145 matches found
BackupCreds
BackupCreds | | | | | | | Dump all the Creds! | | | | | | | | | | | | Lefteris lefty Panos | || Abusing SeTrustedCredmanAccessPrivilege to dump user creds The program provides the ability to dump the stored credentials a user might have in the Windows Credential Manager. It is a useful technique ...
CVE-2024-43583-PoC
CVE-2024-43583 - Windows Privilege Escalation Exploit Author: No0B@ckSappi3 Instagram: No0BackSappi3 Overview CVE-2024-43583 is an elevation of privilege vulnerability affecting Microsoft's Winlogon component. Exploiting this flaw allows a low-privileged user to escalate their privileges to SYSTE...
CVE-2026-87699
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-87699
A heap-based buffer overflow exists in Winlogon , which allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-122 . Official remediation is available via Microsoft updates.
Winlogon Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-87699: Heap-based Buffer Overflow
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
Microsoft Windows: CVE-2026-87699: Winlogon Elevation of Privilege Vulnerability
Heap-based buffer overflow in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-61939
Use after free in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability
...
CVE-2026-61939
CVE-2026-61939 is a Winlogon-use-after-free vulnerability that allows an authorized, low-privilege attacker to elevate privileges locally. Public description confirms local access as attack vector (LOCAL) with high impact on confidentiality, integrity, and availability. The CVSS 3.1 vector is AV:...
EUVD-2026-56341
Use after free in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-61939 Winlogon Elevation of Privilege Vulnerability
...
Winlogon Elevation of Privilege Vulnerability
Use after free in Winlogon allows an authorized attacker to elevate privileges locally...
CVE-2026-61939: Use After Free
Use after free in Winlogon allows an authorized attacker to elevate privileges locally...
PT-2026-70456
Name of the Vulnerable Software and Affected Versions Winlogon affected versions not specified Description A use-after-free condition in Winlogon allows an authorized attacker to elevate privileges locally. Use-after-free is a memory corruption issue that occurs when an application continues to u...
Windows Winlogon registry symlink deletion (CVE-2026-42989)
Plants a volatile registry symlink under the interactive session SAT key. On logout and reboot, Winlogon SYSTEM deletes the SAT subtree and follows the link into an arbitrary HKLM target path. Requires an interactive logon session. !/usr/bin/env python3 -- coding: utf-8 -- from future import...
Windows Gather Autologon and Unattend Secrets
Read Winlogon autologon values from the registry and scan Panther/Sysprep unattend XML files for cleartext passwords on a Windows session. !/usr/bin/env python3 -- coding: utf-8 -- """ Search Winlogon autologon registry values and unattend/sysprep XML files for embedded credentials on a Windows...
Winlogon Privilege Escalation
The vulnerability of the Winlogon entry program in Windows operating systems is related to incorrect definition of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to increase their privileges...
