pyGPOAbuse

pyGPOAbuse D4RKMATT3R द्वारा फिल्टर जोड़ अस्वीकरण: इसका परीक्षण केवल एक स्थानीय AD वातावरण में संक्षिप्त रूप से किया गया था। मैं किसी भी अप्रत्याशित व्यवहार या खराबी के लिए कोई जिम्मेदारी नहीं लेता हूँ, यह जैसा है वैसा प्रदान किया गया है, केवल अधिकृत परीक्षण के लिए, पूरी तरह से आपके अपने जोखिम पर...

CVE-2024-31317-Deployer

CVE-2024-31317 Deployer 🔒 بيان البحث الأمني هذا المشروع مخصص لأغراض البحث والتعليم الأمني فقط. استخدام هذه الأداة في اختبار غير مصرح به غير قانوني. لا يتحمل المؤلف أي مسؤولية عن أي إساءة استخدام أو ضرر. 📋 نظرة عامة CVE-2024-31317 هو ثغرة أمنية خطيرة تؤثر على أجهزة Android من الإصدار 9 إلى 13، وتس...

CVE-2026-49176_BOF

CVE-2026-49176 Cobalt Strike BOF ملف Beacon Object File BOF خاص بـ Cobalt Strike لتصعيد الامتيازات المحلية عبر خدمة WalletService في ويندوز CVE-2026-49176 ، تم إصلاحه في يوليو 2026. من خلال Beacon بسلامة متوسطة مستخدم قياسي، تقوم هذه الأداة بتجهيز قاعدة بيانات ESE خبيثة لـ Wallet، وإعادة توجيه مج...

hershell

Hershell NOTE: the project has been forked on this repo, check there for any other developments. Hershell is a simple TCP reverse shell written in Go. It uses TLS to secure the communications, and provide a certificate public key fingerprint pinning feature, preventing from traffic interception...

sagex3-cve-2020-7388-poc

sagex3-cve-2020-7388-poc CVE-2020-7388 के लिए प्रूफ ऑफ कॉन्सेप्ट एक्सप्लॉइट कोड, Sage X3 के AdxDSrv सेवा पर बिना प्रमाणीकरण के SYSTEM के रूप में RCE अवलोकन Sage X3, "AdxDSrv.exe" प्रक्रिया के अंतर्गत TCP/1818 पोर्ट डिफ़ॉल्ट, लेकिन बदला जा सकता है पर एक प्रशासनिक सेवा प्रदान करता है, जो AdxAdmin घ...

CVE-2020-0688

CVE-2020-0688 توجد ثغرة تنفيذ كود عن بُعد في Microsoft Exchange Server عندما يفشل الخادم في إنشاء مفاتيح فريدة بشكل صحيح أثناء التثبيت. تسمح معرفة مفتاح التحقق لمستخدم مصادق عليه يمتلك صندوق بريد بتمرير كائنات عشوائية ليتم إلغاء تسلسلها بواسطة تطبيق الويب، الذي يعمل بصلاحيات SYSTEM. حول الثغرة تم...

adups-get-super-serial

adups-get-super-serial CVE-2015-2231 إثبات المفهوم POC الذي كنت أستخدمه لتوضيح CVE-2015-2231 'Get Super Serial'. طلب مني بعض الأشخاص نشره حتى يتمكنوا من استخدام أشياء مماثلة على أجهزة أخرى تعتمد على البرنامج الثابت firmware من ADUPS والتي تحتوي على هذه الثغرة. أقوم بتنظيف الحاسوب المحمول ونشر هذا...

CVE-2020-9442

عنوان الاستغلال: OpenVPN Connect for Windows MSI - 3.1.0.361 - تصعيد الامتيازات التاريخ: 2020-02-28 المؤلف: Andrew Hess رابط البرنامج: https://openvpn.net/client-connect-vpn-for-windows/ الإصدار: 3.1.0.361 MSI CVE: CVE-2020-9442 السجل الزمني 2019.12.15 - تم اكتشاف الثغرة 2019.12.15 - التواصل الأو...

CVE-2026-56952

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55307

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-0198

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

EUVD-2026-93789

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56952

In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-56952

A permission bypass vulnerability exists in the platform_msg_handler_init function within default_msg_handlers.c . The flaw is caused by a missing permission check , which could allow for a local escalation of privilege requiring System execution privileges . This vulnerability does not require u...

CVE-2026-55307

In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-55307

A logic error in the kdn_set_sysregs_prot function within the hwcrypto-kdn.c file can lead to a local information disclosure . Exploitation of this vulnerability requires System execution privileges , and no user interaction is required. While the technical impact is classified as partial, the co...

CVE-2026-0198

In ispdallowed of gemmsg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...

PT-2026-107107

In platform msg handler init of default msg handlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

Linux Distros Unpatched Vulnerability : CVE-2026-49878

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In wpashandlerobustavscsrecvaction of robustav.c, there is a possible out-of-bounds write due to a logic error in the code. This could lead to remote code...

PT-2026-106846

In is pd allowed of gem msg.c, there is a possible permission bypass due to a missing permission check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...