489 matches found
mitigate-folina
mitigate-folina يخفف من ثغرة "Folina" اليومية الصفرية CVE-2022-30190 و"Search"-Nightmare لا يوجد CVE محدد في الوقت الحالي سيعمل هذا البرنامج النصي على عمل نسخة احتياطية ثم إزالة مفتاح التسجيل المتأثر كما اقترحت Microsoft للتخفيف من CVE-2022-30190. إذا تم تعريف المعامل بـ "-revert" فسيقوم البرنامج...
Follina-MSDT-Vulnerability-CVE-2022-30190-
Follina-MSDT-Vulnerability-CVE-2022-30190- Détection et remédiation de la vulnérabilité Follina MSDT CVE-2022-30190 Pour plus d'informations sur Follina-MSDT-Vulnerability-CVE-2022-30190-, consultez...
CVE-2022-30190_Temporary_Fix
🩹CVE-2022-30190 Временное исправление🩹 Это два скомпилированных Python-скрипта, которые позволяют легко и быстро применить временную защиту от уязвимости CVE-2022-30190 Follina Оба можно было бы запрограммировать лучше, но это просто для того, чтобы внедрить защиту как можно быстрее, и я сделал э...
MsSettingsDelegateExecute
MsSettingsDelegateExecute Contournement de l'UAC sur Windows 10/11 x64 à l'aide de la clé de registre DelegateExecute de ms-settings. Ce projet Visual Studio compilera un binaire x64 statique pour tester ce problème. Licence Ces fichiers sont disponibles sous la licence BSD à 3 clauses...
VirtualLockSensorLPE
VirtualLockSensorLPE Description Preuve de concept PoC d'élévation de privilèges locale pour CVE-2025-0886 ciblant Elliptic Virtual Lock Sensor version 3.1.60531.2 sous Windows, installé par défaut sur certains modèles d'ordinateurs portables Lenovo. Permet l'exécution d'une charge utile dans le...
cve-2022-30190
cve-2022-30190 إصلاح CVE-2022-30190 عن طريق إزالة ms-msdt من سجل Windows الموارد إرشادات مايكروسوفت والحل البديل تقييم Palo Alto...
Fix-WinVerifyTrustSignatureValidationVuln
Fix-WinVerifyTrustSignatureValidationVuln Correction de la vulnérabilité de validation de signature WinVerifyTrust, CVE-2013-39001, QID-3783322 Cette correction est destinée aux ordinateurs Windows 64 bits Ce code PowerShell est une façon de corriger la vulnérabilité - en plus de créer un fichier...
Windows Persistence via UserInitMprLogonScript Registry Key
This Python script demonstrates a Windows persistence technique based on modifying the HKCU\Environment\UserInitMprLogonScript registry value, which allows execution of a program each time the user logs in...
Malicious code in genosys (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2fb27cde30ea3d834e3160e37c203a1f8a271435cf92316a990766c5b8b9791c The campaign is built from a benign-like package e.g. genosys and the malicious dependency e.g. pynosist. The dependency uses a PTH file to trigger malicious...
Microsoft Windows Server Domain Role Detection
SMB-login based domain role detection with powershell fallback for Windows Server. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
EUVD-2026-18935
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on Windows, app.setLoginItemSettingsopenAtLogin: true wrote the executable path to the Run registry key without quoting. If the app ...
CVE-2026-34768 Electron: Unquoted executable path in app.setLoginItemSettings on Windows
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on Windows, app.setLoginItemSettingsopenAtLogin: true wrote the executable path to the Run registry key without quoting. If the app ...
EUVD-2026-18945
Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows...
GHSA-JFQX-FXH3-C62J Electron: Unquoted executable path in app.setLoginItemSettings on Windows
Impact On Windows, app.setLoginItemSettingsopenAtLogin: true wrote the executable path to the Run registry key without quoting. If the app is installed to a path containing spaces, an attacker with write access to an ancestor directory may be able to cause a different executable to run at login...
Restore to AWS EC2 Fails with: "ClientError: Unknown OS / Missing OS files" or "FirstBootFailure"
Challenge When restoring a VM to AWS EC2, one of the following errors occurs: StatusMessage: "CLIENTERROR : ClientError: Unknown OS / Missing OS files." Failed to import machine to Amazon EC2: CLIENTERROR : FirstBootFailure: This import request failed because the instance failed to boot and...
CVE-2020-10642
In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic...
Accessibility Features Persistence Via Debugger Registry Key
This Metasploit module makes it possible to apply the sticky keys hack to a session with appropriate rights. The hack provides a means to get a SYSTEM shell using UI-level interaction at an RDP login screen or via a UAC confirmation dialog. The module modifies the Debug registry setting for certa...
CVE-1999-0589
A system-critical Windows NT registry key has inappropriate permissions...