speakeasy

Speakeasy Speakeasy 是一个 Windows 恶意软件模拟框架，无需完整虚拟机即可在建模的 Windows 运行时中执行二进制文件、驱动程序和 shellcode。它模拟 API、进程/线程行为、文件系统、注册表和网络活动，使样本能够在逼真的执行路径中持续运行。您可以通过 speakeasy CLI 快速分析，或将其作为 Python 库嵌入，并获取结构化的 JSON 报告。 背景文章: Mandiant 的概述文章。 快速开始 从 PyPI 安装: root@kitploit: python3 -m pip install speakeasy-emulator...

TriBell_Edge_SandBox_Escape

TriBellEdgeSandBoxEscape Tribell Edge 沙箱逃逸 - Edge 遗留漏洞 BadgeUpdateManager / TileFlyoutUpdateManager / ToastNotificationManager 的 PoC，利用跨边界 XmlDocument 共享并逃逸 Edge 的 LPAC 沙箱 CVE-2019-0555。 该 PoC 在即时编译 JIT 过程中触发 notepad.exe 的执行。 测试环境 Windows 10 Version 1809 OS Build 17763.107 Microsoft Edge Microsof...

CVE-2026-58527

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-54125

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50503

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50486

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50460

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50457

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50449

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50452

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50413

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50410

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50403

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50385

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50345

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50348

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-50340

Use after free in Windows Runtime allows an authorized attacker to elevate privileges over a network...

CVE-2026-50322

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-50323

Use after free in Windows Runtime allows an authorized attacker to elevate privileges locally...

CVE-2026-58527

CVE-2026-58527 affects Windows Runtime and is due to a race condition from improper synchronization, enabling local privilege escalation by an authenticated attacker. Public sources (NVD/NCSC/NVD-derived feeds and the official Microsoft entry) describe it as a Windows Runtime Elevation of Privile...