679 matches found
CVE-2025-48064
GitHub Desktop on Windows prior to 3.4.20-beta3 is vulnerable: when viewing a file diff in the history view, Git calls git log/diff with the commit SHA and file names, and realpath traversal may cause Git to access a UNC network path, potentially leaking environment data via NTLM authentication (...
PT-2025-22411 · Github · Github Desktop
Name of the Vulnerable Software and Affected Versions: GitHub Desktop versions prior to 3.4.20 Description: The issue affects GitHub Desktop users on Windows, where an attacker can cause information disclosure by convincing a user to view a malicious file in the history view. This happens because...
About Spoofing – Windows File Explorer (CVE-2025-24071) vulnerability
About Spoofing - Windows File Explorer CVE-2025-24071 vulnerability. The vulnerability is from the March Microsoft Patch Tuesday. The VM vendors didn't highlight it in their reviews. A week later, on March 18, researcher 0x6rss published a write-up and a PoC exploit. According to him, the...
Linux Distros Unpatched Vulnerability : CVE-2023-25563
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding...
Linux Distros Unpatched Vulnerability : CVE-2018-14618
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - curl before version 7.61.1 is vulnerable to a buffer overrun in the NTLM authentication code. The internal function Curlntlmcoremknthash multiplies the length o...
Linux Distros Unpatched Vulnerability : CVE-2012-3482
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Fetchmail 5.0.8 through 6.3.21, when using NTLM authentication in debug mode, allows remote NTLM servers to 1 cause a denial of service crash and delayed delive...
Debian dla-4070 : freerdp2-dev - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4070 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-4070-1 [email protected]...
PT-2024-40608 · Poco · Poco
Name of the Vulnerable Software and Affected Versions: Poco affected versions not specified Description: The issue is related to a crash caused by the use of an uninitialized value. The crash occurs in the Poco::Net::NTLMCredentials::parseChallengeMessage function, which is called by...
Microsoft Exchange Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Microsoft Exchange Privilege Escalation Exploit', 'Description' = %q This module exploits a privilege escalation vulnerability found in Microsoft...
Wireshark 安全漏洞
Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark has a security vulnerability that stems from a crash in the NTLMSSP parser. No details...
May 14, 2024—KB5037768 (OS Builds 19044.4412 and 19045.4412) - EXPIRED
None None...
May 14, 2024—KB5037781 (OS Build 25398.887)
None None...
May 14, 2024—KB5037765 (OS Build 17763.5820) - EXPIRED
None None...
May 14, 2024—KB5037788 (OS Build 10240.20651) - EXPIRED
None None...
May 14, 2024— Hotpatch KB5037848 (OS Build 20348.2458)
None None...
Citrix Provisioning Server - Console User Domain Authentication Failure
While trying to connect to the server console from outside of the PVS server domain you may see an error: "Unable to connect to the Domain Controller if any or the default rootDSE. Error code: 21071225, message: Access is denied. Exception from HRESULT: 0x80070005 EACCESSDENIED, provider:." The P...
Debian dsa-5647 : ctdb - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5647 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5647-1...
TA577 Targeting Windows NTLM Hashes in Global Campaigns
Summary: TA577, a significant cyber threat group, has shifted tactics to steal NTLM authentication data, utilizing thread hijacking and customized HTML attachments. Organizations should block outbound SMB to thwart exploitation and remain vigilant against evolving attack methods. Threat Level - R...
DEBIAN-CVE-2023-52440
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...
UBUNTU-CVE-2023-52440
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix slub overflow in ksmbddecodentlmsspauthblob If authblob-SessionKey.Length is bigger than session key sizeCIFSKEYSIZE, slub overflow can happen in key exchange codes. cifsarc4crypt copy to session key array from...