CVE-2023-36003

CVE-2023-36003: PoC de bypass de Windows Defender Exploit Protection Este repositorio contiene una prueba de concepto PoC para CVE-2023-36003 , una vulnerabilidad crítica de bypass de funciones de seguridad que afecta a Windows Defender Exploit Protection. Información general CVE-2023-36003 es un...

CVE-2024-29988-exploit

CVE-2024-29988-exploit Exploit for Microsoft SmartScreen malicious execution april 2024 Description A critical vulnerability, CVE-2024-29988, has been discovered in Microsoft's April 2024 Patch Tuesday release. This vulnerability allows threat actors to bypass Microsoft's Mark of the Web MotW...

cve-2026-21509-office_security_bypass_reproduction

CVE-2026-21509 — Microsoft Office Security Feature Bypass CVE-2026-21509 is a Microsoft Office security feature bypass vulnerability CVSS 7.8 , actively exploited by APT28 Russian hackers against Ukraine Reliance on untrusted inputs in security decisions CWE-807 — "breaking the kill bit" Allows...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 - Vulnerabilidad de Omisión de la Característica de Seguridad del Shell de Windows Sugerencia de Título del Repositorio: CVE-2026-21510-Windows-Shell-Bypass-Analysis Este README proporciona una visión general completa de CVE-2026-21510 , una vulnerabilidad de día cero de alta...

firewall-cve

firewall-cve Vulnerabilidad de omisión de la función de seguridad de las reglas de firewall de AppContainer de Windows CVE-2021-41338 Vulnerabilidad de seguridad publicada: 12 de octubre de 2021 CNA asignado: Microsoft MITRE CVE-2021-41338 CVSS:3.1 5.5 / 5.0 Vector de ataque Local Complejidad de...

Ashwesker-CVE-2026-21509

🛡️ CVE-2026-21509 — Vulnerabilidad de Día Cero en Microsoft Office Estado: Explotada activamente → Parche de emergencia publicado Gravedad: 🔴 Alta Tipo de Riesgo: Omisión de Funciones de Seguridad 🔍 ¿Qué es? CVE-2026-21509 es una vulnerabilidad grave en Microsoft Office que permite a los atacantes...

CVE-2026-21509-PoC

CVE-2026-21509 — PoC Educativo Simulado para Visibilidad de Defensores ⚠️ Este repositorio proporciona una Prueba de Concepto inofensiva y no explotable. Su propósito es apoyar la investigación defensiva , las pruebas de visibilidad de EDR/AV y la formación. No explota CVE‑2026‑21509 y contiene...

cve-2026-21509-mitigation

Script de Mitigación CVE-2026-21509 Versión en chino tradicional: READMEzh-TW.md Descripción general Este script aplica una mitigación basada en el registro para proteger contra CVE-2026-21509 vulnerabilidad de omisión de la característica de seguridad de Microsoft Office, que ha sido explotada...

CVE-2026-21509

CVE-2026-21509 — Omisión de la Característica de Seguridad OLE de Microsoft Office Informe de investigación por Sentinel AI Defense. Solo análisis defensivo: no se publica aquí ningún exploit funcional ni PoC para una vulnerabilidad explotada activamente. Una omisión de característica de segurida...

CVE-2026-88008

Traefik is an open source HTTP reverse proxy and load balancer. From 2.11.26 until 2.11.57 and 3.7.13, Traefik forwards a client-supplied Connection header requesting Upgrade, the Upgrade: h2c token, and HTTP2-Settings to a shared backend. If the backend accepts h2c and returns 101 Switching...

EUVD-2026-74206

Acrobat Reader is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue requires user interaction in that a victi...

CVE-2026-75726

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

CVE-2026-75726

Adobe Experience Manager is affected by an Improper Input Validation (CWE-20) vulnerability that can lead to a security feature bypass , allowing a low-privileged attacker to gain unauthorized limited write access . Exploitation requires user interaction —the victim must visit a maliciously craft...

EUVD-2026-74145

Adobe Experience Manager is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized limited write access. Exploitation of this issue require...

CVE-2026-81357

Server-side request forgery ssrf in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-78462

Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-72980

Uncontrolled search path element in Windows Hello allows an authorized attacker to bypass a security feature locally...

CVE-2026-69792

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Win32K allows an authorized attacker to bypass a security feature locally...

CVE-2026-69771

Improper link resolution before file access 'link following' in Windows Container Manager Service allows an authorized attacker to bypass a security feature locally...

EUVD-2026-74031

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of this issue does not require user interaction. Scope i...