39 matches found
CVE-2026-88098
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...
CVE-2026-88098
A vulnerability exists in the Windows Security Support Provider Interface due to an untrusted pointer dereference . This flaw allows an authorized attacker to perform a local elevation of privilege . The CVSS v3.1 score is 7.0 (High) , indicating high impact on confidentiality, integrity, and ava...
Windows Security Support Provider Interface Elevation of Privilege Vulnerability
Untrusted pointer dereference in Windows Security Support Provider Interface allows an authorized attacker to elevate privileges locally...
ShellExploit
This project is no longer supported PowerSploit is a col...
EUVD-2001-0016
Malware in sbrugna...
The vulnerability of the NTLM Security Support Provider implementation in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NTLM Security Support Provider in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...
CVE-2023-24900 Windows NTLM Security Support Provider Information Disclosure Vulnerability
...
Windows NTLM Security Support Provider Information Disclosure Vulnerability
...
PT-2023-2692 · Microsoft · Windows Ntlm Security Support Provider +1
Name of the Vulnerable Software and Affected Versions: Windows NTLM Security Support Provider affected versions not specified Description: The issue is related to the implementation of the NTLM Security Support Provider protocol in the Windows operating system, which lacks protection for service...
CVE-2023-24900: Out-of-bounds Read
Windows NTLM Security Support Provider Information Disclosure Vulnerability...
DragonCastle - A PoC That Combines AutodialDLL Lateral Movement Technique And SSP To Scrape NTLM Hashes From LSASS Process
A PoC that combines AutodialDLL lateral movement technique and SSP to scrape NTLM hashes from LSASS process. Description Upload a DLL to the target machine. Then it enables remote registry to modify AutodialDLL entry and start/restart BITS service. Svchosts would load our DLL, set again AutodiaDL...
CVE-2022-38043: Undefined Security Weakness
Windows Security Support Provider Interface Information Disclosure Vulnerability...
squid: buffer-over-read in SSPI and SMB authentication
A flaw was found in Squid. An incorrect integer overflow protection in the Squid SSPI and SMB authentication helpers is vulnerable to a buffer overflow attack, resulting in information disclosure...
squid: buffer-over-read in SSPI and SMB authentication
A flaw was found in Squid. An incorrect integer overflow protection in the Squid SSPI and SMB authentication helpers is vulnerable to a buffer overflow attack, resulting in information disclosure...
CVE-2022-24454
Windows Security Support Provider Interface Elevation of Privilege Vulnerability...
CVE-2022-24454
Windows Security Support Provider Interface Elevation of Privilege Vulnerability...
Privilege escalation
Windows Security Support Provider Interface Elevation of Privilege Vulnerability...
CVE-2022-24454: Undefined Security Weakness
Windows Security Support Provider Interface Elevation of Privilege Vulnerability...
CVE-2021-41366: Improper Privilege Management
Credential Security Support Provider Protocol CredSSP Elevation of Privilege Vulnerability...
Microsoft Windows Multiple Vulnerabilities (KB5007206)
This host is missing a critical security update according to Microsoft KB5007206 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...