juicy-potato

Juicy Potato abusing the golden privileges A sugared version ofRottenPotatoNG, with a bit of juice, i.e. another Local Privilege Escalation tool, from a Windows Service Accounts to NT AUTHORITY\SYSTEM Summary RottenPotatoNG and its variants leverages the privilege escalation chain based on BITS...

JuicyPotatoNG

JuicyPotatoNG 서비스 계정에서 시스템으로의 또 다른 Windows 로컬 권한 상승입니다. 전체 세부 정보는 -- https://decoder.cloud/2022/09/21/giving-juicypotato-a-second-chance-juicypotatong/ 사용법 JuicyPotatoNG by decoderit & splintercode Mandatory args: -t createprocess call: CreateProcessWithTokenW, CreateProcessAsUser, try both -p :...

CVE-2026-66804-CrossDevice-LPE

CVE-2026-66804: Microsoft Windows Cross Device Service 권한 상승 취약점 MSRC에 보고한 CrossDevice/FrameServer LPE로컬 권한 상승에 대한 개념 증명PoC으로, CVE-2026-66804로 배정되었습니다. Windows 10 및 Windows 11에 영향을 줍니다. 취약점 Windows는 이 머신 전체에 적용되는 COM 서버를 등록합니다:...

Exploit for CVE-2026-66804

CVE-2026-66804: Microsoft Windows Cross Device Service Elevati...

CVE-2026-20806

CVE-2026-20806 is a Windows COM vulnerability described as a type confusion in resource access that can let an authorized, locally authenticated attacker disclose data. The CVE is referenced across multiple sources (NVD, Red Hat, NCSC, CIRCL) with the same description of a local information discl...

CVE-2026-20806 Windows COM Server Information Disclosure Vulnerability

...

EUVD-2019-9755

Malware in sbrugna...

EUVD-2020-5802

Malware in sbrugna...

EUVD-2025-2353

Malicious code in bioql PyPI...

EUVD-2025-2337

Malicious code in bioql PyPI...

EUVD-2025-19759

Malicious code in bioql PyPI...

CVE-2025-34090

Rejected reason: Neither filed by Chrome nor a valid security vulnerability...

PT-2025-27671 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome affected versions not specified Description: A security bypass issue exists in the AppBound cookie encryption mechanism of Google Chrome due to insufficient validation of COM server paths during inter-process communication. This...

CVE-2025-3200

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200 Com-Server Exposed via Weak TLS

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200

CVE-2025-3200 affects the Com-Server component, where an unauthenticated remote attacker could exploit the use of insecure TLS 1.0 and TLS 1.1 to intercept and manipulate encrypted communications between the Com-Server and connected systems. The issue stems from weak cryptographic protocol suppor...

CVE-2025-3200 Com-Server Exposed via Weak TLS

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

CVE-2025-3200: Use of a Broken or Risky Cryptographic Algorithm

An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected systems...

PT-2025-18058

Name of the Vulnerable Software and Affected Versions Com-Server affected versions not specified Description An unauthenticated remote attacker could exploit the used, insecure TLS 1.0 and TLS 1.1 protocols to intercept and manipulate encrypted communications between the Com-Server and connected...