CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Schwachstelle bezüglich Rechteausweitung im Microsoft Windows Cross Device Service Proof of Concept für eine CrossDevice/FrameServer-LPE, die ich an MSRC gemeldet habe und die CVE-2026-66804 erhalten hat. Sie betrifft Windows 10 und Windows 11. Schwachstelle Windows registriert...

juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

JuicyPotatoNG

JuicyPotatoNG Solo un'altra escalation di privilegi locali di Windows da account di servizio a System. Dettagli completi su -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ Utilizzo root@kitploit: JuicyPotatoNG by decoderit & splintercode Mandatory args: -t...

Exploit for CVE-2026-66804

CVE-2026-66804: Microsoft Windows Cross Device Service Elevati...

CVE-2026-20806

CVE-2026-20806 is a Windows COM vulnerability described as a type confusion in resource access that can let an authorized, locally authenticated attacker disclose data. The CVE is referenced across multiple sources (NVD, Red Hat, NCSC, CIRCL) with the same description of a local information discl...

CVE-2026-20806 Windows COM Server Information Disclosure Vulnerability

...

EUVD-2019-9755

Malware in sbrugna...

EUVD-2020-5802

Malware in sbrugna...

EUVD-2025-2337

Malicious code in bioql PyPI...

EUVD-2025-2353

Malicious code in bioql PyPI...

EUVD-2025-19759

Malicious code in bioql PyPI...

CVE-2025-34090

Rejected reason: Neither filed by Chrome nor a valid security vulnerability...

PT-2025-27671 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Description: A security bypass issue exists in the AppBound cookie encryption mechanism of Google Chrome due to insufficient validation of COM server paths during inter-process communication. This...

CVE-2025-3200

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200 Com-Server Exposed via Weak TLS

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200 Com-Server Exposed via Weak TLS

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200

CVE-2025-3200 affects the Com-Server component, where an unauthenticated remote attacker could exploit the use of insecure TLS 1.0 and TLS 1.1 to intercept and manipulate encrypted communications between the Com-Server and connected systems. The issue stems from weak cryptographic protocol suppor...

PT-2025-18058 · Unknown · Com-Server

Name of the Vulnerable Software and Affected Versions: Com-Server affected versions not specified Description: An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connecte...

Wiesemann & Theis Com-Server 加密问题漏洞

Wiesemann & Theis Com-Server is a communication server for industrial automation from Wiesemann & Theis that provides connectivity between serial devices and Ethernet. A cryptographic issue vulnerability exists in Wiesemann & Theis Com-Server versions prior to 1.60 that stems from the use of...