71 matches found
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps 模拟利用和缓解 CVE-2025-54918（Windows NTLM 漏洞）。包含检测脚本、Ansible 修补和 CI/CD 加固。演示从低权限访问到混合云环境中 SYSTEM 权限的提权过程。 作者：Mark Mallia 引言：从点击到控制——串联 CVE-2025-55226 和 CVE-2025-54918...
Patch-the-Path-CVE-2025-55234-Detection-Defense
Patch-the-Path-CVE-2025-55234-Detection-Defense このプレイブックは、重大なWindows SMB権限昇格の脆弱性であるCVE-2025-55234に対する検出、封じ込め、および修復の戦略を概説します。 著者: Mark Mallia はじめに 絶えず変化するサイバーリスク環境において、内部ネットワーク上の低権限の足掛かりからSYSTEMレベルのアクセスへと権限を昇格させる能力は、もはや理論上の脅威ではありません。それは、成熟した攻撃者の特徴的な手口です。Windows...
cve-2025-24054-lab
CVE-2025-24054 — 検出・緩和ラボ CVE-2025-24054 に関する防御セキュリティラボのプロジェクトログ。この脆弱性はWindows New Technology LAN Manager NTLM Hash Disclosure Spoofing であり、影響を受けるシステムが短期的に パッチ適用できない という前提に基づいています。 ブルーチーム教育プロジェクト（マードック大学 ICT279）。悪用手法は公開文書化されています（Check Point, CISA...
Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review
Microsoft's February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for February 2026 This month's release...
PT-2026-7353
Name of the Vulnerable Software and Affected Versions Windows NTLM affected versions not specified Description A flaw exists in Windows NTLM that permits external control of file names or paths, potentially enabling a local attacker to perform spoofing. This issue allows attackers to affect the...
CVE-2026-22444 Apache Solr: Insufficient file-access checking in standalone core-creation requests
The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security setting...
CVE-2026-20925
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-20925
CVE-2026-20925 affects Windows NTLM and is described as an external control of the file name or path that enables spoofing (pretend to be another user) over a network. The vulnerability is assigned a CVSS v3.1 base score of 6.5 (Medium) with network attack vector and required user interaction. Co...
PT-2026-2717
CVE-2026-20872 External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. https://t.co/cZpV895UgI...
CVE-2023-50916
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...
CVE-2025-59284
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
CVE-2025-59284
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
CVE-2025-59284 Windows NTLM Spoofing Vulnerability
...
EUVD-2020-7768
Malware in sbrugna...
EUVD-2021-18830
Malware in sbrugna...
EUVD-2025-2286
Malicious code in bioql PyPI...
EUVD-2025-2376
Malicious code in bioql PyPI...
EUVD-2022-38643
Malicious code in bioql PyPI...