533 matches found
PrivExchange
PrivExchange POC tools accompanying the blog Abusing Exchange: One API call away from Domain Admin. Requirements These tools require impacket. You can install it from pip with pip install impacket, but it is recommended to use the latest version from GitHub. privexchange.py This tool simply logs ...
authelia
Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on SSO for your applications via a web portal. It acts as a companion for reverse proxies by allowing, denying, or redirecting requests. Documentation is available at...
CVE-2026-42978-PoC-Research
CVE-2026-42978 PoC и исследование — Windows Push Notifications: использование после освобождения Состояние гонки в службе Push-уведомлений Windows WpnService, которая работает как NT AUTHORITY\SYSTEM. Злоумышленник с локальным доступом может вызвать использование после освобождения во время...
CVE-2026-42978-PoC-Research
CVE-2026-42978 AI 보안 도구용 Windows 푸시 알림 모듈 차세대 AI 보안 에코시스템, 멀티 프로토콜 터미널 및 자율 에이전트 제품군 웹사이트 · 제품 문서 · 호스트 애플리케이션 · 커뮤니티 채팅 웹사이트 내비게이션: 홈 · 업데이트 · 다운로드 · 모듈 공식 호스트 애플리케이션 제품: AI Security Tool 사이트: zerodayevil.github.io 문서: https://zerodayevil.github.io/ai-security-tool 이 모듈은 AI Security Tool을 위한 검토된...
hermes-the-messenger
메신저 헤르메스 Windows에서 푸시 알림을 통한 지속성persistence 확보를 위한 PoC 더 자세한 기술적 세부 사항과 배경 내용은 여기 블로그 포스트를 참조하세요: https://www.persistent-security.net/post/beacon-on-demand-abusing-push-notifications-for-persistence 사용법 무엇보다 먼저 Azure를 설정해야 합니다. 그런 다음 푸시 알림에 스스로를 등록하기 위해 실행 파일을 한 번 실행해야 합니다. Azure 앱의 개체 IDobject i...
CVE-2026-69300
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69300
CVE-2026-69300 is a use-after-free vulnerability in the Windows Push Notifications component that allows an authorized attacker to achieve local privilege escalation . The CVSS v3.1 score is 7.0 (HIGH) with vector AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a high-impact but locally exploitab...
EUVD-2026-73441
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
EUVD-2026-73426
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-69280
CVE-2026-69280 is a use-after-free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . Microsoft assigned a CVSS 3.1 base score of 7.0 (HIGH) with a vector of local attack, high complexity, low privileges required, and high impact...
EUVD-2026-73373
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
CVE-2026-62697
CVE-2026-62697 is a use after free vulnerability in Windows Push Notifications that allows an authorized attacker to achieve local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) with a local attack vector, low complexity, and low privileges required, resulting in high impact to confident...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
Windows Push Notifications Elevation of Privilege Vulnerability
Use after free in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
crackerjack
!CAUTION This repo is unmaintained, visit https://github.com/sadreck/crackerjack for the latest version. CrackerJack Web Interface for Hashcat by Context Information Security Contents Introduction Architecture Features Limitations Installation Troubleshooting Screenshots License Introduction...
CVE-2026-62690
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Push Notifications allows an authorized attacker to elevate privileges locally...
