cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Windows NTLM हैश प्रकटीकरण स्पूफिंग भेद्यता अवलोकन CVE-2024-43451 Windows में एक NTLMv2 हैश प्रकटीकरण स्पूफिंग भेद्यता है। यह एक अनधिकृत दूरस्थ हमलावर को एक दुर्भावनापूर्ण .url शॉर्टकट फ़ाइल के साथ इंटरैक्ट करने के लिए प्रेरित करके पीड़ित के NTLM हैश को लीक करने की अनुमति देता है...

CVE-2025-24071

CVE-2025-24071 - विंडोज फ़ाइल एक्सप्लोरर NTLM हैश लीक 📋 अवलोकन CVE-2025-24071 विंडोज फ़ाइल एक्सप्लोरर में एक कमजोरी है जो NTLM हैश के अनधिकृत प्रकटीकरण की अनुमति देती है। जब कोई उपयोगकर्ता एक विशेष रूप से तैयार .zip संग्रह निकालता है जिसमें एक दुर्भावनापूर्ण .library-ms फ़ाइल होती है, तो विंडोज...

cve-2025-24054

CVE-2025-24071: .library-ms फ़ाइल के माध्यम से NTLM हैश लीक Metasploit मॉड्यूल इस रिपॉजिटरी में एक Metasploit मॉड्यूल है जो CVE-2025-24071 का शोषण करने के लिए है, जो Windows Explorer में एक भेद्यता है जो एक दुर्भावनापूर्ण .library-ms फ़ाइल को ZIP आर्काइव से निकालने पर NTLM हैश को लीक करती है।...

Moniker-Link-CVE-2024-21413

🛡️ मोनिकर लिंक CVE-2024-21413 कक्ष: मोनिकर लिंक CVE-2024-21413 — TryHackMe स्थिति: ✅ पूर्ण दिनांक: 30 मई 2025 🎯 उद्देश्य CVE-2024-21413 को समझें और इसका शोषण करें, यह Microsoft Outlook में एक कमजोरी है जो Moniker Links का उपयोग करके Protected View को बायपास करती है और NTLM क्रेडेंशियल्स लीक करती...

cve-2025-24071

CVE-2025-24054 و CVE-2025-24071 - تسريب هاش NTLM عبر استغلال .library-ms يُظهر هذا الإثبات المفاهيمي PoC استغلال تسريب هاش NTLM عبر ملفات .library-ms على أنظمة ويندوز غير مصححة تحديثات مارس 2025 الثلاثاء التصحيحي. ⚠️ هذا للأغراض التعليمية والبحثية فقط. لا تستخدمه على أنظمة إنتاج أو أنظمة غير مصرح...

Rocky Linux 9 [CIQ] Security Update: squid / squid-debuginfo / squid-debugsource (crlsa-2022_6839)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226839 advisory. squid: buffer-over-read in SSPI and SMB authentication CVE-2022-41318 Tenable has extracted the preceding description block directly from the CIQ security advisory...

Rocky Linux 8 [CIQ] Security Update: libecap / libecap-debuginfo / libecap-debugsource / libecap-devel / etc (crlsa-2022_6775)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20226775 advisory. squid: buffer-over-read in SSPI and SMB authentication CVE-2022-41318 Tenable has extracted the preceding description block directly from the CIQ security advisory...

CVE-2026-91796

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

EUVD-2026-85126

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-91796 Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-91796 Foxit PDF Editor/Reader importIcon NTLM Response Information Disclosure Vulnerability

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-91796

Foxit PDF Editor/Reader is susceptible to an NTLM Response Information Disclosure Vulnerability (CVE-2026-91796) because the interface lacks permission verification for secure reading mode . This flaw enables specially crafted PDFs to trigger external SMB authentication without prompting the user...

PT-2026-97215

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description The interface lacks permission verification for secure reading mode. This allows a specially crafted PDF to trigger external SMB Server Message Block authentication without...

CVE-2026-91796: Protection Mechanism Failure

The interface of Foxit PDF Editor/Reader lacks the permission verification for secure reading mode, which allows specially crafted PDFs to trigger external SMB authentication without any security prompts and thereby leak the hash of the user's credentials...

CVE-2026-65641: Authentication Bypass Using an Alternate Path or Channel

A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account...

Veeam ONE < 13.1.0.7233 (kb4905)

The version of Veeam ONE installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the kb4905 advisory. - A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account. CVE-2026-6564...

Vulnerability Resolved in Veeam ONE 13.1 Patch 0

Veeam Software Security Commitment Veeam® is committed to ensuring its products protect customers from potential risks. As part of that commitment, we operate a Vulnerability Disclosure Program VDP for all Veeam products and perform extensive internal code audits. When a vulnerability is...

Oracle Linux 7 / 8 : Unbreakable Enterprise kernel (ELSA-2026-50374)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50374 advisory. - net/sched: fix pedit partial COW leading to page cache corruption Rajat Gupta Orabug: 39680880 CVE-2026-46331 - net: skbuff: fix missing zerocop...

SUSE-SU-2026:2383-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP4 kernel was updated to fix various security issues The following security issues were fixed: - CVE-2026-31405: media: dvb-net: fix OOB access in ULE extension header tables bsc1261700. - CVE-2026-31629: nfc: llcp: add missing return after LLCPCLOSED checks...

CVE-2026-39908: Insufficiently Protected Credentials

OpenBullet2 through version 0.3.2 on Windows contains a credential disclosure vulnerability that allows remote attackers to capture the NTLMv2 hash of the process user by configuring a job proxy source with a UNC path pointing to an attacker-controlled server. When the job starts, the application...