Phoenix

Homepage | Wiki | Contributing Phoenix Phoenix is a suite of configurations & advanced modifications for Mozilla Firefox, designed to put the user first - with a focus on privacy, security, freedom, functionality, & usability. Here a detailed list of Phoenix's features & enhancements. !TIP Find a...

pacpoc

PACPoC: A local PoC exploit for CVE-2019-2205 To try out this exploit install the "malicious" app PacTest.apk and make exploit.pac available over http with, for example python -m SimpleHTTPServer. Then go to proxy settings on an Android device, select proxy autoconfig, and enter the URL to...

user.js

This repo and the interactive webpage linked below are the only official sources - do not trust any other sites claiming to be Arkenfox 🟪 user.js A user.js is a configuration file that can control Firefox settings - for a more technical breakdown and explanation, you can read more in the wiki 🟩...

CVE-2024-38143

CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability Successful exploitation can lead to possible escalation to NT AUTHORITY\SYSTEM Background While on a client engagement, I had to test a physical laptop and for some reason, stumbled upon this article by Matthew...

Astra Linux – Vulnerability in Firefox, Thunderbird

If a PAC URL was set, and the server hosting the PAC was unreachable, OCSP requests would be blocked, resulting in incorrect error pages being displayed. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

CVE-2026-85829

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69798

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-100066

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69798

A Use after free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is classified with a High severity rating (CVSS 3.1 score of 7.8). Specific details regarding the root cause component ...

EUVD-2026-99538

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85829

A double free vulnerability exists in the Windows Wired AutoConfig Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-415 . No specific exploitation details or remediation steps are provided in the documents beyond th...

Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

PT-2026-112083

Name of the Vulnerable Software and Affected Versions Windows Wired AutoConfig Service affected versions not specified Description A use-after-free condition in the Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption...

PT-2026-112794

Name of the Vulnerable Software and Affected Versions Windows Wired AutoConfig Service affected versions not specified Description A double free issue in the Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally. A double free occurs when the system attempts...

Microsoft Windows: CVE-2026-69798: Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-85829: Windows Wired AutoConfig Service Elevation of Privilege Vulnerability

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-69798: Use After Free

Use after free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

CVE-2026-85829: Double Free

Double free in Windows Wired AutoConfig Service allows an authorized attacker to elevate privileges locally...

correctiv-chartbuilder (>=0.0.1, <=0.0.5), django-autoconfig (0.3.3) +1 more potentially affected by CVE-2026-15307 via django (1.8.0rc1)

django PYPI version 1.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - correctiv-chartbuilder =0.0.1, =1.0.25, =1.0.27 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...