533 matches found
authelia
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...
CVE-2026-42978-PoC-Research
CVE-2026-42978 PoC e Investigación — Use-After-Free en Notificaciones Push de Windows Condición de carrera en el servicio de Notificaciones Push de Windows WpnService que se ejecuta como NT AUTHORITY\SYSTEM. Un atacante con acceso local puede desencadenar un use-after-free durante el apagado de l...
PrivExchange
PrivExchange 博客 通过一个 API 调用从域用户到域管理员：利用 Exchange 的配套 POC 工具。 需求 这些工具需要 impacket。你可以通过 pip install impacket 从 pip 安装，但建议使用 GitHub 上的最新版本。 privexchange.py 此工具简单地登录 Exchange Web Services 以订阅推送通知。这将使 Exchange 回连到您并以系统身份进行身份验证。 httpattack.py 可与 ntlmrelayx.py 配合使用的攻击模块，无需凭据即可执行攻击。使用方法： 修改 httpattack.py...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
CVE-2026-42978-PoC-Research
CVE-2026-42978 Módulo de Notificaciones Push de Windows para la Herramienta de Seguridad con IA Ecosistema de Seguridad con IA de Nueva Generación, Terminal Multiprotocolo y Suite de Agentes Autónomos...
hermes-the-messenger
Hermes el mensajero Un PoC para lograr persistencia mediante notificaciones push en Windows Para más detalles técnicos y contexto, lee nuestro artículo del blog aquí: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence Uso Antes que nada, necesitas...
CVE-2026-69300
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69300
CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...
EUVD-2026-73441
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...
EUVD-2026-73426
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-73373
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
CVE-2026-62697 is a use after free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact to confident...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62690
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
