694 matches found
PrivExchange
PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...
authelia
!OpenSSF Scorecardhttps://shieldcn.dev/badge/dynamic/json.svg?url=https://img.shields.io/ossf-scorecard/github.com/authelia/authelia.json&query=$.message&label=openssf%20scorecard&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmc...
hermes-the-messenger
Hermes the messenger A PoC for achieving persistence via push notifications on Windows For more technical details and background read our blogpost here: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence Usage Before anything else you need to setu...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
CVE-2026-42978-PoC-Research
CVE-2026-42978 Windows Push Notifications Module for AI Security Tool Next-Gen AI Security Ecosystem, Multi-Protocol Terminal & Autonomous Agent Suite Website · Product docs · Host application · Community chat Website navigation: Home · Updates · Downloads · Modules Official host application...
CVE-2026-42978-PoC-Research
CVE-2026-42978 PoC & Research — Windows Push Notifications Use-After-Free Race condition in Windows Push Notifications service WpnService that runs as NT AUTHORITY\SYSTEM. An attacker with local access can trigger a use-after-free during platform shutdown and potentially elevate privileges. CVE:...
CVE-2026-95881
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-121744
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-95881
A heap-based buffer overflow exists in Windows Push Notifications , which could allow an authorized attacker to achieve local privilege escalation . Exploitation details are not provided in the documents. Remediation is available via official Microsoft security updates, such as KB5131291 (for Win...
Windows Push Notifications Elevation of Privilege Vulnerability
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
PT-2026-144200
Name of the Vulnerable Software and Affected Versions Windows Push Notifications affected versions not specified Description A heap-based buffer overflow occurs in Windows Push Notifications, which allows an authorized attacker to elevate privileges locally. A heap-based buffer overflow is a memo...
EUVD-2026-106273
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Push Notifications. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to...
CVE-2026-60885
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Push Notifications. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to...
CVE-2026-60885
A vulnerability exists in the Push Notifications component of Oracle PeopleSoft Enterprise PeopleTools (affected versions 8.61 and 8.62 ). A high privileged attacker with access to the physical communication segment of the hardware can exploit this vulnerability to compromise or take over the Peo...
PT-2026-119549
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft component: Push Notifications. Supported versions that are affected are 8.61 and 8.62. Easily exploitable vulnerability allows high privileged attacker with access to the physical communication segment attached to...
Oracle PeopleSoft Enterprise PeopleTools security vulnerabilities
Oracle PeopleSoft Enterprise PeopleTools versions 8.61 and 8.62 have security vulnerabilities. These vulnerabilities stem from issues with the Push Notifications component, which may allow attackers with high privileges to access the hardware’s physical communication layer, thereby taking control...
CVE-2026-96313
Missing authentication for critical function in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-83867
Heap-based buffer overflow in Windows Push Notifications allows an authorized attacker to elevate privileges locally...