283 matches found
GodGenesis
Welcome To God Genesis God Genesis is a C2 server purely coded in Python3 created to help Red Teamers and Penetration Testers. Currently It only supports TCP reverse shell but wait a min, its a FUD and can give u admin shell from any targeted WINDOWS Machine. The List Of Commands It Supports :-...
CVE-2026-26119
CVE-2026-26119 - Windows Admin Center authenticated PowerShell execution PoC Proof-of-concept for CVE-2026-26119, classified by Microsoft as an elevation-of-privilege / improper-authentication vulnerability CWE-287 in Windows Admin Center WAC. An authenticated low-privilege WAC user can drive the...
CVE-2026-26119
CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authenticated RCE via WinREST/PowerShell invokeCommand. Usage: python3 wacrce.py "" WACPASS= python3 wacrce.py Env: WACBASE - override target base URL default below WACPASS - password, used if not passed positionally...
EUVD-2026-124036
Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...
CVE-2026-65949
Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...
CVE-2026-65949
Lenovo XClarity Integrator for Microsoft Windows Admin Center versions 5.1.1 and 5.2.0 are vulnerable to a Remote Command Execution (RCE) flaw. The root cause is the improper neutralization of special elements used in an OS command, which allows an authenticated remote attacker to execute arbitra...
CVE-2026-122988
Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
CVE-2026-122988
An improper authorization vulnerability in Windows Admin Center allows an authorized attacker to elevate privileges over a network. The root cause is identified as CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The impact includes high levels of confidentiality, integ...
EUVD-2026-122311
Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
Windows Admin Center Elevation of Privilege Vulnerability
Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network...
PT-2026-144051
🚨 CVE-2026-122988 Improper authorization in Windows Admin Center allows an authorized attacker to elevate privileges over a network. 🎖@cveNotify...
CVE-2026-101207
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
EUVD-2026-93575
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
CVE-2026-101207
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
CVE-2026-101207
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
CVE-2026-101207: Improper Neutralization of Special Elements used in an OS Command
Dell OpenManage Integration with Microsoft Windows Admin Center, versions prior to 3.7.0, contains an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability,...
PT-2026-104478
Name of the Vulnerable Software and Affected Versions Dell OpenManage Integration with Microsoft Windows Admin Center versions prior to 3.7.0 Description An OS Command Injection issue exists due to improper neutralization of special elements used in an OS command. A low privileged attacker with...
PT-2026-104480
Improper neutralization of special elements used in an OS command in Lenovo XClarity Integrator for Microsoft Windows Admin Center 5.1.1 and 5.2.0 allows an authenticated remote attacker to execute arbitrary PowerShell commands by submitting a crafted hostname...
Microsoft Windows Admin Center Remote Code Execution
Microsoft Windows Admin Center builds prior to 2.7.4 contain a command injection vulnerability in the PowerShell tool REST API. An authenticated low-privileged gateway user can supply arbitrary commands through the properties.script field of an invokeCommand request, resulting in command executio...
Windows Admin Center - Authenticated PowerShell RCE (CVE-2026-26119)
CVE-2026-26119: authenticated RCE via WinREST/PowerShell invokeCommand. Use a reversetcp payload; the framework listener creates the shell session. !/usr/bin/env python3 -- coding: utf-8 -- """CVE-2026-26119 — Windows Admin Center authenticated WinREST/PowerShell RCE.""" from future import...