Unmasking EvilTokens: Getting to the root of device code phishing

In this article 1. What is device code phishing? 2. EvilTokens platform and operations 3. EvilTokens phishing emails 4. Mitigation and protection guidance 5. Microsoft Defender XDR detections 6. Hunting queries Following its emergence in February 2026, EvilTokens quickly became one of the most...

.NET Framework - Leaking ObjRefs via HTTP .NET Remoting

.NET Framework Information Disclosure Vulnerability id: CVE-2024-29059 info: name: .NET Framework - Leaking ObjRefs via HTTP .NET Remoting author: iamnoooob,rootxharsh,DhiyaneshDk,pdresearch severity: high description: .NET Framework Information Disclosure Vulnerability impact: | Attackers can...

Microsoft Windows Defender DoS

The vulnerability of Microsoft Windows Defender operating systems is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause service interruptions...

Exploit for Use After Free in Microsoft

🛡️ CVE-2026-42978-PoC-Research - Find and Fix Windows Security R...

CVE-2020-0688

CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...

Microsoft XPS Document Writer Code Execution

The vulnerability of the Microsoft XPS Document Writer MXDW driver on Windows operating systems is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Microsoft Office Memory Execution Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Office Memory Execution Arbitrary Code

The vulnerability of Microsoft Office and Microsoft 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2026-92254: Improper Input Validation

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 driver versions 1.3.0.0 and earlier on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and...

CLEANSTART-2026-HB26759 Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization (tenant)

Security vulnerability affects the keycloak package. Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant...

CVE-2026-88097

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges locally...

EUVD-2026-83446

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges locally...

CVE-2026-88097

Microsoft Edge (Chromium-based) is affected by a use-after-free vulnerability that allows an unauthorized, local attacker to elevate privileges . The vulnerability is scored CVSS 3.1: 8.1 (HIGH) with a vector of AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H, indicating high attack complexity but no require...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges locally...

Chromium CVE-2026-91749: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91748: Race condition

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91747: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91746: Integer overflow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91745: Use after free

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...

Chromium CVE-2026-91744: Race condition

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releaseshttps://chromereleases.googleblog.com/2026 for more information...