WPTaskScheduler_CVE-2024-49039

WPTaskScheduler Persistence & CVE-2024-49039, as one of Attack Surface within Task Scheduler. WPTaskScheduler.dll is a component of Task Scheduler, since win 10 1507. This is likely a backdoor tool used for persistence, which was analyzed by security researchers, who found that able to bypass...

SharpMove

SharpMove - .NET authenticated execution for remote hosts Building To compile open Visual Studio project and compile for release. Options WMI SCM DCOM Multiple Task Scheduler Service DLL Hijack DCOM Server Hijack Modify Scheduled Task Modify Service binpath SharpMove.exe action=query...

RedPersist

RedPersist RedPersist is a Windows Persistence tool written in C Compiling Project Below 3rd party libraries are used in this project. TaskScheduler https://github.com/dahall/TaskScheduler Fody https://github.com/Fody/Fody Load the Visual Studio project up and go to "Tools" "NuGet Package Manager...

persistence-info.github.io

Le dépôt tente de rassembler des informations sur les mécanismes de persistance de Windows afin de rendre la protection/détection plus efficace. La plupart de ces informations sont bien connues depuis des années et sont activement utilisées dans divers scénarios. Attendez-vous à plus. Je fais de...

FullPowers

FullPowers FullPowers is a Proof-of-Concept tool I made for automatically recovering the default privilege set of a service account including SeAssignPrimaryToken and SeImpersonate. Rationale On Windows, some services executed as LOCAL SERVICE or NETWORK SERVICE are configured to run with a...

CVE-2026-98087

A flaw was found in the Linux kernel. A local user running real-time tasks can trigger a Denial of Service DoS due to improper handling of non-migratable tasks within the task scheduler. When a task is marked to prevent migration between processor cores, the scheduler fails to skip it and...

wptsextensions.dll

WptsExtensions.dll pour exploiter le DLL Hijacking du Planificateur de tâches "won't fix " Chargez les variables d'environnement Visual Studio x64 : "C:\Program Files x86\Microsoft Visual Studio\2019\Community\VC\Auxiliary\Build\vcvars64.bat" Mettez à jour la variable TCHAR script avec un chemin...

cve-2024-49039-task_scheduler_eop_reproduction

CVE-2024-49039 : Vulnérabilité d'élévation de privilèges du Planificateur de tâches Windows Aperçu CVE-2024-49039 est une vulnérabilité d'élévation de privilèges EoP du Planificateur de tâches Windows qui permet à un attaquant authentifié de s'échapper du sandbox AppContainer, en élevant ses...

CVE-2026-72945

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

EUVD-2026-73113

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

CVE-2026-72945

CVE-2026-72945 is an information disclosure vulnerability in Windows Task Scheduler , caused by the use of an uninitialized resource . An authorized local attacker with low privileges can exploit this to disclose information, with high confidentiality impact and no integrity or availability impac...

Windows Task Scheduler Information Disclosure Vulnerability

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

PT-2026-87862

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

CVE-2026-72945: Use of Uninitialized Resource

Use of uninitialized resource in Windows Task Scheduler allows an authorized attacker to disclose information locally...

Exploit for Improper Authentication in Microsoft

CVE-2024-49039: Windows Task Scheduler Elevation of Privilege...

CVE-2026-15380

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380 Local privilege escalation in Symantec ITMS

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

EUVD-2026-45153

A non-administrator interactive user can obtain full SYSTEM code execution through a DCOM/task scheduler logic chain — no network access, no memory corruption required ITMS 8.7.3...

CVE-2026-15380

CVE-2026-15380 : A non-admin interactive user can achieve full SYSTEM code execution via a DCOM/task scheduler logic chain in Symantec ITMS. No network access or memory corruption required. Connected records confirm the vulnerability and impact as stated; no explicit exploit details, mitigations,...