Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch Tuesday

Security researcher Chaotic Eclipse (aka Nightmare-Eclipse) has released a new proof-of-concept (PoC) exploit called LegacyHive.

It has been described as a Windows User Profile Service arbitrary hive load elevation of privileges vulnerability. The Windows User Profile Service, also referred to as ProfSvc, is a core system component that manages user accounts and environments.

“The PoC requires

Source: The Hacker News

Tags:

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

The Watchtower Stands: Self-Hosted Attacks Radar on doode.info

The perimeter is talking back. For too long the logs were just noise. Scripted knocks, dictionary sprays, the endless background radiation of the internet trying doors. I got tired of

Read More

MSI Center – How to gain SYSTEM privileges in seconds

MSI Center – How to gain SYSTEM privileges in seconds Source: Hacker News

Read More

Guardian Angels: LLM Personalization for Productivity and Security

Guardian Angels: LLM Personalization for Productivity and Security Source: Hacker News

Read More