GlobalUnProtect

GlobalUnProtect 用于解密和收集 Windows 客户端安装中的 GlobalProtect 配置、Cookie 和 HIP 文件的 PoC 工具。 博客文章：https://rotarydrone.medium.com/4a1d8fc7773e 用法 可独立运行，也可通过 execute-assembly 或等效方式在内存中运行。将所有内容收集到内存中的 zip 文件，并写入指定位置。 root@kitploit: GlobalUnProtect.exe Usage: GlobalUnProtect.exe C:\Path\To\Output.zip...

raven

Raven WebSocket用のCobaltStrike External C2 追加情報: https://www.cobaltstrike.com/help-externalc2 サーバービルド Ubuntu サーバーフォルダをVPSにコピーします。 rootまたはsudoで./setup.shを実行します。 クライアントビルド Windows クライアントフォルダをWindows開発ホストにコピーします。 Windows 10、8.1、または7のSDKをインストールします。...

Citrix_Secure_Access_LPE_0DAY

Escalada de privilegios local en Citric Secure Access He descubierto una vulnerabilidad de escalada de privilegios local en el cliente de Windows de Citrix Secure Access. Esta vulnerabilidad permite que un administrador privilegiado inyecte una carga útil maliciosa para obtener privilegios de NT...

CVE-2026-3502-Scanner---TrueConf-Vulnerability-Detection-Tool

🔍 CVE-2026-3502 扫描器 - TrueConf 漏洞检测工具 ⚠️ 警告 仅用于教育目的和授权测试。 📋 描述 用于 CVE-2026-3502 的检测工具。扫描未验证更新的 TrueConf 服务器，检测易受攻击的 Windows 客户端（≤8.5.3.884），并搜索 TrueChaos 的 IOC：PowerISO、注册表持久化和计划任务。 📦 安装 root@kitploit: git clone https://github.com/tu-usuario/CVE-2026-3502-Scanner.git cd CVE-2026-3502-Scanner pip...

CVE-2020-5752-Druva-inSync-Windows-Client-6.6.3---Local-Privilege-Escalation-PowerShell-

CVE-2020-5752: Druva-inSync-Windows-Client-6.6.3---本地权限提升-PowerShell- Druva inSync Windows Client 6.6.3 - 本地权限提升 PowerShell 修改后可使用系统权限获取 Reverse Shell。...

UBUNTU-CVE-2026-68579

FreeRDP before 3.30.0 = 3.29.0 contains a heap-based buffer overflow in the Windows clipboard client's CliprdrStreamRead function client/Windows/wfcliprdr.c. When an OLE paste consumer e.g. explorer.exe calls IStream::Read with a fixed-size buffer of cb bytes, CliprdrStreamRead requests file...

CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

EUVD-2026-51862

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

CVE-2026-67305

FreeRDP Windows client before 3.29.0 contains a heap buffer overflow vulnerability in the clipboard virtual channel when processing CLIPRDRFILECONTENTSRESPONSE PDUs without validating the server-provided size against the destination buffer. A malicious RDP server can send a response with a data...

CVE-2026-67305

FreeRDP Windows client (before 3.29.0) has a heap buffer overflow in the clipboard virtual channel (CLIPRDR_FILE_CONTENTS_RESPONSE PDUs) due to lack of validation of the server-provided size against the destination buffer. A malicious RDP server could send a payload larger than requested, causing...

PT-2026-67285

Name of the Vulnerable Software and Affected Versions FreeRDP Windows client versions prior to 3.29.0 Description A heap buffer overflow occurs in the clipboard virtual channel when processing CLIPRDR FILE CONTENTS RESPONSE PDUs Protocol Data Units because the server-provided size is not validate...

CVE-2026-53410

CVE-2026-53410 describes a TOCTOU race condition in the installation and uninstallation flow of certain Zoom Clients for Windows that could allow an authenticated local user to escalate privileges. Affected components include Zoom Workplace for Windows, Zoom Workplace VDI Client, Zoom Workplace V...

CVE-2026-40952

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...

CVE-2026-40952 Privilge misconfiguration in Secure Access installers

CVE-2026-40952 is a privilege misconfiguration in the Secure Access installer for the Windows client and server prior to version 14.55. Attackers with local access to the client or server can use it to elevate privileges to Administrator when Secure Access is installed in a non-default location...

EUVD-2026-44149

Use after free in Windows DHCP Client allows an unauthorized attacker to execute code locally...

CVE-2026-50487 Windows DNS Client Elevation of Privilege Vulnerability

...

CVE-2026-50465 Windows DNS Client Tampering Vulnerability

...

CVE-2026-53566

Out-of-bounds read vulnerability in Citrix Citrix Secure Access Client for Windows. This issue affects Citrix Secure Access Client for Windows: before 26.6.1.20...

CVE-2026-53566

CVE-2026-53566 describes an out-of-bounds read in the Citrix Secure Access Client for Windows , affecting versions prior to 26.6.1.20 . The vulnerability is categorized with a CVSS v4.0 vector indicating a local attack vector, low attack complexity, and no user interaction required, with a base s...

PT-2026-58017

Name of the Vulnerable Software and Affected Versions Citrix Secure Access Client for Windows versions prior to 26.6.1.20 Citrix Endpoint Analysis Client for Windows versions prior to 26.5.1.7 Description Improper privilege management allows a low-privileged user with local access to escalate the...