83 matches found
Patch-the-Path-CVE-2025-55234-Detection-Defense
Patch-the-Path-CVE-2025-55234-Detection-Defense 이 플레이북은 CVE-2025-55234치명적인 Windows SMB 권한 상승 취약점에 대한 탐지, 격리 및 대응 전략을 설명합니다. 작성자: Mark Mallia 소개 오늘날 끊임없이 변화하는 사이버 위험 환경에서 내부 네트워크의 낮은 권한을 가진 거점에서 SYSTEM 수준 액세스로 전환하는 능력은 더 이상 이론적 위협이 아니라 성숙한 공격자의 주요 움직임입니다. 새롭게 공개된 Windows NTLM 인증 취약점 CVE‑2025‑54918...
cve-2025-24054-lab
CVE-2025-24054 — 탐지 및 완화 실습실 CVE-2025-24054 에 대한 방어 보안 실습실의 프로젝트 로그입니다. 이는 Windows NT LAN 관리자NTLM 해시 노출 스푸핑 취약점으로, 영향을 받는 시스템을 단기간에 패치할 수 없다 는 가정 하에 작성되었습니다. 블루팀 교육 프로젝트머독 대학교 ICT279. 악용 기술은 공개적으로 문서화되어 있으며Check Point, CISA KEV, 원본 기여는 탐지 및 완화 방법론입니다. 이 저장소에는 실제 자격 증명이나 VM 자격 증명 시트가 저장되어 있지 않습니다...
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps CVE-2025-54918Windows NTLM 취약점의 모의 익스플로잇 및 완화. 탐지 스크립트, Ansible 패치, CI/CD 강화를 포함합니다. 하이브리드 클라우드 환경에서 낮은 수준의 액세스에서 SYSTEM으로 권한 상승을 시연합니다. Mark Mallia 지음 소개: 클릭에서 제어로 - CVE-2025-55226과 CVE-2025-54918 연쇄 공격 오늘날의 하이브리드 클라우드...
CVE-2026-50508: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review
Microsoft's February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for February 2026 This month's release...
CVE-2026-21249: External Control of File Name or Path
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
PT-2026-7353
Name of the Vulnerable Software and Affected Versions Windows NTLM affected versions not specified Description A flaw exists in Windows NTLM that permits external control of file names or paths, potentially enabling a local attacker to perform spoofing. This issue allows attackers to affect the...
CVE-2026-22444 Apache Solr: Insufficient file-access checking in standalone core-creation requests
The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security setting...
CVE-2026-20925
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-20925
CVE-2026-20925 affects Windows NTLM and is described as an external control of the file name or path that enables spoofing (pretend to be another user) over a network. The vulnerability is assigned a CVSS v3.1 base score of 6.5 (Medium) with network attack vector and required user interaction. Co...
PT-2026-2717
CVE-2026-20872 External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. https://t.co/cZpV895UgI...
CVE-2026-20925: External Control of File Name or Path
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-20872: External Control of File Name or Path
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2023-50916
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...
CVE-2025-59284
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
CVE-2025-59284
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
CVE-2025-59284 Windows NTLM Spoofing Vulnerability
...
CVE-2025-59284: Exposure of Sensitive Information to an Unauthorized Actor
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
