azure-vulnerability-remediation-project

Vulnerability Research & Remediation: Azure Cloud Infrastructure Project Overview This project documents the end-to-end vulnerability management lifecycle for a cloud-hosted Windows Server 2025 instance CyberVM. The lab demonstrates a proactive approach to identifying, analyzing, and neutralizing...

badsuccessor

BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. Legal Disclaimer This tool is for authorized penetration testing and security research only. Using it agains...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

CVE-2026-24294

CVE-2026-24294 - Local NTLM Reflection LPE via SMB Arbitrary Port Local privilege escalation on Windows Server 2025 via NTLM reflection, abusing the SMB arbitrary port feature introduced in Windows 11 24H2 / Server 2025. Vulnerability Windows 11 24H2 / Server 2025 introduced an SMB client feature...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 🧠 Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...

HomeLab

HomeLab - Network Documentation Overview HomeLab is a GNS3 lab built on a single laptop OMEN 16, i7-14650HX, 32 GB RAM, RTX 4060 8 GB to practice networking, systems administration, and offensive security in one environment. It models a perimeter with a firewall Cisco ASAv, a DMZ Ubuntu Server, a...

CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon crasher PoC Pre-authentication stack buffer overflow in the Netlogon service of Windows Server 2025. A single CLDAP packet UDP/389 from any host on the wire is enough: lsass.exe dies with STATUSSTACKBUFFEROVERRUN 0xc0000409 and the domain controller reboots. Component:...

CVE-2026-50369

CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...

Exploit for CVE-2025-27740

AD CS SKI hijack — a working exploit for CVE-2025-27740 Tooli...

Windows Server 2025 Active Directory Certificate Services Subject Key Identifier Injection

Windows Server 2025 Active Directory Certificate Services contains a weak authentication issue that allows an authorized attacker to inject an arbitrary Subject Key Identifier into a certificate signing request. https://packetstorm.news/download/237875...

CVE-2024-38077

CVE-2024-38077-EXP Fixed code based on pseudocode. Scope EXP: Windows Server 2025 POC: 08-25 Usage options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll path, eg:...

October 26, 2026—KB5134137 (OS Build 26100.33674) Out-of-band

October 26, 2026—KB5134137 OS Build 26100.33674 Out-of-band Applies To Windows Server 2025, all editions This non-security out-of-band OOB update for Windows Server 2025 KB5134137 is cumulative. It includes updates from previous releases, along with additional non-security improvements. Who shoul...

October 13, 2026—KB5126646 (OS Build 26100.33650)

October 13, 2026—KB5126646 OS Build 26100.33650 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5126646, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Windows...

September 8, 2026—KB5122871 (OS Build 26100.33438)

September 8, 2026—KB5122871 OS Build 26100.33438 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5122871, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Window...

KB5126646: Windows Server 2025 Security Update (October 2026)

The remote Windows host is missing security update 5126646. It is, therefore, affected by multiple vulnerabilities - Use after free in Windows Message Queuing Queue Manager allows an unauthorized attacker to execute code over a network. CVE-2026-100202 - Use after free in Microsoft QUIC allows an...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 — LongLogon crasher PoC Pre-authentication s...

ShieldBreak

ShieldBreak - Windows Defender 0day 脆弱性 Microsoft は RoguePlanet 脆弱性 CVE-2026-50656 の適切なパッチ適用に失敗しており、この PoC は完全なパッチバイパスを実証しています。 この PoC は、最新バージョンの Windows 11 25H2 +Canary チャネル と Windows Server 2025 でテストされており、成功率は 100% です。 なお、Windows 10 および対応するサーバーエディション は現在サポートされていませんが、ShieldBreak...

September 14, 2026—KB5129235 (OS Build 26100.33451) Out-of-band

September 14, 2026—KB5129235 OS Build 26100.33451 Out-of-band Applies To Windows Server 2025, all editions This out-of-band OOB update for Windows Server 2025 KB5129235 is a non-security cumulative update. Improvements This out-of-band update contains quality improvements from KB5122871 released...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...