evtx-baseline

evtx-baseline サンプルソフトウェアのインストールと基本的なユーザー操作を含む、良性ソフトウェア（goodware）の evtx ログの例をホストするリポジトリです。 提供 win10-client.tgz：@phantinuss による提供 win11-client.tgz：@frack113 による提供 win7-x86.tgz：@pH-T による提供 win2022-evtx.tgz：@Neo23x0 による提供 win2022-ad.tgz：@frack113 による提供 win2022-0-20348-azure.tgz：@Neo23x0 による提供...

presentations

私のプレゼンテーション その他の資料は私の個人サイトで見つけることができます: https://sites.google.com/site/zhiniangpeng root@kitploit: EXSi の preauth RCE とサンドボックスエスケープの脆弱性の悪用, Typhooncon 2023 OLE オブジェクトは今も危険 — Microsoft Office の悪用, POC 2023 Django-Simple-Captcha — JumpServer の Preauth RCE, Mosec BaijiuCon 2023 APT vs GPT, 2023 年...

CVE-2023-21768

CVE-2023-21768 OS情報 root@kitploit: OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...

NETworkManager v2026.9.7.0

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-문을-여는-TCP-IP-결함 Windows TCP/IP 스택의 치명적인 RCE 취약점CVE-2025-26686이 민감한 메모리 잠금 해제를 방치하여 원격 공격자가 시스템을 탈취할 수 있습니다. 네트워크를 통해 악용 가능하며, 완전한 장악 위험이 있습니다. 지금 패치하세요. 작성자: Mark Mallia 유형: 원격 코드 실행 RCE 심각도: 심각 공격 벡터: 네트워크 기반 영향을 받는 시스템: Windows 10, 11 및 Server 에디션 요약 Microsoft TCP/IP 스택에서...

PT-2026-87199

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-58599 https://t.co/KnKmDk7lXz...

PT-2026-87748

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

PT-2026-87283

🛡️ Windows kernel flaw CVE-2026-68846 spans clients and servers. Patch it, verify the build—and enjoy another reminder that “Important” still means “do it now.” https://t.co/1ZsIcSfclq MicrosoftSecurity Msrc Cve202668846 https://t.co/DCutF2PshC...

PT-2026-88151

Microsoft’s September patch set includes CVE-2026-85880, that includes heap buffer overflow in Windows ALPC which is already exploited for SYSTEM! ALPC hadn’t seen a patched zero-day since 2023. Low-privilege AppContainer → sandbox escape + elevation with no extra interaction. Interesting thing i...

PT-2026-88139

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-83992 https://t.co/cvnfBMK8uB...

PT-2026-87688

We recently used LYNXRAY to independently discover an unauthenticated remote code execution vulnerability affecting certain Windows versions CVE-2026-69732. Unfortunately, MSRC determined that our submission duplicated an earlier report by Seung Chan Kim. Although we narrowly missed the first...

PT-2026-88624

Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-87890

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

KB5122878: Windows 10 version 21H2 / Windows 10 Version 22H2 Security Update (September 2026)

The remote Windows host is missing security update 5122878. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

PT-2026-88609

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

PT-2026-88630

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-88557

Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-88721

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...