TGViewer
Reverse Dungeon Reverse Dungeon @reverse_dungeon · 5.04K subscribers
Post #3988 1.93K

Forwarded from CyberSecurityTechnologies

#exploit
High severity Windows vulnerabilities:

1⃣ CVE-2025-26686:
RCE in Windows 10/11/Srv TCP/IP stack
// leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now..
2⃣ CVE-2025-60710:
LPE in Taskhost Windows Tasks
// Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally
3⃣ CVE-2025-54110:
Windows Kernel Integer Overflow Privilege Escalation

// high-severity vulnerability in Windows Kernel that arises from improper handling of integer values during memory allocation
4⃣ CVE-2025-54918: 
Improper authentication in Windows NTLM
// Simulated exploitation and mitigation of CVE-2025-54918 (Win NTLM flaw). Incl. detection scripts, Ansible patching, CI/CD hardening. Demonstrates PrivEsc from low-level access to SYSTEM in hybrid cloud environments

// Disclaimer
  • ❤‍🔥 1
More from @reverse_dungeon
  1. Oct 14, 2026До какого-то момента мне не особо было интересно вскрывать внутрянку AGESA, но парочку нах…
  2. Oct 10, 2026https://dmitry.gr/?r=06.%20Thoughts&proj=12.%20RV
  3. Oct 7, 2026https://arxiv.org/abs/2508.06643 Очень большая обзорная статья про символическое выполние…
  4. Oct 4, 2026EDR Evasion: Process Injection Without WriteProcessMemory #EDR #maldev
  5. Sep 30, 2026https://www.manifold.security/blog/third-party-com-placeholder-clickfix
  6. Sep 24, 2026Вспомнилось ! Был такой хороший гайд Introduction to Exploit Development Сегодня он интере…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →