CVE-2025-24071

Sicherheitslücken-Bericht: CVE-2025-24071 - Spoofing-Sicherheitslücke in Windows-Datei-Explorer Übersicht NSFOCUS CERT hat festgestellt, dass Microsoft kürzlich ein Sicherheitsupdate veröffentlicht hat, um eine kritische Spoofing-Sicherheitslücke im Windows-Datei-Explorer zu beheben, die als...

CosmicRakp

CosmicRakp Inhaltsverzeichnis Einführung CVE-2013-4786 Installation Verwendung Danksagungen Lizenz Einführung CosmicRakp ist ein leistungsstarkes, in Go geschriebenes Tool, das es Redteamern und Penetrationstestern ermöglicht, IPMI-Hashes auszulesen. Dieses Projekt zielt darauf ab, effizient,...

CVE-2025-50154-Aggressor-Script

LNK Weaponizer - Script Aggressor per Cobalt Strike Uno script Aggressor completo per Cobalt Strike che weaponizza ed esegue file LNK e Library-MS dannosi per la divulgazione di hash NTLMv2-SSP tramite SMB. Include tecniche di bypass per CVE-2025-24054. ⚠️ DISCLAIMER Questo strumento è solo a scop...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Löst automatische SMB-Authentifizierung gegenüber einer vom Angreifer kontrollierten Freigabe aus. Keine Benutzerinteraktion erforderlich — Windows Explorer initiiert diese NTLM-Authentifizierung automatisch. Führt zu NTLMv2-Hash-Leckage...

cve-2025-24071

CVE-2025-24054 e CVE-2025-24071 - Vazamento de Hash NTLM via Exploit .library-ms Este PoC demonstra a exploração do vazamento de hash NTLM via arquivos .library-ms em sistemas Windows sem patch Patch Tuesday de março de 2025. ⚠️ Isto é apenas para fins educacionais e de pesquisa. Não use isto em...

CVE-2024-9796

CVE-2024-9796 WP-Advanced-Search 3.3.9.2 - Unauthenticated SQL Injection Descrizione Il PoC di SQL injection scaricherà gli utenti e gli hash di WordPress. Avvertenza: Questo script è solo per uso educativo. Non usarlo per scopi illegali. Se lo fai, è interamente tua responsabilità; non sono...

cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Windows NTLM हैश प्रकटीकरण स्पूफिंग भेद्यता अवलोकन CVE-2024-43451 Windows में एक NTLMv2 हैश प्रकटीकरण स्पूफिंग भेद्यता है। यह एक अनधिकृत दूरस्थ हमलावर को एक दुर्भावनापूर्ण .url शॉर्टकट फ़ाइल के साथ इंटरैक्ट करने के लिए प्रेरित करके पीड़ित के NTLM हैश को लीक करने की अनुमति देता है...

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 विंडोज़ फ़ाइल एक्सप्लोरर ज़ीरो क्लिक NTLMv2-SSP हैश प्रकटीकरण द्वारा Ruben Enkaoua और Cymulate पहला ब्लॉग: ज़ीरो क्लिक, एक NTLM: माइक्रोसॉफ्ट सुरक्षा पैच बाइपास CVE-2025-50154 दूसरा ब्लॉग: दो बार पैच किया गया, फिर भी बाइपास: नया NTLM लीक CVE-2025-50154 पैच बाइपास...

CVE-2025-52488

DNN Unicode-Pfadnormalisierung NTLM-Hash-Offenlegung Exploit CVE-2025-52488 Überblick Dieser Exploit zielt auf eine Schwachstelle in DNN ehemals DotNetNuke Versionen 6.0.0 bis vor 10.0.1 ab, die es Angreifern ermöglicht, NTLM-Hashes durch Unicode-Pfadnormalisierungsangriffe offenzulegen...

Automad < 2.0.0-beta.28 - Unauthenticated Admin Password Hash Disclosure

Automad 2.0.0-alpha.1 to 2.0.0-beta.27 contains a broken access control vulnerability caused by publicly accessible /api/user-collection/create-first-user endpoint returning full serialized user data, letting unauthenticated attackers retrieve bcrypt password hashes of all administrator accounts,...

cve-2025-24054-lab

CVE-2025-24054 – Erkennungs- und Abwehrlabor Projektprotokoll für ein defensives Sicherheitslabor zu CVE-2025-24054 , der Windows New Technology LAN Manager NTLM Hash Offenlegungs-Spoofing -Sicherheitslücke, unter der Annahme, dass das betroffene System kurzfristig nicht gepatcht werden kann...

CVE-2026-59808 AVideo Authentication Bypass via Unkeyed Video Hash Disclosure

AVideo through commit 9c39d8c8 contains an authentication bypass vulnerability where deduplicateByEncoderQueueId returns videoidhash credentials for any video by encoderqueueid without ownership verification, and useVideoHashOrLogin converts this hash into passwordless login as the video owner...

CVE-2026-59808

AVideo (through commit 9c39d8c8) is affected by an authentication bypass vulnerability. The root cause lies in deduplicateByEncoderQueueId(), which returns video_id_hash credentials for any video by encoder_queue_id without ownership verification , and useVideoHashOrLogin(), which converts this h...

BIT-GHOST-2026-70590 Ghost: Blind Password Hash Disclosure in Ghost Admin API

Ghost is a Node.js content management system. Prior to 6.54.1, any staff-level user was able to leak the hashed passwords of other staff users through the Ghost Admin API. An offline password-guessing attack against the hashes could lead to account takeover if successful, but Device Verification...

CVE-2026-18789

The CVE-2026-18789 entry concerns the Ezoic WordPress plugin prior to version 2.23.1. The vulnerability arises from insufficient access restrictions on content export functionality exposed via REST routes, allowing unauthenticated attackers to trigger a server-side export of the site’s database (...

CVE-2026-46670 YesWiki: Unauthenticated SQL Injection

YesWiki is a wiki system written in PHP. Prior to version 4.6.4, an unauthenticated SQL injection in the Bazar form-import path FormManager::create allows any unauthenticated visitor of a default YesWiki install to inject arbitrary SQL into an INSERT statement and read the full database, includin...

NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API

NPM: Ghost: Blind Password Hash Disclosure in Ghost Admin API vulnerability discovered by ? in WordPress Npm ghost versions 6.54.1...

EUVD-2026-44585

Permissive Cross-domain Security Policy with Untrusted Domains in ASUS GameSDK allows a remote user to obtain a local user’s NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application’s local service endpoint. This can result in...

CVE-2026-8919

CVE-2026-8919 affects ASUS GameSDK. A permissive cross-domain policy with untrusted domains could let a remote user induce a local UNC request to the application’s local service endpoint, exposing a local NTLM hash and enabling information disclosure, data tampering, or service disruption. The is...

CVE-2026-56765

Summary (CVE-2026-56765): Vikunja prior to 2.2.1 contains two related authorization flaws. First, the LinkSharing.ReadAll endpoint exposes share hashes to users with read access, enabling permission escalation to admin-level shares. Second, the GetTaskAttachment endpoint performs permission check...