Get-ReconInfo

Get-ReconInfo NAME Get-ReconInfo SYNOPSIS 시스템의 연결 및 관련 정보를 나열합니다. 작성자: Chris King @raikiasec SYNTAX Get-ReconInfo DESCRIPTION 이 스크립트는 로컬 시스템에서 다음 명령을 실행하고 출력을 파싱하여 화면에 결과를 출력합니다: netstat -ano ipconfig /all arp -a tasklist /v route print net session net localgroup "Administrators" Get-WmiObject...

vss-fr2system

vss-fr2system Windows에서 임의 파일 읽기 버그를 SYSTEM 셸 로 전환하는 두 개의 작은 도구입니다. vssfreeze/ — 표준 사용자 로 Volume Shadow Copy를 생성하고, SAM/SECURITY/SYSTEM 하이브를 읽을 시간을 벌기 위해 해당 복사본을 열린 상태로 유지합니다. fr2system/ — 복사한 하이브를 가져와 오프라인에서 로컬 NTLM 해시를 해독하고 SYSTEM 셸을 띄웁니다. SYSTEM으로 실행되는 모든 arb-file-read 프리미티브또는...

CVE-2026-0297

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle MitM attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges SYSTEM privileges on Windows, and root privileges on...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

EUVD-2026-53579

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows...

Exploit for Path Traversal in Connectwise Screenconnect

CVE-2024-1708 / CVE-2024-1709 — ConnectWise ScreenConnect Auth...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to disclose sensitive information

The vulnerability of the HTTP.sys driver on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

EUVD-2026-43923

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-43913

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50418

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-50371

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability

...

CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

Windows System Secure Feature Bypass Vulnerability

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

PT-2026-58397

Name of the Vulnerable Software and Affected Versions Windows System affected versions not specified Description Improper access control allows an unauthorized attacker to locally bypass a security feature, which can affect the system. Recommendations At the moment, there is no information about ...

CVE-2026-50418: Improper Access Control

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

SUSE CVE-2026-13844

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

CVE-2026-11636

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11147

Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2021-4480

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execu...