RemotePotato0

RemotePotato0 UPDATE 21-10-2022: The main exploit scenario RPC- LDAP of RemotePotato0 has been fixed. More details at -- https://twitter.com/splintercode/status/1583555613950255104 Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that...

September 27, 2021—KB5005619 (OS Build 20348.261) Preview

None None...

August 26, 2021—KB5005102 (OS Build 17763.2145) Preview

None None...

August 26, 2021—KB5005103 (OS Build 18363.1766) Preview

None None...

RemotePotato0 - Just Another "Won't Fix" Windows Privilege Escalation From User To Domain Admin

Just another "Won't Fix" Windows Privilege Escalation from User to Domain Admin. RemotePotato0 is an exploit that allows you to escalate your privileges from a generic User to Domain Admin. Briefly: It abuses the DCOM activation service and trigger an NTLM authentication of the user currently...

CVE-2013-4922

CVE-2013-4922 is a double free vulnerability in the Wireshark DCOM ISystemActivator dissector (function dissect_dcom_sysact.c) affecting Wireshark 1.10.x before 1.10.1, leading to denial of service via crafted packets. Remediation: upgrade to Wireshark 1.10.1 or apply vendor patches; affected adv...

CVE-2004-0116: Undefined Security Weakness

An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service memory consumption via an activation request with a large length field...