46 matches found
CVE-2023-21036
Acropalypse detection and sanitization tools You can use the python script acropalypsedetection.py or the yara rule acropalypsedetection.yar to detect cropped images affected by acropalypse: root@kitploit: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done...
SnipRecover-CLI
SnipRecover CLI Detección y restauración de capturas PNG de la Herramienta Recortes de Windows vulnerables a CVE-2023-28303 SnipRecover CLI es una utilidad de línea de comandos mínima y sin dependencias, diseñada para: Detectar archivos PNG modificados por la vulnerabilidad de la Herramienta...
CVE-2026-33829-Writeup
CVE-2026-33829 分析报告 漏洞案例研究：CVE-2026-33829（Windows 截图工具 NTLM 强制认证） 执行摘要 本文详细记录了CVE-2026-33829 的技术复现过程，这是现代 Windows 截图工具应用程序框架中的一个信息泄露漏洞。通过滥用自定义 URI 协议处理器中一个未经验证的输入参数，远程主机可以强制未打补丁的 Windows 机器发起出站 SMB 连接，从而导致 Net-NTLMv2 身份验证哈希值通过网络泄露。 URI 方案 —— （Windows 使用自定义协议（如 ms-screensketch:、ms-settings:、file:）...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2026-33829 - Security Vulnerability Quick Usage ba...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
Security Vulnerability CVE-2026-33829 Overview A MEDIUM...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2026-33829 - Security Vulnerability Quick Usage ba...
Windows Snipping Tool - NTLMv2 Hash Hijack
Exploit Title: Windows Snipping Tool - NTLMv2 Hash Hijack Date: 2026-04-22 Exploit Author: nu11secur1ty Video Demo: https://www.patreon.com/posts/cve-2026-33829-156243398 Vendor Homepage: https://www.microsoft.com Software Link: Built-in Windows Snipping Tool Version: Windows 10, Windows 11,...
CVE-2026-33829
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32183
Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...
Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Snipping Too...
EUVD-2026-22649
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-22564
Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...
CVE-2026-33829
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32183
Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...
CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability
...
CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability
...
CVE-2026-33829
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-33829
CVE-2026-33829 concerns the Windows Snipping Tool and is assigned a CVSSv3.1 base score of 4.3 (Medium). The vulnerability is described with a network attack vector but requires user interaction and does not affect integrity or availability, with confidentiality impact listed as Low. The metric i...