Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing

Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: https://hyp3rlinx.altervista.org/advisories/MicrosoftWindowsxrm-msFileNTLM-HashDisclosure.txt x.com/hyp3rlinx ISR: ApparitionSec Vendor www.microsoft.com Product .xrm-ms File Type Vulnerability Type NTLM Hash...

Microsoft - NTLM Hash Disclosure Spoofing (library-ms)

Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2025-31200link is external Apple Multiple Products Memory Corruption Vulnerability CVE-2025-31201link is external Apple Multiple Products Arbitrary Read and Write...

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-32789 EspoCRM Allows Potential Disclosure of Sensitive Information in the User Sorting Function

EspoCRM is an Open Source Customer Relationship Management software. Prior to version 9.0.7, users can be sorted by their password hash. This flaw allows an attacker to make assumptions about the hash values of other users stored in the password column of the user table, based on the results of t...

EspoCRM 安全漏洞

EspoCRM is an open source web-based customer relationship management CRM system from EspoCRM Open Source. The system provides features such as sales automation, community and customer support. A security vulnerability exists in EspoCRM versions prior to 9.0.7 that stems from improper password has...

Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure

Exploit Title: Microsoft Office 2019 MSO Build 1808 - NTLMv2 Hash Disclosure Exploit Author: Metin Yunus Kandemir Vendor Homepage: https://www.office.com/ Software Link: https://www.office.com/ Details: https://github.com/passtheticket/CVE-2024-38200 Version: Microsoft Office 2019 MSO Build 1808...

CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability

...

NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

WordPress W3 Total Cache 0.9.2.4 SQL Injection / Hash Disclosure

WordPress W3 Total Cache plugin version 0.9.2.4 remote exploit that leverages SQL injection to extract a user's name and password hash. ============================================================================================================================================= | Title : WordPress...

Famatech Advanced IP Scanner 信息泄露漏洞

Famatech Advanced IP Scanner is a fast, powerful and easy-to-use IP scanner from Famatech. Famatech Advanced IP Scanner suffers from an information disclosure vulnerability that stems from the disclosure of NTLM hashes during network scanning, which could lead to information disclosure...

The vulnerability of the NTLM Hash component in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the NTLM Hash component of the Windows operating system is related to the disclosure of hashes due to improper external manipulation of the name or file. Exploiting this vulnerability allows a malicious actor to perform spoofing attacks and gain unauthorized access to protect...

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability...

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability...

CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability

...

NTLM Hash Disclosure Spoofing Vulnerability

...

PT-2025-6320 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to February 2025 patchday Description: A spoofing issue allows attackers to affect the system. This issue is related to the disclosure of NTLM hash, which can be exploited by attackers. The estimated number of potential...

The vulnerability of the NTLMv2 authentication protocol implemented in Windows operating systems allows a hacker to carry out a Pass-the-hash attack.

The vulnerability of the NTLMv2 authentication protocol for Windows operating systems is related to the disclosure of hashes due to improper external manipulation of the name or file. Exploiting this vulnerability can allow a remote attacker to execute a Pass-the-hash attack...

November Patch Tuesday release contains three critical remote code execution vulnerabilities

The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...

Patch Tuesday - November 2024

Microsoft is addressing 90 vulnerabilities this November 2024 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation and/or public disclosure for four of the vulnerabilities published today, although as with last month’s batch, it does not evaluate any of these zero-day vulnerabilities...