4161 matches found
EUVD-2026-73177
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
PowerShell Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
Microsoft PowerShell Security Feature Bypass Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
log-horizon v0.9.0
Microsoft Sentinel SIEM Log Source Analyzer I've had to answer "what are we actually getting out of these logs?" or "what is the recommended logs for Microsoft Sentinel" more times than I can count. The answer always depend on so many things, but we can be generic. So I built this thingy right...
PT-2026-87209
Name of the Vulnerable Software and Affected Versions Windows PowerShell versions prior to September 2026 Patch Tuesday Description An improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to bypass a security feature over a network....
CVE-2026-69807: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
CVE-2026-62801: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an unauthorized attacker to bypass a security feature over a network...
PT-2026-87733
Improper limitation of a pathname to a restricted directory 'path traversal' in Windows PowerShell allows an authorized attacker to elevate privileges over a network...
veneficus
@abraxasnull · [email protected] · abraxaslabs.tec...
SUSE CVE-2026-71312
rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCII apostrophe even though...
evil-winrm v4.1
Evil-WinRM !Version-shield !Ruby2.3-shield !Gem-Version !License-shield !Docker-shield The ultimate WinRM shell for hacking/pentesting Description & Purpose This shell is the ultimate WinRM shell for hacking/pentesting. WinRM Windows Remote Management is the Microsoft implementation of...
ncentral-compromise-ioc-triage — Updated!
N-central Compromise IoC Triage Read-only defensive hunting toolkit for post-exploitation artifacts associated with N-able N-central authentication bypass vulnerabilities CVE-2026-18556 and CVE-2026-18577. The PowerShell endpoint scanner flags indicators published by N-able and Huntress; it never...
Impersonating IT support: how threat actors turn a remote session into enterprise-wide access
In this article 1. Risk to enterprise environments 2. Attack chain overview 3. Mitigation and response recommendations 4. Learn more Microsoft Threat Intelligence has observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT or helpdesk...
PrivescCheck v2026.09.02-1
PrivescCheck Quickly identify common Windows vulnerabilities and configuration issues that are not necessarily covered by public security standards, and collect useful information for exploitation and post-exploitation tasks. !IMPORTANT A major aspect to be aware of when using this tool is that a...
CVE-2026-19591
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...
CVE-2026-19591
The OpenAI Codex CLI (Windows, macOS, Linux) and Codex Desktop (Windows, macOS) are vulnerable to Remote Code Execution (RCE) due to the improper neutralization of control sequences. A discrepancy exists where the command-safety parser incorrectly interprets PowerShell's stop-parsing token (--%) ...
EUVD-2026-69394
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...
CVE-2026-19591
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...
PT-2026-84355
Name of the Vulnerable Software and Affected Versions OpenAI Codex CLI affected versions not specified OpenAI Codex Desktop affected versions not specified Description OpenAI Codex CLI and Codex Desktop misclassify certain PowerShell commands as safe due to a discrepancy in how the command-safety...
CVE-2026-19591: Improper Neutralization of Escape, Meta, or Control Sequences
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe because their command-safety parser interpreted PowerShell's stop-parsing token --% differently than PowerShell itself. If a user opens an attacker-prepared...