CVE-2026-26119

CVE-2026-26119 WAC RCE - CVE-2026-26119 Windows Admin Center authentifizierte RCE über WinREST/PowerShell invokeCommand. Verwendung: root@kitploit: python3 wacrce.py "" WACPASS= python3 wacrce.py Umgebung: root@kitploit: WACBASE - override target base URL default below WACPASS - password, used if...

WinREST Remote Privilege Escalation

So a year back I was massively scanning internet. This case ISPs IPs blocks where you can find easily at RIPE for example. Then I found some interesting hosts where SMB were open and the ACL is totally open to root file system with the same netbios name. All file system is writable. I was able to...