690 matches found
CVE-2024-1874
CVE-2024-1874 Proof Of Concept for CVE-2024-1874 Command Injection via Array-ish $command Parameter of procopen bypass CVE-2024-1874 fix The CVE: In PHP versions 8.1. before 8.1.29, 8.2. before 8.2.20, 8.3. before 8.3.8, the fix for CVE-2024-1874 does not work if the command name includes trailin...
rat-shell
Stories in Ready Windows Remote Access Trojan RAT using .NET Sockets Client-server binaries and source-code for controlling a remote machine behind a NAT with a command-line shell in Windows. Although the core provides support for communication with multiple RATs, the command-line interface used...
usbhijacking
CVE-2017-8464 PoC Windows Shell in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows local users or remote attackers to execute arbitrary code via ...
CVE-2026-32202
Disclaimer This tool is for authorized red teaming and penetration testing only. Unauthorized use against systems without explicit permission is illegal. Use at your own risk. The author assumes no liability for any misuse or damage. Description NTLMv2 hash coercion via incomplete Windows Shell...
CVE-2026-97013
Access of resource using incompatible type 'type confusion' in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-119817
Double free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-105506
Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-102868
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-119938
A heap-based buffer overflow vulnerability exists in the Windows Shell , which could allow an unauthorized attacker to execute code over a network . While specific technical details regarding the root cause or affected versions are not detailed in the provided documents beyond the general compone...
EUVD-2026-122433
Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...
CVE-2026-119817
A double free vulnerability in the Windows Shell allows an authorized attacker to achieve local privilege elevation . The impact of this vulnerability is rated as High , affecting confidentiality, integrity, and availability. Remediation is available via official Microsoft security updates, such ...
EUVD-2026-122338
Double free in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-105506
A buffer over-read vulnerability exists in the Windows Shell , which allows an authorized attacker to disclose information locally. This vulnerability is associated with CWE-126 . While the provided documents confirm the existence of the vulnerability and its local impact, they do not specify the...
EUVD-2026-122012
Buffer over-read in Windows Shell allows an authorized attacker to disclose information locally...
EUVD-2026-121507
Access of resource using incompatible type 'type confusion' in Windows Shell allows an authorized attacker to elevate privileges locally...
CVE-2026-97013
A type confusion vulnerability in Windows Shell allows an authorized attacker to perform a local privilege escalation . This issue is addressed in several Microsoft security updates, including KB5131291 (for Windows Server 2016 and Windows 10 LTSB 2016) and KB5131085 (for Windows Server 2019 and ...
CVE-2026-102868
A Windows Shell vulnerability (CVE-2026-102868) allows an authorized attacker to disclose sensitive system information locally by exposing it to an unauthorized control sphere. The vulnerability is categorized under CWE-497 . While the technical root cause is not detailed in the provided document...
EUVD-2026-121712
Exposure of sensitive system information to an unauthorized control sphere in Windows Shell allows an authorized attacker to disclose information locally...
CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass
CVE-2026-21510 - Windows Shell Security Feature Bypass Vulnerability Repository Title Suggestion: CVE-2026-21510-Windows-Shell-Bypass-Analysis This README provides a comprehensive overview of CVE-2026-21510 , a high-severity, actively exploited zero-day vulnerability patched by Microsoft in the...
