489 matches found
CVE-2022-30190_Temporary_Fix
🩹CVE-2022-30190 Temporäre Problemumgehung🩹 Dies sind zwei Python-Skripte, die kompiliert wurden, um einfach und schnell einen temporären Schutz gegen die CVE-2022-30190-Schwachstelle Follina anzuwenden. Beide könnten besser programmiert sein, aber dies dient nur dazu, es so schnell wie möglich...
MsSettingsDelegateExecute
MsSettingsDelegateExecute Bypass UAC su Windows 10/11 x64 utilizzando la chiave di registro DelegateExecute di ms-settings. Questo progetto di Visual Studio compilerà un binario statico x64 per testare questo problema. Licenza Questi file sono disponibili sotto la licenza BSD a 3 clausole...
mitigate-folina
mitigar-folina Mitiga o ZeroDay "Folina" CVE-2022-30190 e o "Search"-Nightmare sem CVE atribuído no momento Este script fará backup e, em seguida, removerá a chave de registro afetada conforme sugerido pela Microsoft para mitigar o CVE-2022-30190. Se parametrizado com "-revert", o script...
cve-2022-30190
cve-2022-30190 Remediação do CVE-2022-30190 por meio da remoção de ms-msdt do registro do Windows Recursos Orientação e Solução Alternativa da Microsoft Avaliação da Palo Alto...
VirtualLockSensorLPE
VirtualLockSensorLPE Descrizione Exploit PoC di escalazione dei privilegi locale per CVE-2025-0886 che colpisce Elliptic Virtual Lock Sensor versione 3.1.60531.2 in esecuzione su Windows, installato per impostazione predefinita su alcuni modelli di laptop Lenovo. Consente l'esecuzione di un paylo...
Follina-MSDT-Vulnerability-CVE-2022-30190-
Follina-MSDT-Vulnerability-CVE-2022-30190- Detecção e Remediação da Vulnerabilidade Follina MSDT CVE-2022-30190 Para informações detalhadas sobre Follina-MSDT-Vulnerability-CVE-2022-30190- visite...
Fix-WinVerifyTrustSignatureValidationVuln
Fix-WinVerifyTrustSignatureValidationVuln Correggi la vulnerabilità di convalida della firma WinVerifyTrust, CVE-2013-39001, QID-3783322 Questa correzione è destinata a computer Windows a 64 bit Questo codice PowerShell è un modo per correggere la vulnerabilità - oltre a creare un file .reg e...
Windows Persistence via UserInitMprLogonScript Registry Key
This Python script demonstrates a Windows persistence technique based on modifying the HKCU\Environment\UserInitMprLogonScript registry value, which allows execution of a program each time the user logs in...
Malicious code in genosys (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 2fb27cde30ea3d834e3160e37c203a1f8a271435cf92316a990766c5b8b9791c The campaign is built from a benign-like package e.g. genosys and the malicious dependency e.g. pynosist. The dependency uses a PTH file to trigger malicious...
Microsoft Windows Server Domain Role Detection
SMB-login based domain role detection with powershell fallback for Windows Server. SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
EUVD-2026-18935
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on Windows, app.setLoginItemSettingsopenAtLogin: true wrote the executable path to the Run registry key without quoting. If the app ...
CVE-2026-34768 Electron: Unquoted executable path in app.setLoginItemSettings on Windows
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to versions 38.8.6, 39.8.1, 40.8.0, and 41.0.0-beta.8, on Windows, app.setLoginItemSettingsopenAtLogin: true wrote the executable path to the Run registry key without quoting. If the app ...
EUVD-2026-18945
Electron: Registry key path injection in app.setAsDefaultProtocolClient on Windows...
GHSA-JFQX-FXH3-C62J Electron: Unquoted executable path in app.setLoginItemSettings on Windows
Impact On Windows, app.setLoginItemSettingsopenAtLogin: true wrote the executable path to the Run registry key without quoting. If the app is installed to a path containing spaces, an attacker with write access to an ancestor directory may be able to cause a different executable to run at login...
Restore to AWS EC2 Fails with: "ClientError: Unknown OS / Missing OS files" or "FirstBootFailure"
Challenge When restoring a VM to AWS EC2, one of the following errors occurs: StatusMessage: "CLIENTERROR : ClientError: Unknown OS / Missing OS files." Failed to import machine to Amazon EC2: CLIENTERROR : FirstBootFailure: This import request failed because the instance failed to boot and...
CVE-2020-10642
In Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to the execution of malicious code using system privileges when opening RSLinx Classic...
Accessibility Features Persistence Via Debugger Registry Key
This Metasploit module makes it possible to apply the sticky keys hack to a session with appropriate rights. The hack provides a means to get a SYSTEM shell using UI-level interaction at an RDP login screen or via a UAC confirmation dialog. The module modifies the Debug registry setting for certa...
CVE-1999-0589
A system-critical Windows NT registry key has inappropriate permissions...