techspence/PyPATHPwner

PoC

POC Exploit for CVE-2022-26488 - Python for Windows (CPython) escalation of privilege vulnerability, discovered by the Lockheed Martin Red Team.

view exploit source poc_in_githubauthor techspencepublished 2023-04-27catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-26488US	high7.0	1.49% (74th)	Exploit	2022-03-10
In Python before 3.10.3 on Windows, local users can gain privileges because the search path is inadequately secured. The installer may allow a local attacker to add user-writable d…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.