wesng

Windows Exploit Suggester - Next Generation WES-NG WES-NG is a tool based on the output of Windows' systeminfo utility which provides the list of vulnerabilities the OS is vulnerable to, including any exploits for these vulnerabilities. Every Windows OS between Windows XP and Windows 11, includin...

vulnerable-PDF

vulnerable-PDF = Salaries.pdf - 개발 모드: 08.10.2022 참고: 이것은 테스트 전용이며 Microsoft의 통합 프로그램인 계산기만 열 수 있습니다. = 또는 PDF 파일을 사용하여 금지된 디렉터리에 calc.exe를 다운로드할 수 있습니다 :D 경고! 테스트 및 교육 전용입니다 = vulnerable-PDF = Book.pdf 참고: System23 디렉터리를 둘러보고 그 안에 무엇이 있는지 확인할 수 있습니다 = 경고! 테스트 및 교육 전용입니다 = vulnerable-PDF =...

CVE-Writeups

CVE-취약점 분석 보고서 보안 취약점 연구 분석서. CVE-2026-50402: Windows NTFS 권한 상승 CVSS 7.8...

cve-2019-0808-poc

cve-2019-0808-poc cve-2019-0808-poc 그냥 BSOD, OS 재부팅에 사용됨;...

CVE-2026-33829

CVE-2026-33829 이 저장소는 Windows 운영 체제를 사용하는 자산이 search: 프로토콜 핸들러의 안전하지 않은 조작에 취약한지 수동적이고 통제된 방식으로 감사하고 검증하도록 설계된 Bash 기반 자동화 도구를 포함합니다. 이 스크립트는 수동적 수신기 역할을 하며, 대상이 특수하게 설계된 URI와 상호작용할 때 SMB포트 445 프로토콜을 통한 나가는 연결 시도를 tcpdump로 캡처합니다. 🛠️ 시스템 요구 사항 검증 환경Linux: 슈퍼유저sudo 권한과 tcpdump 패키지가 설치되어 있어야 합니다. 대상...

invoker

Invoker Penetration testing utility and antivirus assessment tool. Built with Visual Studio Community 2022 v17.5.4 64-bit and tested on Windows 10 Enterprise OS 64-bit. Made for educational purposes. I hope it will help! This repository started to have known signatures and I don't have time to...

EUVD-2026-73012

Use after free in Windows Device Association Service allows an authorized attacker to elevate privileges locally...

EUVD-2026-68916

A vulnerability in the Backblaze Client allows a local user to make the system not bootable by creating a link from Backblaze's folder to Windows OS system files during a backup. Successful exploitation requires an administrator-level system change that results in the absence of specific Windows ...

PT-2026-84060

Name of the Vulnerable Software and Affected Versions Backblaze Client affected versions not specified Description An issue exists where a local user can render a system unbootable by creating a link from the Backblaze folder to Windows OS system files during a backup process. This occurs due to...

The vulnerability of the HTTP.sys driver on Windows operating systems, which allows attackers to increase their privileges

The vulnerability of the HTTP.sys driver on Windows operating systems is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2026-66799

Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally...

CVE-2026-62726

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-62725

Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally...

CVE-2026-66802

CVE-2026-66802 describes a race condition in Microsoft Azure Attestation service and Device Health Attestation Service caused by improper synchronization of a shared resource. This concurrency issue allows an unauthenticated, network-based attacker to execute code on affected systems, with high i...

CVE-2026-65797 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65799 Windows DNS Elevation of Privilege Vulnerability

...

CVE-2026-65799

CVE-2026-65799 is an integer overflow or wraparound vulnerability in the Windows DNS service that allows an authorized local attacker to elevate privileges . The FSTEC BDU further characterizes the root cause as a buffer overflow in dynamic memory . Microsoft rates it CVSS 6.7 (MEDIUM) with high ...

CVE-2026-65790 Windows Message Queuing Elevation of Privilege Vulnerability

...

CVE-2026-65781

CVE-2026-65781 is a Windows Autopilot use-after-free causing local privilege escalation for an authorized attacker. Documents do not specify affected build numbers, exact vulnerable component/file, or root-cause details beyond the use-after-free description. No exploitation status or patch/versio...

CVE-2026-65778

CVE-2026-65778 is a Windows Autopilot use-after-free vulnerability that enables local privilege escalation for an authorized attacker with low privileges and no user interaction. The CVSS 3.1 vector (Local, High impact, Privileges Required: Low, Confidentiality/Integrity/Availability: High) indic...