742 matches found
wesng
Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...
vulnerable-PDF
vulnerable-PDF = Salaries.pdf - 开发模式：2022年10月8日 注意：这仅供测试，您只需打开微软自带的计算器程序即可。= 或者您可以使用 PDF 文件将 calc.exe 下载到被禁止的目录中 :D 警告！仅供测试和教育使用 = vulnerable-PDF = Book.pdf 注意：您可以浏览 System23 目录，看看里面有什么 = 警告！仅供测试和教育使用 = vulnerable-PDF = Calculator512.pdf 注意：您可以使用 Calculator512.pdf 重启 Windows 8、10 和 11 等 操作系统 =...
CVE-2026-33829
CVE-2026-33829 本仓库包含一个用Bash编写的自动化工具，旨在以被动且受控的方式审计和验证运行Windows操作系统的资产是否容易受到search:协议处理程序不安全操作的影响。 该脚本充当被动接收器，在目标与特定设计的URI交互时，使用tcpdump捕获通过SMB（端口445）协议的出站连接尝试。 🛠️ 系统要求 验证环境（Linux）： 需要超级用户权限（sudo）并安装tcpdump包。 目标资产（Windows）： 与验证机器直接网络连接。 🚀 使用指南 1. 在Linux机器上准备 克隆此仓库或下载脚本...
invoker
Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...
EUVD-2026-68916
A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...
cve-2019-0808-poc
cve-2019-0808-poc cve-2019-0808-poc solo BSOD,usado para reiniciar SO;...
CVE-Writeups
CVE-Writeups Informes de investigación de vulnerabilidades de seguridad. CVE-2026-50402: Windows NTFS Elevación de Privilegios CVSS 7.8...
The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges
The vulnerability of the HTTP.sys driver on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
CVE-2026-66799
Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally...
CVE-2026-62725
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-62726
Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...
CVE-2026-66802
CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...
CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65799
CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...
CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability
...
CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability
...
CVE-2026-65781
CVE-2026-65781 is a Windows Autopilot use-after-free causing local privilege escalation for an authorized attacker. Documents do not specify affected build numbers, exact vulnerable component/file, or root-cause details beyond the use-after-free description. No exploitation status or patch/versio...
CVE-2026-65778
CVE-2026-65778 is a Windows Autopilot use-after-free vulnerability that enables local privilege escalation for an authorized attacker with low privileges and no user interaction. The CVSS 3.1 vector (Local, High impact, Privileges Required: Low, Confidentiality/Integrity/Availability: High) indic...