CVE-2025-54918-POC

CVE-2025-54918 – 概念验证 PoC ⚠️ 重要通知 重要提示： 要测试 CVE-2025-54918 ，您必须在目标 Active Directory 环境中创建一条 DNS 记录 。 测试前务必咨询客户并获得明确授权 ，因为这可能会影响生产环境中的 DNS 和身份验证行为。 此仓库包含一个技术概念验证 ，演示了低权限域用户 如何通过滥用 NTLM 反射结合身份验证强制 提升到域管理员级别访问权限 。 注意：即使将签署设置为 True（域控制器的默认值），该 CVE 仍可利用。此外，CVE-2025–54918 的修复针对的是 Windows 2025，而...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Ejecución remota de código mediante Use-After-Free en JScript.dll CVE-2025-30397 🧠 Descripción Este repositorio contiene un exploit de prueba de concepto PoC para una vulnerabilidad de Use-After-Free en el motor JScript jscript.dll q...

badsuccessor

BadSuccessor.py Una herramienta de pruebas de penetración que explota la vulnerabilidad de escalada de privilegios dMSA delegated Managed Service Account en entornos de Active Directory de Windows Server 2025. ⚠️ Aviso legal Esta herramienta está destinada únicamente a pruebas de penetración...

CVE-2024-38077

CVE-2024-38077-EXP 基于伪代码后修复的代码。 有效范围 EXP：Windows Server 2025 POC：08-25 使用 root@kitploit: options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll path, eg: \smb\evildll.dll...

azure-vulnerability-remediation-project

漏洞研究与修复：Azure 云基础设施 项目概述 本项目记录了云托管的 Windows Server 2025 实例（CyberVM）端到端的漏洞管理生命周期。该实验展示了一种主动式方法，通过直接软件修补和架构性补偿控制相结合，来识别、分析并消除高危安全风险。 1. 识别与基线评估 使用 Nessus Essentials 执行了首次凭据扫描，以建立安全基线。扫描共发现 66 个漏洞，其中包括两个高优先级目标。 严重级别| ID| 描述| CVSS v3.0 ---|---|---|--- 高| KB5075899| 缺少 Windows Server 2026 累积更新| 7.0 高|...

CVE-2026-24294

CVE-2026-24294 - Escalada de Privilegios Local LPE por Reflexión NTLM vía Puerto Arbitrario SMB Escalada de privilegios local en Windows Server 2025 mediante reflexión NTLM, abusando de la función de puerto arbitrario SMB introducida en Windows 11 24H2 / Server 2025. Vulnerabilidad Windows 11 24H...

KB5122871: Windows Server 2025 Security Update (September 2026)

The remote Windows host is missing security update 5122871. It is, therefore, affected by multiple vulnerabilities - Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an unauthorized attacker to execute code over a network. CVE-2026-68839 - Integer underflow wrap or...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows 内核权限提升漏洞 Windows 内核堆栈缓冲区溢出漏洞，允许本地攻击者将权限提升至NT AUTHORITY\SYSTEM 。 📖 概览 CVE-2026-40369 是一个影响 Microsoft Windows 内核组件的高严重性权限提升漏洞。 该漏洞源于 Windows 内核内部的不安全内存操作，可能允许经过身份验证的低权限攻击者在受影响的系统上获取 SYSTEM 级别权限 。Microsoft 将其 CVSS v3.1 评分定为 7.8（高危）。 :contentReferenceoaicite:0index=0 ⚡ 漏洞详情...

ShieldBreak

ShieldBreak - Vulnerabilidad 0day de Windows Defender Microsoft no ha parcheado correctamente la vulnerabilidad RoguePlanet CVE-2026-50656; este PoC demuestra un bypass completo del parche. El PoC se probó en la última versión de windows 11 25h2 canal Canary y windows server 2025; el PoC también...

Windows 11 24H2/25H2 | Server 2025 - Recovery Media Restore Fails with: The Local Security Authority cannot be contacted

Issue Resolved in September 8 2026 Windows Updates The underlying issue documented in this article was resolved by Microsoft in the September 8 2026 security updates for Windows 11 KB5124008 and Windows Server 2025 KB5122871. After applying the update, the Veeam Recovery Media must be recreated...

KB5099536: Windows Server 2025 Security Update (July 2026)

The remote Windows host is missing security update 5099536. It is, therefore, affected by multiple vulnerabilities - Integer overflow or wraparound in Windows RDP allows an unauthorized attacker to execute code over a network. CVE-2026-58594 - Heap-based buffer overflow in Windows FTP Service...

June 9, 2026—KB5094125 (OS Build 26100.32995)

None None...

May 12, 2026—KB5087539(OS Build 26100.32860)

None None...

Microsoft Active Directory Domain Services 缓冲区错误漏洞

Microsoft Active Directory Domain Services is a key service provided by Microsoft Corporation in the United States. It is used to manage and organize resources, users, computers, and other security objects within a network. There are security vulnerabilities associated with Microsoft Active...

Microsoft Windows Ancillary Function Driver for WinSock 竞争条件问题漏洞

The Microsoft Windows Ancillary Function Driver for WinSock is a compatibility issue vulnerability in Winsock by Microsoft Corporation. Attackers can exploit this vulnerability to gain elevated privileges. The following products and versions are affected: Windows Server 2012 R2 Server Core...

Microsoft Windows Secure Boot 权限许可和访问控制问题漏洞

Microsoft Windows Secure Boot is a security boot mechanism developed by Microsoft Corporation. There is an access control error vulnerability in Microsoft Windows Secure Boot. Attackers can exploit this vulnerability to bypass certain features. The following products and versions are affected:...

Microsoft Windows TCP/IP 缓冲区错误漏洞

Microsoft Windows TCP/IP is a component provided by Microsoft Corporation that offers TCP/IP configuration functions for Windows. There are security vulnerabilities present in Microsoft Windows TCP/IP. The following products and versions are affected: Windows Server 2022, Windows Server 2022 Serv...

Microsoft Windows Deployment Services 资源管理错误漏洞

Microsoft Windows Deployment Services are a container for Windows deployment services an updated and redesigned version of Remote Installation Services RIS provided by Microsoft Corporation. These services allow for the setup of new computers through network-based unattended installations...

microsoft windows kerberos 缓冲区错误漏洞

Microsoft Windows Kerberos is a software developed by Microsoft for authentication in network clusters. As a network authentication protocol, its primary goal is to provide robust authentication services for client/server applications through a key system. There is a buffer error vulnerability...

Microsoft Windows SDK 数字错误漏洞

Microsoft Windows is an operating system used by personal devices by the American company Microsoft. There is a vulnerability in input validation of Microsoft Windows. Attackers can exploit this vulnerability to gain higher privileges. The following products and versions are affected: Windows 11...