cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Уязвимость спуфинга с раскрытием NTLM-хэша Windows Обзор CVE-2024-43451 — это уязвимость спуфинга в Windows, приводящая к раскрытию NTLMv2-хэша. Она позволяет неаутентифицированному удалённому злоумышленнику получить NTLM-хэш жертвы, убедив её взаимодействовать с вредоносным файл...

CVE-2025-24071

CVE-2025-24071 - Утечка NTLM-хэша через Windows File Explorer 📋 Обзор CVE-2025-24071 — это уязвимость в Windows File Explorer , которая позволяет несанкционированно раскрывать NTLM-хэши. Когда пользователь извлекает специально созданный .zip-архив, содержащий вредоносный файл .library-ms, Проводн...

cve-2025-24054

CVE-2025-24071: Утечка NTLM-хэша через файл .library-ms модуль Metasploit Этот репозиторий содержит модуль Metasploit для эксплуатации уязвимости CVE-2025-24071, которая приводит к утечке NTLM-хэша при извлечении вредоносного файла .library-ms из ZIP-архива в Windows Explorer. Разработано:...

Moniker-Link-CVE-2024-21413

🛡️ Moniker Link CVE-2024-21413 Комната: Moniker Link CVE-2024-21413 — TryHackMe Статус: ✅ Завершено Дата: 30 мая 2025 г. 🎯 Цель Понять и реализовать эксплуатацию CVE-2024-21413 — уязвимости в Microsoft Outlook, которая обходит защищённое представление Protected View с помощью Moniker Link для краж...

cve-2025-24071

CVE-2025-24054 и CVE-2025-24071 - Утечка NTLM-хэша через .library-ms эксплойт Этот PoC демонстрирует эксплуатацию утечки NTLM-хэша через файлы .library-ms на незапатченных системах Windows вторник исправлений марта 2025 года. ⚠️ Это только для образовательных и исследовательских целей. Не...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel / etc (crlsa-2022_6775)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226775 advisory. squid: buffer-over-read in SSPI and SMB authentication CVE-2022-41318 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 9 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource (crlsa-2022_6839)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226839 advisory. squid: buffer-over-read in SSPI and SMB authentication CVE-2022-41318 Tenable has extracted the preceding description block directly from the CIQ security advisory...

CVE-2026-91796

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

EUVD-2026-85126

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-91796 Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-91796 Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-91796

Foxit PDF Editor/Reader is susceptible to an NTLM Response Information Disclosure Vulnerability (CVE-2026-91796) because the interface lacks permission verification for secure reading mode . This flaw enables specially crafted PDFs to trigger external SMB authentication without prompting the user...

PT-2026-97215

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The interface lacks permission verification for secure reading mode. This allows a specially crafted PDF to trigger external SMB Server Message Block authentication without...

CVE-2026-91796: Protection Mechanism Failure

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-65641: Authentication Bypass Using an Alternate Path or Channel

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

Veeam ONE < 13.1.0.7233 (kb4905)

The version of Veeam ONE installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4905 advisory. - A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. CVE-2026-6564...

Vulnerability Resolved in Veeam ONE 13.1 Patch 0

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-50374)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50374 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta Orabug: 39680880 CVE-2026-46331 - net: skbuff: fix missing zerocop...

SUSE-SU-2026:2383-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables bsc1261700. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

CVE-2026-39908: Insufficiently Protected Credentials

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...