CVE-2023-27146-LocalPotato-Priviledge-Escalation

CVE-2023-27146-LocalPotato-权限提升...

LocalPotato_CVE-2023-21746

Windows 中的一个本地权限提升 LPE 漏洞于 2022 年 9 月 9 日由 Andrea Pierini @decoderit 和 Antonio Cocomazzi @splintercode 报告给微软。该漏洞允许主机上拥有低权限账户的攻击者以 SYSTEM 权限读/写任意文件。 虽然该漏洞本身不会直接允许以 SYSTEM 身份执行命令，但我们可以将其与多个攻击向量结合来实现这一目标。恰好在 2 月 13 日，BlackArrowSec 发布了一个利用 StorSvc 服务的权限提升 PoC，只要攻击者能够将 DLL 文件写入 PATH 中的任何目录，即可允许攻击者以...

Exploit for CVE-2023-21746

It is an exploit module/toolkit targeting a vulnerability in a s...

Microsoft Patch Tuesday January 2023: ALPC EoP, Win Backup EoP, LocalPotato, Exchange, Remote RCEs

Hello everyone! This episode will be about Microsoft Patch Tuesday for January 2023, including vulnerabilities that were added between December and January Patch Tuesdays. Alternative video link for Russia: As usual, I use my open source Vulristics project to analyse and prioritize vulnerabilitie...