ranger

ranger 一个支持安全专业人员访问和与远程基于Microsoft Windows系统交互的工具。 这个项目的构思源于这样的想法：我们并没有发明弓箭，只是找到了一种更高效的用法。 Ranger是一个命令行驱动的攻击和渗透测试工具，能够使用实例化的投石车服务器向Windows系统投送能力。只要用户拥有一组凭据或哈希集（NTLM、LM、LM:NTLM），就可以访问信任范围内的系统。...

The vulnerability of the Kerberos protocol for Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Kerberos protocol for Windows operating systems is related to errors in the mechanism for handling relative pathnames to the directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ms08-067.py

📖 概述 此仓库包含 MS08-067 Windows Server Service 漏洞（CVE-2008-4250）的一些 Python 脚本实现。这是一个影响旧版 Windows 系统的经典远程代码执行漏洞。 🛠️ 安装与使用 前置条件 Python3 授权测试环境 🤔如何使用？ 首先，打开 Shell 或 Cmd。然后 👉 运行以下命令： git clone https://github.com/BinRacer/ms08-067.py.git cd ms08-067.py pip install -r requirements.txt python...

Wazuh Server 4.6.0 < 4.14.6 SQL Injection (CVE-2026-49392)

The version of Wazuh Server on the remote host is at least 4.6.0 and prior to 4.14.6. It is, therefore, affected by a SQL injection vulnerability: - DB::getFile and DB::searchFile concatenate a monitored file path into SQLite row filters without proper escaping on non-Windows systems. A local use...

The vulnerability of the Win32 kernel subsystem in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Win32 kernel subsystem in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Push Notification Service allows a perpetrator to disclose protected information on Windows operating systems.

The vulnerability of the Windows Push Notification Service in operating systems related to Windows is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of remote desktop protocol (RDP) clients for Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of remote desktop protocol RDP clients for Windows operating systems relates to the use of uninitialized resources. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of the Windows Runtime component in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the Windows Runtime component in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

EUVD-2026-43897

Improper access control in Windows Operating Systems allows an authorized attacker to elevate privileges locally...

The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Bluetooth Port Driver driver in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain increased privileges...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a hacker to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of the TCP/IP driver for Windows operating systems allows attackers to circumvent security restrictions.

The vulnerability of the TCP/IP driver for Windows operating systems relates to bypassing authentication using an alternative path or channel. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions remotely...

The vulnerability of the Function Discovery Service (fdwsd.dll) in Windows operating systems allows a hacker to escalate their privileges.

The vulnerability of the Function Discovery Service fdwsd.dll component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

CVE-2026-5131 Server-Side Request Forgery in GREENmod

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

CVE-2026-5131

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

PT-2026-33439

GREENmod uses named pipes for communication between plugins, the web portal, and the system service, but the access control lists for these pipes are configured incorrectly. This allows an attacker to communicate with the stream and upload any XML or JSON file, which will be processed by the name...

PT-2026-33497

Name of the Vulnerable Software and Affected Versions Microsoft-signed third-party bootloader affected versions not specified Description A security-feature bypass allows attackers to affect the system. A Microsoft-signed third-party bootloader completely skips signature verification when loading...

Microsoft Function Discovery Service 安全漏洞

The Microsoft Function Discovery Service is a background service provided by Microsoft Corporation. There are security vulnerabilities associated with the Microsoft Function Discovery Service. Attackers can exploit these vulnerabilities to gain higher privileges. The following products and versio...

infosec-notebook

infosec-notebook Personal cybersecurity notes and references...

CVE-2026-4482

The installer certificate files in the …/bootstrap/common/ssl folder do not seem to have restricted permissions on Windows systems users have read and execute access. For the client.key file in particular, this could potentially lead to exploits, as this exposes agent identity material to any...