SMB_CVE-2025-24071

CVE-2025-24071 PoC Método SMB + Extracción TAR Este es un PoC para explotar CVE-2025-24071 , una vulnerabilidad en Windows que permite la filtración del hash NTLM a través de archivos .library-ms. Esta versión difiere ligeramente de otras al usar un archivo .tar en lugar de un .zip, lo que mejora...

CVE-2024-21413

Exploitation of CVE-2024-21413 Outlook Project status: On hold incomplete practice; failed to capture NTLM hashes Objectives Attempt to exploit vulnerability CVE-2024-21413, which allows leakage of NTLM hashes in Outlook when interacting with malicious links. The goal of the practice was not to...

CVE-2024-43394 Apache HTTP Server: SSRF on Windows due to UNC paths

Server-Side Request Forgery SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via modrewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server...

Dotnetnuke < 10.0.1 NTLM hash leakage via SMB Share Interaction with malicious user input (GHSA-mgfv-2362-jq96)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

Dotnetnuke < 10.0.1 NTLM hash leakage via SMB Share Interaction with malicious user input (CVE-2025-52488)

According to its self-reported version, the instance of Dotnetnuke running on the remote web server is prior to 10.0.1. It is, therefore, affected by a vulnerability. - DNN.PLATFORM leaks NTLM hash via SMB Share Interaction with malicious user input CVE-2025-52488 Note that Nessus has not tested...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071-POC-NTLMHashDisclosure - Triggers automatic SMB...

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 PoC SMB + TAR Extraction Method This is a Po...

CVE-2025-1868 Information display on multiple products from Famatech Corp

Vulnerability of unauthorized exposure of confidential information affecting Advanced IP Scanner and Advanced Port Scanner. It occurs when these applications initiate a network scan, inadvertently sending the NTLM hash of the user performing the scan. This vulnerability can be exploited by...