVE:...

PrivExchange

PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...

hermes-the-messenger

Hermes the messenger A PoC for achieving persistence via push notifications on Windows For more technical details and background read our blogpost here: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence Usage Before anything else you need to setu...

crackerjack

!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...

CVE-2026-42978-PoC-Research

CVE-2026-42978 Windows Push Notifications Module for AI Security Tool Next-Gen AI Security Ecosystem, Multi-Protocol Terminal & Autonomous Agent Suite Website · Product docs · Host application · Community chat Website navigation: Home · Updates · Downloads · Modules Official host application...

EUVD-2026-106273

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Push Notifications. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to...

CVE-2026-60885

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Push Notifications. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to...

CVE-2026-60885

A vulnerability exists in the Push Notifications component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61 and 8.62 ). A high privileged attacker with access to the physical communication segment of the hardware can exploit this vulnerability to compromise or take over the Peo...

PT-2026-119549

Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Push Notifications. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to...

Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities

Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Push Notifications component, which may allow attackers with high privileges to access the hardware’s physical communication layer, thereby taking control...

CVE-2026-96313

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-83867

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-70198

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

EUVD-2026-99768

Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-96313

A missing authentication flaw in Windows Push Notifications allows an authorized attacker to perform a local privilege escalation . The root cause is identified as CWE-307 (Missing Authentication for Critical Function). The vulnerability has a High severity base score of 7.0, indicating significa...

EUVD-2026-99403

Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-83867

A heap-based buffer overflow vulnerability exists in Windows Push Notifications . This flaw allows an authorized attacker to achieve local privilege elevation . The CVSS 3.1 score of 7.8 indicates a High severity, with high impact on confidentiality, integrity, and availability. No specific explo...

EUVD-2026-99189

Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...

CVE-2026-70198

A Use after free vulnerability exists in Windows Push Notifications , which could allow an authorized attacker to elevate privileges locally . The impact includes high levels of confidentiality, integrity, and availability. While the vulnerability is confirmed, specific exploit details are not pr...