Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

🗓️ 13 Aug 2025 08:16:29Reported by rubenformationType

githubexploit

githubexploit🔗 github.com👁 252 Views

NTLMv2-SSP hashes exposed via remote SMB icon in LNK despite patch, no user interaction.

Reporter	Title	Published	Views	Family All 178
GithubExploit	Exploit for External Control of File Name or Path in Microsoft	14 Jun 202506:46	–	githubexploit
GithubExploit	Exploit for External Control of File Name or Path in Microsoft	21 Jun 202614:29	–	githubexploit
GithubExploit	Exploit for External Control of File Name or Path in Microsoft	1 Jul 202610:14	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	5 Jul 202509:22	–	githubexploit
GithubExploit	Exploit for External Control of File Name or Path in Microsoft	1 Apr 202621:11	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	13 Aug 202505:40	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	27 Mar 202514:36	–	githubexploit
GithubExploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	21 Apr 202520:05	–	githubexploit
GithubExploit	Exploit for External Control of File Name or Path in Microsoft	23 Nov 202513:30	–	githubexploit
GithubExploit	Exploit for External Control of File Name or Path in Microsoft	9 Nov 202519:48	–	githubexploit

27 Oct 2025 12:53Current

7High risk

Vulners AI Score7

CVSS 3.15.4 - 6.5

EPSS0.58974

SSVC

link file vulnerability hash disclosure vulnerability remote icon extraction