827 matches found
ms08-067.py
📖 Overview This repository contains some python scripts implementation for the MS08-067 Windows Server Service vulnerability CVE-2008-4250. This is a classic remote code execution vulnerability affecting older Windows systems. 🛠️ Installation & Usage Prerequisites Python3 Authorized testing...
Kerberos Privilege Escalation
The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
ranger
ranger Una herramienta para ayudar a los profesionales de seguridad a acceder e interactuar con sistemas remotos basados en Microsoft Windows. Este proyecto fue conceptualizado con el pensamiento de que no inventamos el arco ni la flecha, solo una forma más eficiente de usarlos. Ranger es una...
Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets
Threat actors associated with Aurora aka Aur0ra ransomware have been observed using SpaceX's artificial intelligence AI-powered coding assistant Cursor to break into target networks, according to findings from CloudSEK and Gambit Security. The two independent analyses are based on exposed...
Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)
The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...
Windows Win32 kernel Privilege Escalation
The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Push Notification Service Disclosure
The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Remote Desktop Protocol Disclosure Sensitive Information
The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
Windows Runtime Privilege Escalation
The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
EUVD-2026-43897
Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...
Secure Boot Bypass
The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...
Windows Bluetooth Port Driver Exploit
The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...
TCP/IP driver Windows Bypass Security Restrictions
The vulnerability of the TCP/IP driver for Windows operating systems relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...
Windows Function Discovery Service Privilege Escalation
The vulnerability of the Function Discovery Service fdwsd.dll component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain elevated privileges...
CVE-2026-5131
GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...
CVE-2026-5131 Server-Side Request Forgery in GREENmod
GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...
PT-2026-33439
GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...
PT-2026-33497
Name of the Vulnerable Software and Affected Versions Microsoft-signed third-party bootloader affected versions not specified Description A security-feature bypass allows attackers to affect the system. A Microsoft-signed third-party bootloader completely skips signature verification when loading...
Microsoft Function Discovery Service security vulnerabilities
The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...
