EUVD-2026-122338

Double free in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-122012

Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally...

EUVD-2026-121712

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...

Vulnerabilities in Microsoft Windows

Microsoft has identified 666 vulnerabilities in Windows. Malicious actors can exploit these vulnerabilities to carry out attacks that can cause various types of damage, as listed in the table below. Microsoft has identified 666 vulnerabilities in Windows. The 32 most severe vulnerabilities are...

CVE-2026-119817

Double free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-105506

Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally...

CVE-2026-102868

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...

HTTP-Shell

HTTP-Shell HTTP-Shell is Multiplatform Reverse Shell. This tool helps you to obtain a shell-like interface on a reverse connection over HTTP. Unlike other reverse shells, the main goal of the tool is to use it in conjunction with Microsoft Dev Tunnels, in order to get a connection as close as...

EUVD-2026-122433

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-119938

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-119817

Double free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-105506

Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally...

EUVD-2026-121507

Access of resource using incompatible type 'type confusion' in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-97013

Access of resource using incompatible type 'type confusion' in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-102868

Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...

armory

dM. ,MMb d'YM. ,P Mb MM 6MM MM 6MMb 6MMb 6MMMMMb MM 6MM MM M' d' YM. MM69 " MM69 MM69 Mb 6M' Mb MM69 " Mb d' ,PMbMMMMMMMMMMMMMMYM.,P d' YM. MM MM MM MM MM MM MM MM M \ ,MMMMMMMMbMMMMMMMMMMMMMMMbd'\ d' YM. MM MM MM MM YM. ,M9 MM YMP dM dMMMM MM MM MM YMMMMM9 MM M d' 8,P YMM Description This is...

smtpshell

smtpshell A simple Reverse Shell that can communicate through Gmail SMTP or any other SMTP to evade network restrictions Note: This reverse shell communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so gmail...

zi

Zi Manage your Zsh plugins, snippets, and command-line tools. Quick start · Documentation · Releases · Discussions Zi is the Z-Shell ecosystem's plugin manager, formerly known as zplugin and zinit. Features Responsive startup: defer plugin loading until after the first prompt with Turbo mode...

CVE-2026-126042

VNote 3.11.0 before 4.12.0 contains an OS command injection vulnerability in its Tasks feature: magic variables such as $bufferName and $selectedText are substituted into a shell command string without escaping. Attackers can share a notebook containing a note whose filename or text includes shel...

hal

Welcome to HAL! HAL /hel/ is a comprehensive netlist reverse engineering and manipulation framework. Navigation 1. Introduction 2. Build Instructions 3. Quickstart Guide 4. Academic Context Introduction What the hell is HAL? Virtually all available research on netlist analysis operates on a...