#exploit High severity Windows vulnerabilities: 1⃣. CVE-2025-26686: RCE in Windows 10/11/Srv TCP/IP stack - github.com/mrk336/CVE-2025-2… // leaves sensitive memory unlocked, allowing remote attackers to hijack systems. Exploitable over the network, it risks full compromise. Patch now.. 2⃣. CVE-2025-60710: LPE in Taskhost Windows Tasks - github.com/Wh04m1001/CVE-202… // Improper link resolution before file access ('link following') in Host Process for Windows Tasks allows an authorized attacker to elevate privileges locally 3⃣. CVE-2025-54110: Windows Kernel Integer Overflow Privilege Escalation - github.com/ByteHawkSec/CVE-2… // high-severity vulnerability in Windows Kernel that arises from improper handling of integer values during memory allocation 4⃣ CVE-2025-54918:  Improper authentication in Windows NTLM- github.com/mrk336/From-Footh… // Simulated exploitation and mitigation of CVE-2025-54918 (Win NTLM flaw). Incl. detection scripts, Ansible patching, CI/CD hardening. Demonstrates PrivEsc from low-level access to SYSTEM in hybrid cloud environments

In the recent documents leaked by KittenBusters, we see a part related to #APT35's infrastructure. By logging into several user accounts of this group on the Edis Global website with the leaked passwords, I downloaded the invoices and categorized them here for those who want to have them. They used phone numbers from Russia, Israel, and the Netherlands with fake addresses to make purchases from this site through crypto for their infrastructure. files.narimangharib.com/othe…