usbhijacking

CVE-2017-8464 PoC Оболочка Windows в Microsoft Windows Server 2008 SP2 и R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold и R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, 1703 и Windows Server 2016 позволяет локальным пользователям или удаленным злоумышленникам выполнять...

libfwsi

libfwsi — это библиотека для доступа к формату Windows Shell Item. Информация о проекте: Статус: экспериментальный Лицензия: LGPL-3.0-or-later Дополнительная информация: Документация проекта: https://github.com/libyal/libfwsi/wiki/Home Сборка из исходного кода:...

rat-shell

Stories in Ready Cheval de Troie d'accès à distance RAT Windows utilisant des sockets .NET Binaires client-serveur et code source pour contrôler une machine distante derrière un NAT avec un shell en ligne de commande sous Windows. Bien que le noyau prenne en charge la communication avec plusieurs...

CVE-2026-32202

Дисклеймер Этот инструмент предназначен только для авторизованного red teaming и тестирования на проникновение. Несанкционированное использование против систем без явного разрешения незаконно. Используйте на свой страх и риск. Автор не несёт ответственности за любое неправомерное использование ил...

CVE-2026-21510-CVSS-8.8-Important-Windows-Shell-security-feature-bypass

CVE-2026-21510 — Уязвимость обхода функции безопасности Windows Shell Предлагаемое название репозитория: CVE-2026-21510-Windows-Shell-Bypass-Analysis Этот README содержит всесторонний обзор CVE-2026-21510 — критической, активно эксплуатируемой zero-day уязвимости, исправленной Microsoft в рамках...

CVE-2024-1874

CVE-2024-1874 Концепт-эксплойт для CVE-2024-1874 Внедрение команд через массивоподобный параметр $command функции procopen обход исправления CVE-2024-1874 Суть CVE: В версиях PHP 8.1. до 8.1.29, 8.2. до 8.2.20, 8.3. до 8.3.8 исправление CVE-2024-1874 не работает, если имя команды содержит...

OS Command Injection

@cyclonedx/cyclonedx-npm is vulnerable to OS Command Injection. The vulnerability is due to improper sanitization of the untrusted --workspace value when constructing a Windows shell command, which allows an attacker to inject shell metacharacters and execute arbitrary operating-system commands...

Microsoft Plugs Nearly 1,000 Security Holes

Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that man...

CVE-2026-70563

Improper link resolution before file access 'link following' in Windows Shell allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-69829

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

CVE-2026-69606

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69528

Missing authentication for critical function in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69392

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69383

External control of file name or path in Windows Shell allows an authorized attacker to elevate privileges locally...

EUVD-2026-73691

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69392

CVE-2026-69392 is a use-after-free vulnerability in Windows Shell that allows an authorized attacker to perform local privilege escalation . The CVSS 3.1 score is 7.8 (HIGH) , reflecting a local attack vector with high complexity, low privileges required, no user interaction, and a scope change l...

CVE-2026-69829

CVE-2026-69829 is a heap-based buffer overflow in Windows Shell that allows an unauthorized attacker to achieve remote code execution over a network . Microsoft's assigned CVSS 3.1 score is 9.8 (CRITICAL) , with an attack vector of Network, low complexity, no privileges required, and no user inte...

EUVD-2026-73629

Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to execute code over a network...

EUVD-2026-73549

Use after free in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-69606

CVE-2026-69606 is a use-after-free vulnerability in Windows Shell that allows a local, low-privilege attacker to achieve local privilege elevation . The CVSS 3.1 score is 7.0 (HIGH) , with the vector CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating a local attack vector, high complexity, ...