CVE-2020-1354: Undefined Security Weakness

An elevation of privilege vulnerability exists when the Windows UPnP Device Host improperly handles memory.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows UPnP Device Host Elevation of Privilege Vulnerability'. This CVE ID is unique...

PT-2020-3088

Name of the Vulnerable Software and Affected Versions Windows UPnP Device Host affected versions not specified Description The issue is related to an elevation of privilege vulnerability. It occurs when the Windows UPnP Device Host improperly handles memory, allowing an attacker to potentially ga...

PT-2020-3203

Name of the Vulnerable Software and Affected Versions Windows UPnP Device Host affected versions not specified Description The issue is related to the improper handling of memory objects by the Windows UPnP Device Host, which can be exploited to elevate privileges. An attacker would first need to...

KB4565535: Windows Server 2012 July 2020 Security Update

The remote Windows host is missing security update 4565535 or cumulative update 4565537. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists in the way that DirectWrite handles objects in memory. An attacker who successfully exploited this...

Microsoft UPnP Local Privilege Elevation Exploit

This Metasploit module exploits two vulnerabilities to execute a command as an elevated user. The first CVE-2019-1405 uses the UPnP Device Host Service to elevate to NT AUTHORITY\LOCAL SERVICE. The second CVE-2019-1322 leverages the Update Orchestrator Service to elevate from NT AUTHORITY\LOCAL...

Microsoft Windows 10 Build 1803 1903 - COMahawk Local Privilege Escalation

Microsoft Windows 10 Build 1803 1903 - COMahawk Local Privilege Escalation EDB Note Download: - https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47684-1.exe - https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/47684-2.zip COMahawk...

COMahawk

COMahawk Privilege Escalation: Weaponizing CVE-2019-1405 and...

Microsoft Windows: Service: UPnP Device Host

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winupnpdevicehost.nasl 11344 2018-09-12 06:57:52Z emoss $ Check value for UPnP Device Host upnphost Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.net This program is free...