CVE-2026-41089-PoC

CVE-2026-41089 — LongLogon crasher PoC Pre-authentication stack buffer overflow in the Netlogon service of Windows Server 2025. A single CLDAP packet UDP/389 from any host on the wire is enough: lsass.exe dies with STATUSSTACKBUFFEROVERRUN 0xc0000409 and the domain controller reboots. Component:...

badsuccessor

BadSuccessor.py A penetration testing tool that exploits the dMSA delegated Managed Service Account privilege escalation vulnerability in Windows Server 2025 Active Directory environments. Legal Disclaimer This tool is for authorized penetration testing and security research only. Using it agains...

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-

CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free Remote Code Execution via Use-After-Free in JScript.dll CVE-2025-30397 🧠 Description This repository contains a proof-of-concept PoC exploit for a Use-After-Free vulnerability in the JScript engine jscript.dll affecting Windows Serve...

CVE-2026-50369

CVE-2026-50369 reproducer for a TOCTOU race condition in rdpcorets.dll!CRdpPipeGfxPlugin::Enable on Windows Server 2025 RDS Session Hosts. i reported this as a DoS; the code-path seem to somehow also enable EoP. this reproducer is a PoC for the DoS path alone. Bug Enable reads a COM interface...

azure-vulnerability-remediation-project

Vulnerability Research & Remediation: Azure Cloud Infrastructure Project Overview This project documents the end-to-end vulnerability management lifecycle for a cloud-hosted Windows Server 2025 instance CyberVM. The lab demonstrates a proactive approach to identifying, analyzing, and neutralizing...

CVE-2026-24294

CVE-2026-24294 - Local NTLM Reflection LPE via SMB Arbitrary Port Local privilege escalation on Windows Server 2025 via NTLM reflection, abusing the SMB arbitrary port feature introduced in Windows 11 24H2 / Server 2025. Vulnerability Windows 11 24H2 / Server 2025 introduced an SMB client feature...

CVE-2025-54918-POC

CVE-2025-54918 – Proof of Concept PoC ⚠️ Important Notice IMPORTANT: To test CVE-2025-54918 , you must create a DNS record in the target Active Directory environment. Always consult with the client and obtain explicit authorization before testing, as this can impact DNS and authentication behavior...

CVE-2026-40369

🚨 CVE-2026-40369 - Windows Kernel Elevation of Privilege Vulnerability Windows Kernel Heap-Based Buffer Overflow allowing local attackers to elevate privileges toNT AUTHORITY\SYSTEM. 📖 Overview CVE-2026-40369 is a High Severity privilege escalation vulnerability affecting Microsoft Windows Kernel...

HomeLab

HomeLab - Network Documentation Overview HomeLab is a GNS3 lab built on a single laptop OMEN 16, i7-14650HX, 32 GB RAM, RTX 4060 8 GB to practice networking, systems administration, and offensive security in one environment. It models a perimeter with a firewall Cisco ASAv, a DMZ Ubuntu Server, a...

November 10, 2026—KB5131080 (OS Build 26100.33822)

November 10, 2026—KB5131080 OS Build 26100.33822 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5131080, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Window...

September 8, 2026—KB5122871 (OS Build 26100.33438)

September 8, 2026—KB5122871 OS Build 26100.33438 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5122871, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Window...

October 13, 2026—KB5126646 (OS Build 26100.33650)

October 13, 2026—KB5126646 OS Build 26100.33650 Applies To Windows Server 2025, all editions This cumulative update for Windows Server 2025 KB5126646, includes the latest security fixes and improvements, along with non-security updates from last month’s optional preview release. Visit the Windows...

KB5126967 - Description of the security update for SQL Server 2025 CU9: October 13, 2026

KB5126967 - Description of the security update for SQL Server 2025 CU9: October 13, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: October 13, 2026 Version: 17.0.5015.4 Summary Known issues in this update Improvements and fixes include...

KB5132748 - Description of the security update for SQL Server 2025 GDR: November 10, 2026

KB5132748 - Description of the security update for SQL Server 2025 GDR: November 10, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: November 10, 2026 Version: 17.0.1155.3 Summary Improvements and fixes included in this update How to...

November 10, 2026—Hotpatch KB5131077 (OS Build 26100.33730)

November 10, 2026—Hotpatch KB5131077 OS Build 26100.33730 Applies To Windows Server 2025 Datacenter: Azure Edition This update applies to Windows Server 2025 Datacenter & Standard machines connected to Azure Arc. To learn more about differences between security updates, optional non-security...

KB5129299 - Description of the security update for SQL Server 2025 CU10: November 10, 2026

KB5129299 - Description of the security update for SQL Server 2025 CU10: November 10, 2026 Applies To SQL Server 2025 on Windows all editions, SQL Server 2025 on Linux all editions Release date: November 10, 2026 Version: 17.0.5045.3 Summary Known issues in this update Improvements and fixes...

KB5131080: Windows Server 2025 Security Update (November 2026)

The remote Windows host is missing security update 5131080 or hotpatch 5131077. It is, therefore, affected by multiple vulnerabilities - Out-of-bounds write in Microsoft Windows Search Component allows an unauthorized attacker to execute code over a network. CVE-2026-116928 - Out-of-bounds write ...

CVE-2024-38077

CVE-2024-38077-EXP Fixed code based on pseudocode. Scope EXP: Windows Server 2025 POC: 08-25 Usage options: -h, --help show this help message and exit --targetip TARGETIP Target IP, eg: 192.168.120.1 --evilip EVILIP Evil IP, eg: 192.168.120.2 --evildllpath EVILDLLPATH Evil dll path, eg:...

Exploit for CVE-2025-27740

AD CS SKI hijack — a working exploit for CVE-2025-27740 Tooli...

Microsoft Active Directory Certificate Services Windows Server 2025 Subject Key Identifier Spoofing

Microsoft Active Directory Certificate Services on Windows Server 2025 versions before 10.0.26100.3775 contains a weak authentication vulnerability that allows an authorized attacker to elevate privileges by supplying a chosen Subject Key Identifier during certificate enrollment...