CVE-2026-33829-Writeup

CVE-2026-33829-Writeup Vulnerability Case Study: CVE-2026-33829 Windows Snipping Tool NTLM Coercion Executive Summary This write-up details the technical replication of CVE-2026-33829 , an information disclosure vulnerability within the modern Windows Snipping Tool application framework. By abusi...

FOLLINA-CVE-2022-30190

FOLLINA-CVE-2022-30190 Implementation of FOLLINA-CVE-2022-30190 This repository contains an exploitation tool for the vulnerability FOLLINA-CVE-2022-30190 Disclaimer This tool developed for security testing and research purposes. by cloning / forking this tool the origin developer withdraw any...

mIRC-CVE-2019-6453

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers Link to the write-up We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument...

cve-2019-6453-poc

CVE-2019-6453: RCE on mIRC 7.55 using argument injection through custom URI protocol handlers We found a Remote Code Execution vulnerability in mIRC through the irc:// URI protocol handler. Because mIRC doesn't use any kind of sigil such as -- to mark the end of the argument list, an attacker is...

CVE-2026-20841

CVE-2026-20841 This content corresponds to a part of what is provided through the Monthly Report for PatchPoint subscribers. Overview Microsoft disclosed a patch for an RCE vulnerability in Notepad in February 2026. The vulnerability is a Command Injection vulnerability that occurs in Notepad,...

Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS : Libwebsockets vulnerabilities (USN-8822-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 26.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-8822-1 advisory. It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A...

CVE-2026-33829

CVE-2026-33829 This repository contains an automated Bash tool designed to passively and controllably audit and verify whether Windows OS assets are vulnerable to insecure manipulation of the search: protocol handler. The script acts as a passive listener, using tcpdump to capture outgoing...

MS-MSDT-Office-RCE-Follina

MS-MSDT-Office-RCE-Follina CVE-2022-30190 | MS-MSDT Follina One Click 1. Create a Docx file. 2. In the Docx file, Insert Object Bitmap Image Ok 3. In the Paint application that launched, save the Paint file. 4. Save your Docx file. 5. Open your file as an archive With 7Zip; Right Click 7Zip Open...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerabilities have been resolved: icmp: Fixed a NULL pointer dereference in icmptagvalidation. icmptagvalidation unconditionally dereferes the result of rcudereferenceinetprotosproto without checking for NULL. The inetprotos array is sparse—only about 15 out o...

CVE-2026-95834

A flaw was found in kitty. A use-after-free vulnerability exists in the drag-and-drop protocol handler when an item transfer is prematurely aborted. A program running within the terminal window can supply a specially crafted byte stream to trigger an error path during data processing, causing the...

USN-8822-1 libwebsockets vulnerabilities

It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A remote attacker could possibly use this issue to cause Libwebsockets to consume excessive resources, resulting in a denial of service. CVE-2026-10650 It was discovered that...

USN-8822-1: Libwebsockets vulnerabilities

It was discovered that Libwebsockets incorrectly handled certain SSH protocol messages in its SSH protocol handler. A remote attacker could possibly use this issue to cause Libwebsockets to consume excessive resources, resulting in a denial of service. CVE-2026-10650 It was discovered that...

CVE-2026-66067

A flaw was found in RabbitMQ. The stream protocol handler does not correctly enforce per-user and per-virtual host vhost connection limits. An authenticated user can exploit this by connecting through port 5552, bypassing the intended connection restrictions. This could lead to resource exhaustio...

Astra Linux – Vulnerability in Firefox

When opening a website using the firefox:// protocol handler, SameSite cookies were not properly respected. This vulnerability affects Firefox versions 123...

Astra Linux – Vulnerability in Firefox

Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox versions earlier than 121...

Linux Distros Unpatched Vulnerability : CVE-2026-19503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's...

Missing Authentication for Critical Function

Overview org.apache.activemq:artemis-server is a server package for the ActiveMQ-Artemis project. Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the CORE protocol handler. An attacker can manipulate broker state and create arbitrary durable...

Missing Authentication for Critical Function

Overview Affected versions of this package are vulnerable to Missing Authentication for Critical Function via the CORE protocol handler. An attacker can manipulate broker state and create arbitrary durable queues by sending unauthenticated requests. Remediation Upgrade...

CVE-2026-19503 Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...

CVE-2026-19503 Insufficient OIDC endpoint validation could invoke unintended local protocol handlers

MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document. A user induced to connect to an uncontrolled MongoDB deployment using MONGODB-OIDC authentication may have an uncontrolled...