Get-ReconInfo

Get-ReconInfo 名前 Get-ReconInfo 概要 システムの接続と関連情報を一覧表示します。 作成者: Chris King @raikiasec 構文 Get-ReconInfo 説明 このスクリプトは、ローカルシステムで以下のコマンドを実行し、出力を解析して結果を画面に表示します。 netstat -ano ipconfig /all arp -a tasklist /v route print net session net localgroup "Administrators" Get-WmiObject Win32ComputerSystem.Name...

vss-fr2system

vss-fr2system 两个小型工具，可将 Windows 上的任意文件读取 漏洞转化为 SYSTEM Shell 。 vssfreeze/ —— 以标准用户 身份创建卷影副本，然后保持其打开状态，以便你有足够时间从中读取 SAM/SECURITY/SYSTEM 配置单元 fr2system/ —— 获取你复制出的配置单元，离线解密本地 NTLM 哈希，并弹出 SYSTEM Shell 配合任何以 SYSTEM 身份运行（或能够读取 \?\GLOBALROOT\Device\HarddiskVolumeShadowCopyN... 路径）的任意文件读取原语，这在默认的...

CVE-2026-0297

A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle MitM attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privileges SYSTEM privileges on Windows, and root privileges on...

CVE-2026-50544 NortheBridge/luminalshine has Incorrect Permission Assignment for Critical Resource and Creation of Temporary File in Directory with Insecure Permissions

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at src/platform/windows/misc.cpp lives at C:\ProgramData\LuminalShine\config\apps.json and is created by the SYSTEM service. Under...

EUVD-2026-53579

There is a local privilege escalation vulnerability recently discovered in the NI-PAL kernel driver. This may allow a local, authenticated user to escalate privileges and execute arbitrary code. This vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsoft Windows...

Exploit for Path Traversal in Connectwise Screenconnect

CVE-2024-1708 / CVE-2024-1709 — ConnectWise ScreenConnect Auth...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to disclose sensitive information

The vulnerability of the HTTP.sys driver on Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by security measures...

EUVD-2026-43923

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

EUVD-2026-43913

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50418

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

CVE-2026-50371

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows LUAFV allows an authorized attacker to elevate privileges locally...

CVE-2026-50326 Windows Unified Consent System Elevation of Privilege Vulnerability

...

CVE-2026-50318 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

Windows System Secure Feature Bypass Vulnerability

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

PT-2026-58397

Name of the Vulnerable Software and Affected Versions Windows System affected versions not specified Description Improper access control allows an unauthorized attacker to locally bypass a security feature, which can affect the system. Recommendations At the moment, there is no information about ...

CVE-2026-50418: Improper Access Control

Improper access control in Windows System allows an unauthorized attacker to bypass a security feature locally...

SUSE CVE-2026-13844

Use after free in Updater in Google Chrome on Windows prior to 150.0.7871.47 allowed a local attacker to perform OS-level privilege escalation via a malicious file. Chromium security severity: High...

CVE-2026-11636

Use after free in Autofill in Google Chrome on Windows prior to 149.0.7827.103 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-11147

Use after free in WebML in Google Chrome on Windows prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2021-4480

Dräger Protector Software prior to version 6.4.2 contains a local privilege escalation vulnerability due to insecure file system permissions that allows local attackers to execute arbitrary code with elevated privileges. Attackers can replace binaries or loaded modules on the host system to execu...