Windows_LPE_AFD_CVE-2023-21768

CVE-2023-21768 Lokaler Privilegieneskalations-POC Autoren: chompie & b33f Nur zu Demonstrationszwecken. Der vollständige Exploit funktioniert auf anfälligen Windows 11 22H2 Systemen. Write-Primitive funktioniert auf allen anfälligen Systemen. Verwendung: WindowsAFDLPECVE-2023-21768.exe wobei die...

printerbugnew

Reiner RPC über TCP Druckspooler-Trigger Für Windows 11 22H2+ / Windows Server 2025 Verwendung printerbugnew.py username password domain attackerhost tcpport Beispiele Anonyme Verbindung printerbugnew.py 192.168.1.100 Mit Anmeldedaten printerbugnew.py 192.168.1.100 admin Password123 DOMAIN...

CVE-2023-21768-POC

CVE-2023-21768-POC POC de escalonamento de privilégio local do CVE-2023-21768 no Windows 11 22H2 Uso: WindowsAFDLPECVE-2023-21768.exe Onde é o ID do processo a ser elevado decimal, fazendo com que o processo de destino seja elevado para o privilégio SYSTEM...

CVE-2023-21768

CVE-2023-21768 Lokaler Privilegieneskalations-PoC Autoren: chompie & b33f Nur zu Demonstrationszwecken. Der vollständige Exploit funktioniert auf anfälligen Windows 11 22H2-Systemen. Der Write-Primitive funktioniert auf allen anfälligen Systemen. Verwendung: WindowsAFDLPECVE-2023-21768.exe wobei...

Microsoft Windows NTLM 日志信息泄露漏洞

Microsoft Windows is an operating system used on personal devices by the American company Microsoft. Microsoft Windows NTLM has a vulnerability that allows for information leakage. Attackers can exploit this vulnerability to obtain sensitive information. The following products and versions are...

Microsoft Windows 资源管理错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and versions are...

Microsoft Graphics Component 资源管理错误漏洞

Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component. An attacker could exploit this vulnerability to elevate privileges. The following products and editions are affected:Window...

Microsoft Windows TCP/IP 安全漏洞

Microsoft Windows TCP/IP is a component of Microsoft Corporation USA that provides TCP/IP configuration capabilities for Windows. A security vulnerability exists in Microsoft Windows TCP/IP. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...

Microsoft SPNEGO Extended Negotiation 安全漏洞

Microsoft SPNEGO Extended Negotiation is a SPNEGO extension from Microsoft Corporation USA. A security vulnerability exists in Microsoft SPNEGO Extended Negotiation. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:Windows 10...

Microsoft Windows DirectX 安全漏洞

Microsoft Windows DirectX is the DirectX end-user runtime Web installer from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows DirectX. An attacker could exploit this vulnerability to cause a denial of service on the system. The following products and editions are...

Microsoft Windows Storage Port Driver 安全漏洞

Microsoft Windows Storage Port Driver is a system-supplied storage port driver from Microsoft USA that is especially suited for high-performance buses, such as NVMe over Fibre Channel FC or FC buses and RAID adapters. A security vulnerability exists in the Microsoft Windows Storage Port Driver. A...

Microsoft Windows Cryptographic Services 安全漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cryptographic Services. An attacker exploiting this vulnerability could gain access to sensitive information. The following...

Microsoft Windows SMB Server 信任管理问题漏洞

Microsoft Windows SMB Server is a network file sharing protocol from Microsoft USA. It allows applications on a computer to read and write files and request services from server programs on a computer network. A vulnerability exists in Microsoft Windows SMB Server for trust management issues. An...

Microsoft Windows Remote Desktop Licensing Service 访问控制错误漏洞

Microsoft Windows Remote Desktop Licensing Service is an authorization license from Microsoft Corporation USA that manages and authenticates remote desktop connections. An access control error vulnerability exists in Microsoft Windows Remote Desktop Licensing Service. An attacker could bypass...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and versions are affected:Windows 10...

Microsoft Windows Netlogon 安全漏洞

Microsoft Windows Netlogon is an important component of Windows from Microsoft Corporation USA, whose main functions are authentication of users and machines on intra-domain networks and replication of databases for domain-controlled backups, as well as maintenance of domain member-to-domain,...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to perform functions such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Access...

Microsoft DWM Core Library 资源管理错误漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation. A resource management error vulnerability exists in the Microsoft DWM Core Library. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows Cryptographic Services 资源管理错误漏洞

Microsoft Windows Cryptographic Services is a cryptographic service provider program from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Windows Cryptographic Services. An attacker could exploit this vulnerability to cause a denial of service on the syste...

Microsoft Local Security Authority Server 安全漏洞

Microsoft Local Security Authority Server is an LSA authentication service from Microsoft Corporation USA. A security vulnerability exists in Microsoft Local Security Authority Server. The following products and versions are affected:Windows Server 2025,Windows Server 2025 Server Core...