GodPotato - Local Privilege Escalation Tool From A Windows Service Accounts To NT AUTHORITY\SYSTEM

Based on the history of Potato privilege escalation for 6 years, from the beginning of RottenPotato to the end of JuicyPotatoNG, I discovered a new technology by researching DCOM, which enables privilege escalation in Windows 2012 - Windows 2022, now as long as you have "ImpersonatePrivilege"...

March 14, 2023—KB5023698 (OS Build 22000.1696)

None None...

March 14, 2023—KB5023697 (OS Build 14393.5786) - EXPIRED

None None...

March 14, 2023—KB5023752 (Security-only update)

None None...

March 14, 2023—KB5023764 (Security-only update)

None None...

March 14, 2023—KB5023706 (OS Build 22621.1413)

None None...

March 14, 2023—KB5023702 (OS Build 17763.4131)- EXPIRED

None None...

March 14, 2023—KB5023705 (OS Build 20348.1607)

None None...

March 14, 2023—KB5023713 (OS Build 10240.19805) - EXPIRED

None None...

K01837042: Multiple Wireshark (tshark) vulnerabilities

Security Advisory Description CVE-2015-8711 epan/dissectors/packet-nbap.c in the NBAP dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 does not validate conversation data, which allows remote attackers to cause a denial of service NULL pointer dereference and application crash v...

SUSE CVE-2013-4924

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

SUSE CVE-2013-4925

Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted packet...

SUSE CVE-2015-8714

The dissectdcomOBJREF function in epan/dissectors/packet-dcom.c in the DCOM dissector in Wireshark 1.12.x before 1.12.9 does not initialize a certain IPv4 data structure, which allows remote attackers to cause a denial of service application crash via a crafted packet...

November 8, 2022—KB5020009 (Monthly Rollup)

None None...

November 8, 2022—KB5019970 (OS Build 10240.19567) - EXPIRED

None None...

KB5004442: Windows DCOM Server Security Feature Bypass Registry Check (CVE-2021-26414)

The remote Windows DCOM Server may be in a vulnerable state to exploitation by having the HKLM\Software\Microsoft\Ole\AppCompat\RequireIntegrityActivationAuthenticationLevel registry value set to 0. Hardening changes in DCOM were required for CVE-2021-26414 and were implemented in 2 phases on Jun...

November 8, 2022—KB5020019 (Monthly Rollup)

None None...

Access to Hyper-V or Veeam B&R Components Fails After DCOM Hardening is Enabled

Article Applicability The issue discussed in this article is not identified solely based on the Veeam errors but rather by their correlation with Windows Event ID 10036, which states: The server-side authentication level policy does not allow the user from address to activate DCOM server. Please...

Microsoft Patch Tuesday October 2022: Exchange ProxyNotShell RCE, Windows COM+ EoP, AD EoP, Azure Arc Kubernetes EoP

Hello everyone! This episode will be about Microsoft Patch Tuesday for October 2022, including vulnerabilities that were added between September and October Patch Tuesdays. As usual, I use my open source Vulristics project to create the report. Alternative video link for Russia: $ cat...

MS Enterprise app management service RCE. CVE-2022-35841

TL;DR A remote command execution and local privilege escalation vulnerability has been fixed by Microsoft as part of September’s patch Tuesday. The vulnerability, filed under CVE-2022-35841, affects the Enterprise App Management Service which handles the installation of enterprise applications...