370 matches found
azure-vulnerability-remediation-project
Vulnerability Research & Remediation: Azure Cloud Infrastructure Project Overview This project documents the end-to-end vulnerability management lifecycle for a cloud-hosted Windows Server 2025 instance CyberVM. The lab demonstrates a proactive approach to identifying, analyzing, and neutralizing...
badsuccessor
BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. Legal Disclaimer This tool is for authorized penetration testing and security research only. Using it agains...
CVE-2026-40369
🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...
CVE-2026-24294
CVE-2026-24294 - Local NTLM Reflection LPE via SMB Arbitrary Port Local privilege escalation on Windows Server 2025 via NTLM reflection, abusing the SMB arbitrary port feature introduced in Windows 11 24H2 / Server 2025. Vulnerability Windows 11 24H2 / Server 2025 introduced an SMB client feature...
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-
CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 🧠 Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...
CVE-2025-54918-POC
CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...
HomeLab
HomeLab - Network Documentation Overview HomeLab is a GNS3 lab built on a single laptop OMEN 16, i7-14650HX, 32 GB RAM, RTX 4060 8 GB to practice networking, systems administration, and offensive security in one environment. It models a perimeter with a firewall Cisco ASAv, a DMZ Ubuntu Server, a...
CVE-2026-41089-PoC
CVE-2026-41089 — LongLogon crasher PoC Pre-authentication stack buffer overflow in the Netlogon service of Windows Server 2025. A single CLDAP packet UDP/389 from any host on the wire is enough: lsass.exe dies with STATUSSTACKBUFFEROVERRUN 0xc0000409 and the domain controller reboots. Component:...
CVE-2026-50369
CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...
Exploit for CVE-2025-27740
AD CS SKI hijack — a working exploit for CVE-2025-27740 Tooli...
Windows Server 2025 Active Directory Certificate Services Subject Key Identifier Injection
Windows Server 2025 Active Directory Certificate Services contains a weak authentication issue that allows an authorized attacker to inject an arbitrary Subject Key Identifier into a certificate signing request. https://packetstorm.news/download/237875...
CVE-2024-38077
CVE-2024-38077-EXP Fixed code based on pseudocode. Scope EXP: Windows Server 2025 POC: 08-25 Usage options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll path, eg:...
October 26, 2026—KB5134137 (OS Build 26100.33674) Out-of-band
October 26, 2026—KB5134137 OS Build 26100.33674 Out-of-band Applies To Windows Server 2025, all editions This non-security out-of-band OOB update for Windows Server 2025 KB5134137 is cumulative. It includes updates from previous releases, along with additional non-security improvements. Who shoul...
KB5125471 - Cumulative Update 10 for SQL Server 2025
KB5125471 - Cumulative Update 10 for SQL Server 2025 Release Date: October 22, 2026 Version: 17.0.5035.5 Summary This article describes Cumulative Update 10 CU10 for Microsoft SQL Server 2025. This update package contains 37 fixes that were issued after the release of SQL Server 2025 Cumulative...
KB5128492 - Description of the security update for SQL Server 2025 GDR: October 13, 2026
KB5128492 - Description of the security update for SQL Server 2025 GDR: October 13, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: October 13, 2026 Version: 17.0.1145.4 Summary Known issues in this update Improvements and fixes include...
September 8, 2026—KB5122871 (OS Build 26100.33438)
September 8, 2026—KB5122871 OS Build 26100.33438 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5122871, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Window...
October 13, 2026—KB5126646 (OS Build 26100.33650)
October 13, 2026—KB5126646 OS Build 26100.33650 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5126646, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Windows...
KB5126967 - Description of the security update for SQL Server 2025 CU9: October 13, 2026
KB5126967 - Description of the security update for SQL Server 2025 CU9: October 13, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: October 13, 2026 Version: 17.0.5015.4 Summary Known issues in this update Improvements and fixes include...
KB5126646: Windows Server 2025 Security Update (October 2026)
The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...