Lucene search
+L

228 matches found

Positive Technologies
Positive Technologies
•added 2025/10/14 12:00 a.m.•8 views

PT-2025-42105

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description A flaw exists in Windows File Explorer that could allow an unauthorized attacker to perform spoofing over a network. This occurs due to the exposure of sensitive information to an unauthorize...

7.8CVSS7.1AI score0.30217EPSS
SaveExploits4References14
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•23 views

EUVD-2024-43945

Malicious code in bioql PyPI...

6.8CVSS6.2AI score0.01536EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/08/15 12:00 a.m.•61 views

Microsoft Windows File Explorer Spoofing Vulnerability

Microsoft Windows File Explorer is a file manager application from Microsoft USA. A spoofing vulnerability exists in Microsoft Windows File Explorer that is caused by the exposure of sensitive information to unauthorized participants in File Explorer. An attacker could exploit the vulnerability t...

6.5CVSS6.3AI score0.30217EPSS
SaveExploits4References1
BDU FSTEC
BDU FSTEC
•added 2025/08/15 12:00 a.m.•23 views

The vulnerability of the Windows File Explorer on Windows operating systems allows attackers to circumvent security restrictions and gain unauthorized access to protected information.

The vulnerability of the Windows File Explorer in Windows operating systems is related to insufficient protection of service data during NTLM hash processing. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected informati...

7.8CVSS6.9AI score0.30217EPSS
SaveExploits4References3
RedhatCVE
RedhatCVE
•added 2025/08/14 6:24 p.m.•11 views

CVE-2025-50154

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS6.7AI score0.30217EPSS
SaveExploits4References1
OSV
OSV
•added 2025/08/12 6:15 p.m.•8 views

CVE-2025-50154

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.30217EPSS
SaveExploits4References5
NVD
NVD
•added 2025/08/12 6:15 p.m.•8 views

CVE-2025-50154

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS0.30217EPSS
SaveExploits4References5
CVE
CVE
•added 2025/08/12 5:09 p.m.•155 views

CVE-2025-50154

CVE-2025-50154 is a Windows File Explorer spoofing vulnerability where Explorer may disclose NTLMv2-SSP hashes by rendering a remote icon for a .LNK or Library-MS that's hosted on SMB, triggering authentication. Multiple connected documents describe attacker-controlled .LNK/.library-ms payloads a...

6.5CVSS6.9AI score0.30217EPSS
SaveExploits4References5Affected Software15
Microsoft CVE
Microsoft CVE
•added 2025/08/12 7:00 a.m.•12 views

Microsoft Windows File Explorer Spoofing Vulnerability

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS6.7AI score0.30217EPSS
SaveExploits4
Positive Technologies
Positive Technologies
•added 2025/08/12 12:00 a.m.•12 views

PT-2025-32777

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions affected versions not specified Description This issue involves a security flaw in Windows File Explorer that allows an attacker to extract NTLM hashes without user interaction, even on systems with the latest securi...

7.8CVSS9.4AI score0.30217EPSS
SaveExploits4References59
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/12 12:00 a.m.•0 views

CVE-2025-50154: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS5.8AI score0.30217EPSS
SaveExploits4References1
CNNVD
CNNVD
•added 2025/08/12 12:00 a.m.•30 views

Microsoft Windows File Explorer 信息泄露漏洞

Microsoft Windows File Explorer is a file manager application from Microsoft USA. A spoofing vulnerability exists in Microsoft Windows File Explorer that is caused by the exposure of sensitive information to unauthorized participants in File Explorer. An attacker could exploit the vulnerability t...

6.5CVSS6.3AI score0.30217EPSS
SaveExploits4References2
Exploit DB
Exploit DB
•added 2025/06/13 12:00 a.m.•264 views

Windows File Explorer Windows 10 Pro x64 - TAR Extraction

import os import tarfile def main: filename = input"Enter your file name: " ipaddress = input"Enter IP EX: 192.168.1.162: " librarycontent = f""" \\ipaddress\IT """ libraryfilename = f"filename.library-ms" with openlibraryfilename, "w", encoding="utf-8" as f: f.writelibrarycontent tarname =...

6.5CVSS7.2AI score0.23331EPSS
SaveExploits23
GithubExploit
GithubExploit
•added 2025/05/27 1:20 p.m.•566 views

Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability...

6.5CVSS7.3AI score0.23331EPSS
SaveExploits23
Positive Technologies
Positive Technologies
•added 2025/04/24 12:00 a.m.•22 views

PT-2025-17846 · Undefined · Undefined

We added the following vulnerabilities to our feed: - UNDISCLOSED: Microsoft Management Console - CVE-2025-24054: Windows File Explorer NTLM Leak - CVE-2025-24985: Windows FAT DoS - CVE-2023-36205: Zemana AntiMalware LPE - CVE-2021-21551: Dell Driver LPE https://t.co/iKW6swSCtZ...

8.8CVSS7.3AI score0.79249EPSS
SaveExploits39References1
VulnCheck KEV
VulnCheck KEV
•added 2025/04/03 12:00 a.m.•8 views

VulnCheck KEV: CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7.2AI score0.23331EPSS
SaveIn wildExploits23References11
Information Security Automation
Information Security Automation
•added 2025/03/19 5:04 p.m.•36 views

About Spoofing – Windows File Explorer (CVE-2025-24071) vulnerability

About Spoofing - Windows File Explorer CVE-2025-24071 vulnerability. The vulnerability is from the March Microsoft Patch Tuesday. The VM vendors didn't highlight it in their reviews. A week later, on March 18, researcher 0x6rss published a write-up and a PoC exploit. According to him, the...

6.5CVSS7.1AI score0.23331EPSS
SaveExploits23
BDU FSTEC
BDU FSTEC
•added 2025/03/17 12:00 a.m.•9 views

The vulnerability of the Windows File Explorer driver on Windows operating systems, allowing attackers to disclose protected information

The vulnerability of the Windows File Explorer in Windows operating systems is related to the disclosure of information. Exploiting this vulnerability can allow a remote attacker to disclose protected information...

7.8CVSS7.4AI score0.23331EPSS
SaveExploits23References4
RedhatCVE
RedhatCVE
•added 2025/03/13 7:19 p.m.•29 views

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7.2AI score0.23331EPSS
SaveExploits23References3
OSV
OSV
•added 2025/03/11 5:16 p.m.•10 views

CVE-2025-24071

Exposure of sensitive information to an unauthorized actor in Windows File Explorer allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7.2AI score0.23331EPSS
SaveExploits23References3
Rows per page
Query Builder