CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote-Codeausführung durch Use-After-Free in JScript.dll CVE-2025-30397 🧠 Beschreibung Dieses Repository enthält einen Proof-of-Concept-Exploit PoC für eine Use-After-Free-Schwachstelle in der JScript-Engine jscript.dll, die Windows...

CVE-2025-54918-POC

CVE-2025-54918 – Prova de Conceito PoC ⚠️ Aviso Importante IMPORTANTE: Para testar a CVE-2025-54918 , você deve criar um registro DNS no ambiente do Active Directory de destino. Sempre consulte o cliente e obtenha autorização explícita antes de testar, pois isso pode impactar o comportamento de DN...

badsuccessor

BadSuccessor.py Uma ferramenta de teste de penetração que explora a vulnerabilidade de escalonamento de privilégios dMSA delegated Managed Service Account em ambientes Active Directory do Windows Server 2025. ⚠️ Aviso Legal Esta ferramenta destina-se exclusivamente a testes de penetração...

CVE-2024-38077

CVE-2024-38077-EXP Basierend auf dem Pseudocode reparierter Code. Gültigkeitsbereich EXP：Windows Server 2025 POC：08-25 Verwendung options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPA...

CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon PoC de travamento Estouro de buffer de pilha pré-autenticação no serviço Netlogon do Windows Server 2025. Um único pacote CLDAP UDP/389 de qualquer host na rede é suficiente: o lsass.exe morre com STATUSSTACKBUFFEROVERRUN 0xc0000409 e o controlador de domínio reinicia...

CVE-2026-24294

CVE-2026-24294 - Escalada Local de Privilégios por Reflexão NTLM via Porta Arbitrária SMB Escalada local de privilégios no Windows Server 2025 via reflexão NTLM, abusando do recurso de porta arbitrária SMB introduzido no Windows 11 24H2 / Server 2025. Vulnerabilidade O Windows 11 24H2 / Server 20...

CVE-2026-50369

CVE-2026-50369 reprodutor para uma condição de corrida TOCTOU em rdpcorets.dll!CRdpPipeGfxPlugin::Enable em Windows Server 2025 RDS Session Hosts. reportei isso como um DoS; o caminho de código parece de alguma forma também permitir EoP. este reprodutor é um PoC apenas para o caminho de DoS. Bug...

azure-vulnerability-remediation-project

Pesquisa e Remediação de Vulnerabilidades: Infraestrutura na Nuvem Azure Visão Geral do Projeto Este projeto documenta o ciclo de vida completo de gerenciamento de vulnerabilidades para uma instância do Windows Server 2025 hospedada na nuvem CyberVM. O laboratório demonstra uma abordagem proativa...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Privilegieneskalations-Schwachstelle Windows Kernel Heap-basierter Pufferüberlauf, der lokalen Angreifern erlaubt, Privilegien aufNT AUTHORITY\SYSTEM zu erhöhen. 📖 Überblick CVE-2026-40369 ist eine Privilegieneskalations-Schwachstelle mit hohem Schweregrad , die...

Exploit for Stack-based Buffer Overflow in Microsoft

CVE-2026-41089 — LongLogon crasher PoC Pre-authentication s...

ShieldBreak

ShieldBreak - Windows Defender 0day 脆弱性 Microsoft は RoguePlanet 脆弱性 CVE-2026-50656 の適切なパッチ適用に失敗しており、この PoC は完全なパッチバイパスを実証しています。 この PoC は、最新バージョンの Windows 11 25H2 +Canary チャネル と Windows Server 2025 でテストされており、成功率は 100% です。 なお、Windows 10 および対応するサーバーエディション は現在サポートされていませんが、ShieldBreak...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

ad-hardening-pentest-lab-

Active Directory Hardening & Mutual Pentest Lab A self-contai...

Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025

Automating DISA STIG Compliance for Amazon Linux 2023 and Windows Server 2025, giving defense and federal teams immediate and continuous hardening validation...

Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted

Issue Resolved in September 8 2026 Windows Updates The underlying issue documented in this article was resolved by Microsoft in the September 8 2026 security updates for Windows 11 KB5124008 and Windows Server 2025 KB5122871. After applying the update, the Veeam Recovery Media must be recreated...

KB5099536: Windows Server 2025 Security Update (July 2026)

The remote Windows host is missing security update 5099536. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

June 9, 2026—KB5094125 (OS Build 26100.32995)

None None...

May 12, 2026—KB5087539(OS Build 26100.32860)

None None...

Microsoft Active Directory Domain Services 缓冲区错误漏洞

Microsoft Active Directory Domain Services is a key service provided by Microsoft Corporation in the United States. It is used to manage and organize resources, users, computers, and other security objects within a network. There are security vulnerabilities associated with Microsoft Active...

Microsoft Windows SDK 数字错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a vulnerability in input validation of Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11...