CVE-2020-0728

CVE-2020-0728 詳細 TrustedInstaller.exe サービスは NTAUTHORITY\SYSTEM として実行され、Sxs Store クラス 3C6859CE-230B-48A4-BE6C-932C0C202048 COM サービスとインターフェース ISxsStore をホストしています。 このサービスのアクセス許可 O:BAG:BAD:A;;CCDCLC;;;PSA;;CCDC;;;SYA;;CCDC;;;BAA;;CCDC;;;IUA;;CCDC;;;SU は、ローカルシステム上の任意のユーザーにアクセスを許可します。 ISxsStore インターフェー...

PrintNotifyPotato

PrintNotifyPotato PrintNotifyPotato 另一款 potato，利用 PrintNotify COM 服务进行权限提升 适用于 Windows 10 - 11、Windows Server 2012 - 2022 用法 root@kitploit: C:\Windows\Temp PrintNotifyPotato.exe aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaa aaaa aaa aaaaaaa aaaaaaa aaa aaaa...

CcmMessagingBackdoor

CcmMessagingBackdoor Herramienta de prueba de concepto para construir e instalar un servicio CcmMessaging rogue para mantener acceso en un Management Point Uso Compilar e instalar el servicio COM rogue en el Management Point root@kitploit: Compile PS C:...

Unspecified Vulnerability in ASUS HM Com Service

ASUS HM Com Service is a motherboard-related utility program from ASUS. An unspecified vulnerability exists in ASUS HM Com Service, which can be exploited by an attacker to execute arbitrary code with system privileges...

ASUS HM Com Service 1.00.31 Unquoted Service Path

Exploit Title: ASUS HM Com Service 1.00.31 - 'asHMComSvc' Unquoted Service Path Date: 2019-11-16 Exploit Author : Olimpia Saucedo Vendor Homepage: www.asus.com Version: 1.00.31 Tested on: Windows 10 Pro x64 but it should works on all windows version The application suffers from an unquoted servic...

Microsoft Windows - CreateObjectTask SettingsSyncDiagnostics Privilege Escalation

Microsoft Windows - CreateObjectTask SettingsSyncDiagnostics Privilege Escalation Source: https://code.google.com/p/google-security-research/issues/detail?id=437 Windows: CreateObjectTask SettingsSyncDiagnostics Elevation of Privilege Platform: Windows 8.1 Update I don’t believe it’s available in...

Microsoft Windows - CreateObjectTask TileUserBroker Privilege Escalation

Source: https://code.google.com/p/google-security-research/issues/detail?id=439 Windows: CreateObjectTask TileUserBroker Elevation of Privilege Platform: Windows 8.1 Update I don’t believe it’s available in earlier Windows versions Class: Elevation of Privilege Summary: The CreateObjectTask...

Microsoft Windows NT 4.0 DCOM Server Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry key...

ActiveScriptRuby 'GRScript18.dll' ActiveX控件DLL装载任意代码执行漏洞

Bugtraq ID: 53011 CVE ID：CVE-2012-1241 ActiveScriptRuby用于把Ruby实现到Windows环境中。 ActiveScriptRuby存在一个安全漏洞，允许恶意用户执行任意代码。 GRScript18.dll存在一个错误，可被利用执行任意Ruby命令，构建恶意WEB页，诱使用户解析可触发此漏洞。 0 ActiveScriptRuby 1.8.7.34 厂商解决方案 用户可联系厂商升级到最新版本： http://www.artonx.org/data/asr/ 或通过执行如下命令注销COM服务： regsvr32 /u...

Microsoft Windows NT 4.0 - DCOM Server

source: https://www.securityfocus.com/bid/624/info It is possible for a local user to modify how DCOM servers are run, thereby escalating his/her privilege level. The Interactive User has write permissions to the DCOM registry entries. By editing the registry keys associated with DCOM server...