246 matches found
CVE-2026-20872 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2026-20872 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2026-20925 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2026-20925 NTLM Hash Disclosure Spoofing Vulnerability
...
NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
NTLM Hash Disclosure Spoofing Vulnerability
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
The vulnerability of the Apache HTTP Server’s web server lies in the insufficient validation of requests at the server-side. This allows attackers to gain access to NTLM hashes.
The vulnerability of the Apache HTTP Server is related to insufficient validation of requests at the server side. Exploiting this vulnerability allows a malicious actor to gain access to NTLM hashes by sending specially crafted requests...
📄 Microsoft Windows File Explorer NTLM Hash Disclosure
Microsoft Windows File Explorer in Windows 10 and 11 contains a critical NTLM hash disclosure vulnerability that allows attackers to capture user authentication credentials by exploiting the automatic parsing of .library-ms files from ZIP archives, leading to potential domain compromise through...
Grav Elevation of Privilege Vulnerability
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. Grav suffers from an elevation of privilege vulnerability, which stems from a password hash disclosure, and can be exploited by an attacker to cause...
CVE-2025-54338
An Incorrect Access Control vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to disclose user hashes...
Exploit for External Control of File Name or Path in Microsoft
CVE-2025-2405...
LogStare Collector 安全漏洞
LogStare Collector is a data collector from LogStare Japan. A security vulnerability exists in LogStare Collector that stems from improper handling of password hash data, which could lead to password hash disclosure...
mintty 输入验证错误漏洞
mintty is the Cygwin terminal emulator for the mintty open source application, also available for MSYS and Msys2. An input validation error vulnerability exists in mintty versions 2.3.6 through 3.7.4, which stems from mishandling of escape sequences and can lead to NTLM hash disclosure...
CVE-2025-59244 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2025-59244 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2025-59244
CVE-2025-59244 affects Windows Core Shell and enables spoofing via external control of a file name or path over a network. It has a CVSS v3.1 base score of 6.5 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). The vulnerability is listed under Windows Core Shell in the connected KB documents, and Microsoft ...
CVE-2025-59185
CVE-2025-59185 affects Windows Core Shell, enabling spoofing via external control of a file name or path over a network. The connected documents provide general Windows security updates but do not specify a patch or remediation tied to this CVE; no explicit exploitation details are given in the s...
CVE-2025-59185 NTLM Hash Disclosure Spoofing Vulnerability
...