Lucene search
+L

283 matches found

Kitploit
Kitploit
•added 2026/11/15 2:11 a.m.•37 views

GodGenesis

Welcome To God Genesis God Genesis is a C2 server purely coded in Python3 created to help Red Teamers and Penetration Testers. Currently It only supports TCP reverse shell but wait a min, its a FUD and can give u admin shell from any targeted WINDOWS Machine. The List Of Commands It Supports :-...

6.3AI score
SaveExploits0References2
Kitploit
Kitploit
•added 2026/11/13 2:00 p.m.•37 views

CVE-2026-26119

CVE-2026-26119 - Windows Admin Center authenticated PowerShell execution PoC Proof-of-concept for CVE-2026-26119, classified by Microsoft as an elevation-of-privilege / improper-authentication vulnerability CWE-287 in Windows Admin Center WAC. An authenticated low-privilege WAC user can drive the...

8.8CVSS8.7AI score0.11225EPSS
SaveExploits2References1
Kitploit
Kitploit
•added 2026/11/13 6:19 a.m.•35 views

CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand. Usage: python3 wacrce.py "" WACPASS= python3 wacrce.py Env: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...

8.8CVSS8.6AI score0.11225EPSS
SaveExploits2
EUVD
EUVD
•added 2026/11/12 12:33 a.m.•8 views

EUVD-2026-124036

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

8.6CVSS6.9AI score0.006EPSS
SaveExploits0References2
NVD
NVD
•added 2026/11/11 10:17 p.m.•11 views

CVE-2026-65949

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

8.6CVSS0.006EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/11 9:11 p.m.•26 views

CVE-2026-65949

Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0 are vulnerable to a Remote Command Execution (RCE) flaw. The root cause is the improper neutralization of special elements used in an OS command, which allows an authenticated remote attacker to execute arbitra...

8.6CVSS6.9AI score0.006EPSS
SaveExploits0References1
NVD
NVD
•added 2026/11/10 7:20 p.m.•6 views

CVE-2026-122988

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

8CVSS0.00587EPSS
SaveExploits0References1
CVE
CVE
•added 2026/11/10 6:22 p.m.•16 views

CVE-2026-122988

An improper authorization vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network. The root cause is identified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The impact includes high levels of confidentiality, integ...

8CVSS6.1AI score0.00587EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/11/10 6:22 p.m.•8 views

EUVD-2026-122311

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

8CVSS6.1AI score0.00587EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/11/10 4:00 p.m.•7 views

Windows Admin Center Elevation of Privilege Vulnerability

Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...

8CVSS6.1AI score0.00587EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•6 views

PT-2026-144051

🚨 CVE-2026-122988 Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. 🎖@cveNotify...

8CVSS6.1AI score0.00587EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/06 6:16 p.m.•20 views

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

8.8CVSS0.00982EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 5:44 p.m.•20 views

EUVD-2026-93575

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

8.8CVSS6AI score0.00982EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 5:44 p.m.•62 views

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

8.8CVSS0.00982EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 5:44 p.m.•21 views

CVE-2026-101207

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

8.8CVSS6AI score0.00982EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•12 views

CVE-2026-101207: Improper Neutralization of Special Elements used in an OS Command

Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...

8.8CVSS6AI score0.00982EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•26 views

PT-2026-104478

Name of the Vulnerable Software and Affected Versions Dell OpenManage Integration with Microsoft Windows Admin Center versions prior to 3.7.0 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with...

8.8CVSS5.8AI score0.00982EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•38 views

PT-2026-104480

Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...

8.6CVSS6.9AI score0.006EPSS
SaveExploits0References3
Packet Storm News
Packet Storm News
•added 2026/08/18 12:00 a.m.•51 views

Microsoft Windows Admin Center Remote Code Execution

Microsoft Windows Admin Center builds prior to 2.7.4 contain a command injection vulnerability in the PowerShell tool REST API. An authenticated low-privileged gateway user can supply arbitrary commands through the properties.script field of an invokeCommand request, resulting in command executio...

6AI score
SaveExploits0
KittySploit
KittySploit
•added 2026/08/11 9:26 p.m.•21 views

Windows Admin Center - Authenticated PowerShell RCE (CVE-2026-26119)

CVE-2026-26119: authenticated RCE via WinREST/PowerShell invokeCommand. Use a reversetcp payload; the framework listener creates the shell session. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-26119 — Windows Admin Center authenticated WinREST/PowerShell RCE.""" from future import...

8.8CVSS8.4AI score0.11225EPSS
SaveExploits2References2
Rows per page
Query Builder