995 matches found
raven
Raven 用于Websocket的CobaltStrike外部C2 附加信息：https://www.cobaltstrike.com/help-externalc2 服务器构建（Ubuntu） 将服务器文件夹复制到您的VPS。 以root或使用sudo运行./setup.sh 客户端构建（Windows） 将客户端文件夹复制到Windows开发主机。 安装Windows 10、8.1或7 SDK 验证MSBuild是否已安装，并注意注册表项中的MSBuild工具版本：HKLM:\SOFTWARE\Microsoft\MSBuild\ToolsVersionsVersion...
Citrix_Secure_Access_LPE_0DAY
Citric Secure Access 本地权限提升 我发现了 Citrix Secure Access Windows 客户端中的一个本地权限提升漏洞。该漏洞允许具有特权的管理员注入恶意负载，以获取 NT Authority 权限。 受影响的 Citrix Secure Access 版本为 23.1.1.11 及更高版本。 以下为供您参考的概念验证（PoC）：...
GlobalUnProtect
GlobalUnProtect 用于解密和收集 Windows 客户端安装中的 GlobalProtect 配置、Cookie 和 HIP 文件的 PoC 工具。 博客文章：https://rotarydrone.medium.com/4a1d8fc7773e 用法 可独立运行，也可通过 execute-assembly 或等效方式在内存中运行。将所有内容收集到内存中的 zip 文件，并写入指定位置。 GlobalUnProtect.exe Usage: GlobalUnProtect.exe C:\Path\To\Output.zip GlobalUnProtect.exe...
CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool
🔍 CVE-2026-3502 扫描器 - TrueConf 漏洞检测工具 ⚠️ 警告 仅用于教育目的和授权测试。 📋 描述 用于 CVE-2026-3502 的检测工具。扫描未验证更新的 TrueConf 服务器，检测易受攻击的 Windows 客户端（≤8.5.3.884），并搜索 TrueChaos 的 IOC：PowerISO、注册表持久化和计划任务。 📦 安装 git clone https://github.com/tu-usuario/CVE-2026-3502-Scanner.git cd CVE-2026-3502-Scanner pip install -r...
CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-
CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---本地权限提升-PowerShell- Druva inSync Windows Client 6.6.3 - 本地权限提升 PowerShell 修改后可使用系统权限获取 Reverse Shell。...
CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via via an exposed minifilter communication port...
PT-2026-87178
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper access control via...
PALLET CONTROL products vulnerable to improper access control
Overview PALLET CONTROL products provided by JAL Digital Co.,Ltd. include multiple service programs that run in the background and provide certain functions. However, access to these service programs is not properly restricted, allowing non-administrative users to access them. Improper access...
UBUNTU-CVE-2026-68579
FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...
CVE-2026-67305
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
EUVD-2026-51862
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-67305
FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...
CVE-2026-67305
FreeRDP Windows client (before 3.29.0) has a heap buffer overflow in the clipboard virtual channel (CLIPRDR_FILE_CONTENTS_RESPONSE PDUs) due to lack of validation of the server-provided size against the destination buffer. A malicious RDP server could send a payload larger than requested, causing...
PT-2026-67285
Name of the Vulnerable Software and Affected Versions FreeRDP Windows client versions prior to 3.29.0 Description A heap buffer overflow occurs in the clipboard virtual channel when processing CLIPRDR FILE CONTENTS RESPONSE PDUs Protocol Data Units because the server-provided size is not validate...
CVE-2026-53410
CVE-2026-53410 describes a TOCTOU race condition in the installation and uninstallation flow of certain Zoom Clients for Windows that could allow an authenticated local user to escalate privileges. Affected components include Zoom Workplace for Windows, Zoom Workplace VDI Client, Zoom Workplace V...
CVE-2026-40952
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
CVE-2026-40952 Privilge misconfiguration in Secure Access installers
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
CVE-2026-40952: Incorrect Default Permissions
CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...
