/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.0patch.com
0patch Blog: Micropatches Released For Windows Task Scheduler Elevation of Privilege (CVE-2023-21541)
| | foxglovesecurity.com
Hot Potato - Windows Privilege Escalation
3.5 parsecs away

Travel
| | By @breenmachine Privilege Escalation on Windows 7,8,10, Server 2008, Server 2012... and a new network attack How it works Hot Potato (aka: Potato) takes advantage of known issues in Windows to gain local privilege escalation in default configurations, namely NTLM relay (specifically HTTP->SMB relay) and NBNS spoofing. If this sounds vaguely familiar, it's because a...
| | gnn.vircom.in
Writable File in Lenovo's Windows Directory Enables a Stealthy AppLocker Bypass - GNN
3.4 parsecs away

Travel
| | [AI summary] A critical security vulnerability in Lenovo's preloaded Windows systems allows attackers to bypass AppLocker through a writable MFGSTAT.zip file using Alternate Data Streams.
| | parsiya.net
No, You Are Not Getting a CVE for That
2.9 parsecs away

Travel
| | [AI summary] A security engineer explains why 'style points' like unquoted service paths or 404 injection are not real vulnerabilities and clarifies the distinction between code injection at current privilege levels versus actual privilege escalation.
| | www.runzero.com
[No title]
26.8 parsecs away

Travel
| [AI summary] A critical security vulnerability (CVE-2024-3400) in Palo Alto Networks PAN-OS is detailed with specific affected versions, mitigation strategies, and instructions on using runZero to discover and patch potentially vulnerable systems.