711 matches found
CVE-2019-0708
CVE-2019-0708 Unauthenticated CVE-2019-0708 "BlueKeep" Scanner PoC by @JaGoTu and @zerosum0x0. Technical details: https://zerosum0x0.blogspot.com/2019/05/avoiding-dos-how-bluekeep-scanners-work.html Metasploit Module The Metasploit module has been pulled to rapid7:master. msf5 use...
SMBRat
SMBRat 一个基于 Visual Basic Script 的 Windows 远程管理工具 理念 在 Active Directory 网络等 Windows 环境 中， SMB 流量会变得非常臃肿。 所有主机都会从 SYSVOL 获取 策略 ，配置需要远程文件才能工作，桌面快捷方式通常指向 \something\else\in\the\network.exe。 没有人会注意到多一次连接尝试。 对吧？ - 尤其是当它成功时（通常只监控 防火墙 拒绝 事件已成为一种时尚） 组成部分 代理 便于文档/归档 agent 是一个运行在受感染主机上的 Visual Basic 脚本...
0net
0net：简单的Windows远程控制后门 简介： 0net是一个简单的Windows远程控制类后门程序。客户端使用c++编写在vc++6.0上编译通过。服务端使用python编写，可以跨平台使用。该项目目前正在开发中... 项目详细说明：http://www.s0nnet.com/0net 功能： 支持反向连接（IP和域名）到指定服务器 实现常见的远程指令：关机、重启、取消关机、弹窗、锁屏、重置光标、冻结鼠标和键盘 支持截取目标主机屏幕压缩后并传回服务端 支持开机自启动 支持通过管道实现远程CMD并传回服务端 支持文件上传、下载 支持键盘记录（实时记录和离线记录）--开发中...
CVE-2026-21533_Scanner.py
CVE-2026-21533 扫描器：Windows RDP 本地权限提升检测工具 本仓库包含一个针对 CVE-2026-21533 漏洞的检测 工具，该漏洞是 Windows 远程桌面服务（RDS）中的权限管理缺陷，可能允许本地攻击者将其权限提升至 SYSTEM。 重要提示： 此脚本是一个教育性和检测性的概念验证（PoC） 。其目的是帮助系统管理员和安全团队（蓝队）快速识别其网络中可能易受攻击的系统。它不是漏洞利用工具 ，不包含任何执行权限提升的代码。 漏洞背景（CVE-2026-21533） 描述： Windows 远程桌面服务中的权限管理不当。 影响：...
EUVD-2026-63696
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
EUVD-2026-63697
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
CVE-2026-55015
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
CVE-2026-55013
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability
...
CVE-2026-55015
CVE-2026-55015 is an uncontrolled search path element vulnerability in Windows Remote Help that allows an authorized local attacker to cause a denial of service . The attack requires local access with low privileges and no user interaction (CVSS 3.1: 5.5 MEDIUM ). CISA's SSVC assessment indicates...
CVE-2026-55013 Windows Remote Help Defense Spoofing Vulnerability
...
CVE-2026-55013
An uncontrolled search path element in Windows Remote Help Defense allows an authorized local attacker (low privileges, no user interaction) to spoof, with HIGH confidentiality and integrity impact per CVSS 3.1 (base score 7.1). Microsoft's update guide is the primary reference. No exploit code o...
Windows Remote Help Defense Spoofing Vulnerability
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
Microsoft Remote Help Denial of Service Vulnerability
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
PT-2026-79190
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
PT-2026-79189
Name of the Vulnerable Software and Affected Versions Windows Remote Help Defense affected versions not specified Description An uncontrolled search path element allows an authorized attacker to perform local spoofing. This occurs when the application searches for a file in a directory that can b...
CVE-2026-65671
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...
CVE-2026-65672
Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally...