<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Registry-Symlink — PoC Archive</title><link>https://poc.intelseclab.com/tags/registry-symlink/</link><description>Latest proof-of-concept entries.</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Fri, 15 May 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://poc.intelseclab.com/tags/registry-symlink/index.xml" rel="self" type="application/rss+xml"/><item><title>MiniPlasma - Windows Cloud Files Mini Filter Driver LPE (CVE-2020-17103)</title><link>https://poc.intelseclab.com/pocs/binary/2026-05-15_miniplasma-cve-2020-17103/</link><pubDate>Fri, 15 May 2026 00:00:00 +0000</pubDate><guid>https://poc.intelseclab.com/pocs/binary/2026-05-15_miniplasma-cve-2020-17103/</guid><description>High severity (CVSS 7.8) — binary · CVE-2020-17103. Status: Weaponized. Affects: Windows Cloud Files Mini Filter Driver (cldflt.sys) / cldapi.dll. Tags: LPE, Windows, cldflt.sys, Cloud Files API, registry-symlink, race-condition, WER-hijack, SYSTEM-shell, local-user.</description><category>binary</category><category>High</category><category>LPE</category><category>Windows</category><category>cldflt.sys</category><category>Cloud Files API</category><category>registry-symlink</category><category>race-condition</category><category>WER-hijack</category><category>SYSTEM-shell</category><category>local-user</category></item></channel></rss>