CVE-2025-6603

creationtimestamp| type| source ---|---|--- 2025-06-25 10:49:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19434 2025-06-25 11:37:47+00:00| seen| https://bsky.app/profile/potato.software/post/3lsgjjvqjzz2x 2025-06-25 14:29:31+00:00| seen|...

CVE-2022-50094

creationtimestamp| type| source ---|---|--- 2025-06-18 11:58:43+00:00| seen| https://bsky.app/profile/potato.software/post/3lruxgvtgno2l...

CVE-2022-50168

creationtimestamp| type| source ---|---|--- 2025-06-18 11:41:05+00:00| seen| https://bsky.app/profile/potato.software/post/3lruwhbsn4n23...

CVE-2025-1531

creationtimestamp| type| source ---|---|--- 2025-05-16 06:34:15+00:00| seen| https://bsky.app/profile/potato.software/post/3lpbfwd2nd224 2025-05-16 06:35:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16634 2025-05-16 09:03:09+00:00| seen|...

CVE-2024-13357

creationtimestamp| type| source ---|---|--- 2025-05-15 20:46:07+00:00| seen| https://bsky.app/profile/potato.software/post/3lpaf2lnear2f...

CVE-2025-21576

creationtimestamp| type| source ---|---|--- 2025-04-15 20:56:17+00:00| seen| https://bsky.app/profile/potato.software/post/3lmuxn76eao2n...

CVE-2025-2594

creationtimestamp| type| source ---|---|--- 2025-04-02 17:00:08+00:00| published-proof-of-concept| Telegram/XWNVTNV35dvmt9z1kuRKrDP-n4wp3QUtmRLqVkoNNpbDXx4 2025-04-22 06:58:01+00:00| seen| https://bsky.app/profile/potato.software/post/3lnf42pfg562f 2025-04-22 07:03:22+00:00| seen|...

CVE-2025-31837

creationtimestamp| type| source ---|---|--- 2025-04-01 15:12:45+00:00| seen| https://bsky.app/profile/potato.software/post/3llr5w27dcr2u...

CVE-2025-2328

creationtimestamp| type| source ---|---|--- 2025-03-28 07:27:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9279 2025-03-28 07:48:08+00:00| seen| https://bsky.app/profile/potato.software/post/3llgd7csowp24 2025-03-28 09:00:46+00:00| seen|...

CVE-2025-2804

creationtimestamp| type| source ---|---|--- 2025-03-28 05:32:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9267 2025-03-28 06:29:07+00:00| seen| https://bsky.app/profile/potato.software/post/3llg6rxlq4e2k 2025-03-28 09:23:00+00:00| seen| https://t.me/cvedetector/21379...

CVE-2024-10273

creationtimestamp| type| source ---|---|--- 2025-03-20 12:34:29+00:00| seen| https://bsky.app/profile/potato.software/post/3lksphygiha2u 2025-03-20 19:18:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8274...

CVE-2025-2149

creationtimestamp| type| source ---|---|--- 2025-03-10 13:10:06+00:00| seen| https://bsky.app/profile/potato.software/post/3ljzmsdr43627 2025-03-10 13:39:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6995 2025-03-10 14:45:05+00:00| seen|...

Tater

It is an offensive tool for Windows Privilege Escalation. The primary CVE ID is not explicitly mentioned, but the tool is based on the Hot Potato Windows Privilege Escalation exploit, which is a known vulnerability. The target product/service is Windows, and the vulnerability class/vector is...

Flax Typhoon using legitimate software to quietly access Taiwanese organizations

Summary Microsoft has identified a nation-state activity group tracked as Flax Typhoon, based in China, that is targeting dozens of organizations in Taiwan with the likely intention of performing espionage. Flax Typhoon gains and maintains long-term access to Taiwanese organizations networks with...

DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread Rapidly

The malware known as DirtyMoe has gained new worm-like propagation capabilities that allow it to expand its reach without requiring any user interaction, the latest research has found. "The worming module targets older well-known vulnerabilities, e.g., EternalBlue and Hot Potato Windows privilege...

MultiPotato - Another Potato to get SYSTEM via SeImpersonate privileges

First of all - credit to @splintercode & @decoderit for RoguePotato as this code heavily bases on it. This is just another Potato to get SYSTEM via SeImpersonate privileges. But this one is different in terms of It doesn't contain any SYSTEM auth trigger for weaponization. Instead the code can be...

Remote Potato – From Domain User to Enterprise Admin

NTLM Relaying is an well-known technique that was mainly used in security assessments in order to establish some sort of foothold on a server in… Continue reading - Remote Potato - From Domain User to Enterprise Admin...

Friday Squid Blogging: Squid Potato Masher

A squid potato masher for only $11.50. As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Read my blog posting guidelines here...

Microsoft Windows Net-NTLMv2 Reflection DCOM/RPC Privilege Escalation

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core/post/windows/reflectivedllinjection' class MetasploitModule 'Windows Net-NTLMv2 Reflection DCOM/RPC Juicy', 'Description' = %q This module utilizes the...

CVE-2012-10042

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sfloguploadexec.rb 2025-08-08 20:48:20+00:00| seen| https://bsky.app/profile/potato.software/post/3lvw4sutpyg25 2025-10-23...