CVE-Writeups

CVE-Writeups Informes de investigación de vulnerabilidades de seguridad. CVE-2026-50402: Windows NTFS Elevación de Privilegios CVSS 7.8...

CVE-2024-21412_Water-Hydra

CVE-2024-21412Water-Hydra Distribución de malware a través de CVE-2024-21412 usage Iniciar los servicios en orden y acceder al servidor web webserver Iniciar un servidor web dentro de la carpeta: python -m http.server Initial Access: Uso de la sintaxis de consulta avanzada de Windows AQS para...

evtx-baseline

evtx-baseline 샘플 소프트웨어 설치 및 기본 사용자 상호작용이 포함된 예시 정상 소프트웨어Goodware EVTX 로그를 호스팅하는 저장소입니다. 기부 win10-client.tgz - @phantinuss 제공 win11-client.tgz - @frack113 제공 win7-x86.tgz - @pH-T 제공 win2022-evtx.tgz - @Neo23x0 제공 win2022-ad.tgz - @frack113 제공 win2022-0-20348-azure.tgz - @Neo23x0 제공...

presentations

My presentations More things can be found in my personal site: https://sites.google.com/site/zhiniangpeng root@kitploit: Exploiting preauth RCE and Sandbox escape vulnerabilities in EXSi, Typhooncon 2023 OLE object are still dangerous today — Exploiting Microsoft Office, POC 2023...

CVE-2023-21768

CVE-2023-21768 Información del SO root@kitploit: OS 名称: Microsoft Windows 11 专业版 OS 版本: 10.0.22621 暂缺 Build 22621 LPE...

NETworkManager v2026.9.7.0

NETworkManager A powerful open-source tool for managing networks and troubleshooting network problems! Streamline and simplify your network administration and troubleshooting with NETworkManager. Connect, monitor, and troubleshoot your network and server infrastructure using built-in tools like...

CVE-2025-26686-The-TCP-IP-Flaw-That-Opens-the-Gates

CVE-2025-26686-La-falla-TCP-IP-que-abre-las-puertas Una vulnerabilidad crítica de RCE en la pila TCP/IP de Windows CVE-2025-26686 deja memoria sensible desbloqueada, permitiendo a atacantes remotos secuestrar sistemas. Explotable a través de la red, corre el riesgo de un compromiso total. Parchee...

PT-2026-87199

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-58599 https://t.co/KnKmDk7lXz...

PT-2026-87748

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

PT-2026-87283

🛡️ Windows kernel flaw CVE-2026-68846 spans clients and servers. Patch it, verify the build—and enjoy another reminder that “Important” still means “do it now.” https://t.co/1ZsIcSfclq MicrosoftSecurity Msrc Cve202668846 https://t.co/DCutF2PshC...

PT-2026-88609

Incorrect authorization in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

PT-2026-88557

Race condition in Updater in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-88151

Microsoft’s September patch set includes CVE-2026-85880, that includes heap buffer overflow in Windows ALPC which is already exploited for SYSTEM! ALPC hadn’t seen a patched zero-day since 2023. Low-privilege AppContainer → sandbox escape + elevation with no extra interaction. Interesting thing i...

PT-2026-88139

A new vulnerability with increased severity was disclosed for Microsoft Windows CVE-2026-83992 https://t.co/cvnfBMK8uB...

PT-2026-88624

Use after free in Core in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-87890

Use after free in Windows DHCP Server allows an unauthorized attacker to execute code over a network...

PT-2026-88630

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...

PT-2026-88721

Out of bounds write in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

KB5124012: Windows 11 Version 26H1 Security Update (September 2026)

The remote Windows host is missing security update 5124012. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...