GlobalUnProtect

GlobalUnProtect PoC tool for decrypting and collecting GlobalProtect configuration, cookies, and HIP files from windows client installations. Blog post: https://rotarydrone.medium.com/4a1d8fc7773e Usage Run as standalone or in-memory via execute-assembly or equivalent. Collects all contents to an...

raven

Raven CobaltStrike External C2 for Websockets Additional info: https://www.cobaltstrike.com/help-externalc2 Server Build Ubuntu Copy the server folder to your VPS. Run ./setup.sh as root or with sudo Client build Windows Copy the client folder to a Windows development host. Install the Windows 10...

CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool

🔍 CVE-2026-3502 Scanner - TrueConf Vulnerability Detection Tool ⚠️ WARNING For educational purposes and authorized testing only. 📋 Description Detection tool for CVE-2026-3502. Scans TrueConf servers without update verification, detects vulnerable Windows clients ≤8.5.3.884, and searches for...

CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-

CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell- Druva inSync Windows Client 6.6.3 - Local Privilege Escalation PowerShell Modified to get Reverse Shell with system privileges...

Citrix_Secure_Access_LPE_0DAY

Citric Secure Access Local privilege escalation I have discovered a local privilege escalation vulnerability in the Citrix Secure Access Windows Client. This vulnerability allows a privileged administrator to inject a malicious payload to gain NT Authority privileges. The affected versions of...

CVE-2026-111376

FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStreamNew that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTSSIZE request with a cbRequested of fewer...

Red Hat: CVE-2026-111376: freerdp: freerdp: Denial of Service via short clipboard response

FreeRDP from 3.30.0 before 3.32.0 contains a heap out-of-bounds read vulnerability in the Windows client's CliprdrStreamNew that allows malicious RDP servers to trigger invalid memory reads via short clipboard responses. Attackers can answer a FILECONTENTSSIZE request with a cbRequested of fewer...

CVE-2026-96948

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

CVE-2026-96912

Use after free in Windows Client License Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83698

Heap-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

CVE-2026-83699

Stack-based buffer overflow in Windows Client-Side Caching CSC Service allows an authorized attacker to elevate privileges locally...

CVE-2026-70149

Exposure of sensitive information to an unauthorized actor in Windows Client Side Caching driver csc.sys allows an authorized attacker to disclose information locally...

CVE-2026-70113

Integer overflow or wraparound in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

CVE-2026-69955

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-69940

Out-of-bounds read in Windows Client for NFS allows an unauthorized attacker to disclose information over a network...

CVE-2026-69949

Heap-based buffer overflow in Windows Client for NFS allows an authorized attacker to elevate privileges locally...

CVE-2026-100201

Heap-based buffer overflow in Windows Client License Service allows an authorized attacker to elevate privileges locally...

CVE-2026-100201

A heap-based buffer overflow vulnerability exists in the Windows Client License Service . This flaw allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-122 (Heap-based Buffer Overflow) and CWE-197 (Numeric Truncation Error). Details regar...

CVE-2026-96948

The Windows Client Side Caching driver (csc.sys) is vulnerable to an information disclosure flaw (CWE-497). An authorized attacker can exploit this vulnerability to disclose sensitive information locally on the system. No specific exploit code or in-the-wild exploitation details are provided in t...

CVE-2026-96912

A Use after free vulnerability in the Windows Client License Service allows an authorized attacker to achieve local privilege escalation . The vulnerability is associated with CWE-416 and has a CVSS 3.1 base score of 7.8 . While the documents confirm the impact of privilege elevation, no specific...