Tater

Tater Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit. Credit All credit goes to @breenmachine, @foxglovesec, Google Project Zero, and anyone else that helped work out the details for this exploit. Potato - https://github.com/foxglovesec/Potato Included...

juicy-potato

Juicy Potato（滥用黄金权限） RottenPotatoNG的加糖版本，带点汁水，即另一个本地权限提升工具，从Windows服务账户到NT AUTHORITY\SYSTEM 概述 RottenPotatoNG及其变种利用基于BITS 服务的权限提升链，该服务在127.0.0.1:6666上具有MiTM监听器，并且当你拥有SeImpersonate或SeAssignPrimaryToken权限时。在一次Windows构建审查中，我们发现一个设置，其中BITS被故意禁用，端口6666被占用。 我们决定将RottenPotatoNG武器化：向Juicy Potato打个招呼 。...

Potato

Potato Escalada de privilegios en Windows 7, 8, 10, Server 2008, Server 2012 Cómo funciona Potato aprovecha problemas conocidos en Windows para obtener escalada de privilegios local, concretamente el relay NTLM específicamente el relay HTTP-SMB y la suplantación NBNS. Usando las técnicas descrita...

Juicy-Potato-x86

Juicy-Potato-x86 Juicy Potato para Windows x86 Esta es una versión del Juicy Potato de ohpe, exploit de escalada de privilegios, modificada para Windows x86. Conservé la mayor parte del código posible, haciendo los pequeños cambios necesarios para compilar para Windows x86. Probado con éxito en...

CVE-2020-10209

creationtimestamp| type| source ---|---|--- 2026-07-25 00:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrgl4jvkcl26 2026-07-25 00:07:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mrgl4l64df2c...

CVE-2026-54267

creationtimestamp| type| source ---|---|--- 2026-07-13 08:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqjbzg7ebe2o 2026-07-13 08:40:48+00:00| seen| https://bsky.app/profile/potato.software/post/3mqjca2mrax2z...

CVE-2026-58252

creationtimestamp| type| source ---|---|--- 2026-07-11 10:25:12+00:00| seen| https://bsky.app/profile/potato.software/post/3mqeh4vd2652t 2026-07-11 10:25:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mqeh4uf44y27 2026-07-11 10:25:13+00:00| seen|...

CVE-2026-56044

creationtimestamp| type| source ---|---|--- 2026-07-07 07:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq22p3vtqu2n 2026-07-07 07:25:29+00:00| seen| https://bsky.app/profile/potato.software/post/3mq237t753r2y...

CVE-2026-11405

creationtimestamp| type| source ---|---|--- 2026-07-07 04:31:58+00:00| seen| https://bsky.app/profile/securityonline.bsky.social/post/3mpzrjkh5ga2f 2026-07-07 04:31:59+00:00| seen| https://bsky.app/profile/potato.software/post/3mpzrjlnff724 2026-07-07 08:15:44+00:00| seen|...

CVE-2026-13015

creationtimestamp| type| source ---|---|--- 2026-07-04 09:15:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mpspx567d22e 2026-07-04 09:15:08+00:00| seen| https://bsky.app/profile/potato.software/post/3mpspx5mi4n2r...

CVE-2026-58523

creationtimestamp| type| source ---|---|--- 2026-07-03 21:49:12+00:00| seen| https://bsky.app/profile/cybernewsroom.bsky.social/post/3mprjmlunko2x 2026-07-03 21:49:13+00:00| seen| https://bsky.app/profile/potato.software/post/3mprjmmwam72h 2026-07-03 21:49:17+00:00| seen|...

CVE-2011-3417

creationtimestamp| type| source ---|---|--- 2026-06-28 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpe24giui52l 2026-06-28 13:07:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mpe24hdv4e2t...

CVE-2024-48509

creationtimestamp| type| source ---|---|--- 2026-06-22 09:07:07+00:00| seen| https://bsky.app/profile/potato.software/post/3moujvrjoc22f 2026-06-22 09:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moujvqbawm2i...

CVE-2026-24187

creationtimestamp| type| source ---|---|--- 2026-06-11 04:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mnydz7e3co2o 2026-06-11 04:07:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mnydzaulpn2f...

CVE-2026-11306

creationtimestamp| type| source ---|---|--- 2026-06-05 03:01:08+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mnj5jnm4ks2s 2026-06-05 03:01:09+00:00| seen| https://bsky.app/profile/potato.software/post/3mnj5jpel2f2s 2026-06-05 13:24:44+00:00| seen|...

CVE-2026-40290

creationtimestamp| type| source ---|---|--- 2026-06-03 19:25:43+00:00| seen| https://bsky.app/profile/potato.software/post/3mnftjm7jzc2i 2026-06-04 02:00:35+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mngjoiq3fh25...

CVE-2026-4081

creationtimestamp| type| source ---|---|--- 2026-06-03 10:18:04+00:00| seen| https://bsky.app/profile/potato.software/post/3mneuvbjsee2f...

CVE-2026-9642

creationtimestamp| type| source ---|---|--- 2026-05-26 22:00:38+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mmryk2eogi2k 2026-05-26 22:15:19+00:00| seen| https://bsky.app/profile/potato.software/post/3mmrzeclokg26 2026-05-29 22:07:08+00:00| seen|...

CVE-2026-6690

creationtimestamp| type| source ---|---|--- 2026-05-16 06:32:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mlx7yjc64q2l 2026-05-16 06:32:07+00:00| seen| https://bsky.app/profile/potato.software/post/3mlx7yjq5xq27...

Directory Traversal

Overview potato-annotation is an A flexible, stand-alone, web-based platform for text annotation tasks Affected versions of this package are vulnerable to Directory Traversal via the validatepathsecurity function. An attacker can gain unauthorized access to files outside the intended project...