EDD

CodeFactor EDD Enumerate Domain Data（枚举域数据）旨在类似于 PowerView，但基于 .NET。PowerView 本质上是终极的域枚举工具，我们希望有一个我们自己开发的 .NET 实现。该工具主要通过查看各种现有项目中不同功能的实现，并将它们整合到 EDD 中而构建的。 WPF 前端 使用方法 要使用 EDD，只需调用应用程序，提供要运行的函数（如下所列），并提供该函数所需的任何可选/必需参数。 参数： root@kitploit: -f, --function=VALUE 你要使用的函数 -o, --output=VALUE 保存文件的路径 -...

Microsoft Security Advisory CVE-2026-70354 – .NET Core Remote Code Execution Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An out-of-bounds write in .NET...

Out-of-bounds Write

Overview Affected versions of this package are vulnerable to Out-of-bounds Write via the process. An attacker can execute arbitrary code with high confidentiality, integrity, and availability impact by triggering an out-of-bounds write through crafted input during local execution with required us...

Microsoft Security Advisory CVE-2026-62886 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An integer overflow or...

Microsoft Security Advisory CVE-2026-50650 – .NET Elevation of Privilege Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Windows Presentation Foundation WPF. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. An elevation of privilege...

CVE-2026-0626

The WPFunnels – Easy Funnel Builder To Optimize Buyer Journeys And Get More Leads & Sales plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpfoptinform' shortcode in all versions up to, and including, 3.7.9 due to insufficient input sanitization and output escaping of th...

CVE-2026-0626 WPFunnels <= 3.7.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'wpf_optin_form' Shortcode

The WPFunnels – Easy Funnel Builder To Optimize Buyer Journeys And Get More Leads & Sales plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpfoptinform' shortcode in all versions up to, and including, 3.7.9 due to insufficient input sanitization and output escaping of th...

CVE-2025-23933

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in wpfreeware WpF Ultimate Carousel wpf-ultimate-carousel allows Stored XSS.This issue affects WpF Ultimate Carousel: from n/a through = 1.0.11...

EUVD-2014-9640

Malware in sbrugna...

EUVD-2024-48474

Malicious code in bioql PyPI...

EUVD-2024-32863

Malicious code in bioql PyPI...

EUVD-2025-10017

Malicious code in bioql PyPI...

EUVD-2024-33556

Malicious code in bioql PyPI...

EUVD-2024-49084

Malicious code in bioql PyPI...

EUVD-2024-48473

Malicious code in bioql PyPI...

EUVD-2025-3548

Malicious code in bioql PyPI...

April 8, 2025-KB5055170 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server 2016

None None...

CVE-2025-31488 Plain Craft Launcher's custom homepage can use Internet Explorer to load web pages with the help of controls such as WebBrowser

Plain Craft Launcher PCL is a launcher for Minecraft. PCL allows users to use homepages provided by third parties. If controls such as WebBrowser are used in the homepage, WPF will use Internet Explorer to load the specified webpage. If the user uses a malicious homepage, the attacker can use IE...

Enabling WPF Rendering for Citrix HDX on Multi-Session VDAs

Overview Windows Presentation Foundation WPF applications can leverage GPU acceleration in Citrix Virtual Apps and Desktops CVAD environments running Windows Multi-session OS. By enabling WPF rendering on the server’s GPU, this reduces CPU load and improves graphics performance for WPF...

Improper Isolation or Compartmentalization

Overview Affected versions of this package are vulnerable to Improper Isolation or Compartmentalization that allows an attacker who can convince a user to follow a malicious link to escape sandbox protections, due to a logic error in the Mojo component. This vulnerability does not enable code...