EternalBlue-Exploit-Demonstration

EternalBlue Exploit Demonstration MS17-010 Cybersecurity lab demonstrating exploitation of CVE-2017-0144 EternalBlue using Metasploit against a vulnerable Windows 7 system, achieving SYSTEM-level access via Meterpreter. This project also simulates a WannaCry-style ransomware attack SAFE DEMO and...

EternalBlue-Exploit-Demonstration-MS17-010

EternalBlue Exploit Demonstration MS17-010 Cybersecurity lab demonstrating exploitation of CVE-2017-0144 EternalBlue using Metasploit against a vulnerable Windows 7 system, achieving SYSTEM-level access via Meterpreter. This project also simulates a WannaCry-style ransomware attack SAFE DEMO and...

Patch-the-Path-CVE-2025-55234-Detection-Defense

Patch-the-Path-CVE-2025-55234-Detection-Defense This playbook outlines detection, containment, and remediation strategies for CVE-2025-55234, a critical Windows SMB privilege escalation flaw. By Mark Mallia Introduction In today’s constantly shifting cyber-risk landscape, the ability to pivot fro...

dast

dast CVE-2026-0828 борка Build: Откройте Командную строку разработчика Visual Studio x64 Native Tools и скомпилируйте код : bash cl.exe /W3 /O1 /nologo exploit.c /Fe:exploit.exe Подготовка: Убедитесь, что на тестовой машине установлен уязвимый драйвер Safetica ProcessMonitorDriver.sys. Если его...

CVE-2026-33825

🔨 CVE-2026-33825: BlueHammer Microsoft Defender 권한 상승 📌 개요 CVE-2026-33825 취약점은 "BlueHammer" 라고 불리며, Microsoft Defender의 위협 제거 엔진에서 발생하는 심각한 로컬 권한 상승EoP 결함입니다. 🚨 심각한 영향: 최소 권한을 가진 사용자가 완전히 패치된 Windows 10 및 11 시스템에서 SYSTEM 수준의 전체 액세스 권한을 얻을 수 있습니다. 발견 경위: Microsoft가 공식 패치를 배포하기 전인 2026년 4월 7일 ,...

CVE-2024-43583-PoC

CVE-2024-43583 - Exploit de Elevación de Privilegios en Windows Autor: No0B@ckSappi3 Instagram: No0BackSappi3 Descripción general CVE-2024-43583 es una vulnerabilidad de elevación de privilegios que afecta al componente Winlogon de Microsoft. La explotación de esta falla permite a un usuario con...

CVE-2026-87591

Incorrect authorization in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...

DEBIAN-CVE-2026-87595

Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87503

Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87483

Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87429

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-87429

Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-87483

Incorrect authorization in Browser in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87589

Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-87441

CVE-2026-87441 is a missing authorization vulnerability in the Downloads component of Google Chrome prior to 153.0.8010.36 . A remote attacker can leverage a crafted Chrome extension to bypass system access restrictions, resulting in a high integrity impact without confidentiality or availability...

CVE-2026-87503

CVE-2026-87503 is an inappropriate implementation in the Downloads component of Google Chrome on Android (prior to 153.0.8010.36). A remote attacker can leverage social engineering with a crafted HTML page to bypass system access restrictions, potentially gaining unauthorized access to parts of t...

CVE-2026-87557

CVE-2026-87557 affects Google Chrome prior to 153.0.8010.36 , where a missing authorization in the LocalNetworkAccess component allowed a remote attacker who had already compromised the renderer process to bypass system access restrictions via a crafted HTML page. The vulnerability is rated Mediu...

Linux Distros Unpatched Vulnerability : CVE-2026-87557

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in LocalNetworkAccess in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass...

gardyn

Resumen En febrero de 2025 realicé una investigación de seguridad en un dispositivo Gardyn Home 4.0. Durante mi investigación, descubrí múltiples vulnerabilidades y malas prácticas de seguridad. Al aprovechar estas vulnerabilidades, un atacante podría obtener acceso a nivel de sistema a un...

eternalblue-ms17-010-research

💀 Investigación de Explotación EternalBlue MS17-010 Reproducción controlada de CVE-2017-0144: la vulnerabilidad SMB detrás del brote de ransomware WannaCry ⚠️ Aviso legal: Esta investigación se llevó a cabo en un entorno de laboratorio totalmente aislado y controlado, únicamente con fines...