tor-rootkit

tor-rootkit A Python 3 standalone Windows 10 / Linux Rootkit. The networking communication get's established over the tor network. This rootkit is WIP. Disclaimer Use for educational purposes only. How to use 1. Clone the repo and change directory: root@kitploit: git clone...

RoguePlanet

RoguePlanet RoguePlanet Windows Defender Vulnerability Welcome back everyone !!! The exploit is a race condition, so it's a hit or miss. I have managed to get a 100% success rate on some machines while it struggled to work on others. The exploit has been tested in Windows 11 Official channel +...

CVE-2026-77605

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

CVE-2026-77605 Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

CVE-2026-77605

The open-source source code editor Notepad++ contains a vulnerability where the Folder as Workspace Run by system action can resolve a different sibling file than the one selected by the user. On Windows 10 or Windows 11 , an attacker can place a command script (e.g., adding a .cmd extension to t...

CVE-2026-77605 Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

CVE-2026-77605 Notepad++ “Run by system” executes *.txt.cmd when user selected *.txt (target confusion → command execution)

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

EUVD-2026-84573

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

CVE-2026-77605: Improper Input Validation

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

NotepadPlusPlus: CVE-2026-77605: Improper Input Validation

Notepad++ is a free and open-source source code editor. Prior to 8.9.8, the Folder as Workspace Run by system action in Notepad++ can resolve a different sibling file than the file selected by the user. When an attacker places a command script whose name is the selected text-file path with .cmd...

PT-2026-96842

Name of the Vulnerable Software and Affected Versions Notepad++ versions prior to 8.9.8 Description The Folder as Workspace Run by system action can resolve a sibling file different from the one selected by the user. On Windows 10 or Windows 11, if an attacker places a command script with the sam...

YellowKey-BitLocker-CVE-2026-45585

YellowKey BitLocker YellowKey BitLocker Recovery Tool respalda las claves de recuperación de BitLocker y audita CVE-2026-45585 en Windows 10/11. Las búsquedas de bitlocker yellowkey , yellowkey bitlocker , yellowkey github y yellowkey vulnerability aterrizan aquí. CLI + GUI portátil para volúmene...

SOC-Investigation-CVE-2024-49138

🛡️ Informe de Investigación SOC: Explotación de CVE-2024-49138 📌 Resumen Ejecutivo Título de la Alerta: SOC335 - Explotación de CVE-2024-49138 Detectada Severidad: Alta Host Objetivo: Victor 172.16.17.207 Sistema Operativo: Windows 10 Usuario Principal: letsdefend Veredicto: Positivo Verdadero...

Astra Linux – Vulnerability in Linux

A issue was discovered in the ALFA Windows 10 driver 6.1316.1209 for AWUS036H. The WEP, WPA, WPA2, and WPA3 implementations allow plaintext frames to be accepted in a protected Wi-Fi network. An adversary can exploit this to inject arbitrary data frames independently of the network configuration...

CVE-2026-15418

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

CVE-2026-15418 CP210x Memory Leakage

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

CVE-2026-15418

CVE-2026-15418 affects the silabser.sys driver for CP210x devices in versions 11.5.0 and earlier . A local unprivileged user with physical access can connect a malicious device and use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory . The vulnerability is limited to ...

EUVD-2026-75625

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

CVE-2026-15418: Improper Handling of Length Parameter Inconsistency

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...

PT-2026-89509

In the silabser.sys driver for CP210x devices v11.5.0 and earlier, a local unprivileged user with a malicious device can use malformed packets to leak up to 145 bytes of uninitialized kernel pool memory. This vulnerability affects Windows 10 and earlier...