70 matches found
Patch-the-Path-CVE-2025-55234-Detection-Defense
Patch-the-Path-CVE-2025-55234-Detection-Defense Dieses Playbook beschreibt Erkennungs-, Eindämmungs- und Behebungsstrategien für CVE-2025-55234, einen kritischen Windows-SMB-Privilegieneskalationsfehler. Von Mark Mallia Einleitung In der heutigen, sich ständig verändernden Cyber-Risikolandschaft...
From-Foothold-to-Domain-Admin-Weaponizing-CVE-2025-54918-in-Real-World-DevOps
Dal-Foothold-al-Domain-Admin-Sfruttare-CVE-2025-54918-nel-DevOps-del-Mondo-Reale Sfruttamento e mitigazione simulati di CVE-2025-54918 vulnerabilità NTLM di Windows. Include script di rilevamento, applicazione di patch con Ansible e hardening CI/CD. Dimostra l'escalation dei privilegi da accesso ...
cve-2025-24054-lab
CVE-2025-24054 — Laboratorio di Rilevamento e Mitigazione Registro di progetto per un laboratorio di sicurezza difensiva su CVE-2025-24054 , la vulnerabilità New Technology LAN Manager NTLM Hash Disclosure Spoofing di Windows, partendo dal presupposto che il sistema interessato non possa essere...
Microsoft and Adobe Patch Tuesday, February 2026 Security Update Review
Microsoft's February 2026 Patch Tuesday focuses on closing security gaps that attackers could exploit, reinforcing the importance of timely patching in enterprise environments. Here's a quick breakdown of what you need to know. Microsoft Patch Tuesday for February 2026 This month's release...
PT-2026-7353
Name of the Vulnerable Software and Affected Versions Windows NTLM affected versions not specified Description A flaw exists in Windows NTLM that permits external control of file names or paths, potentially enabling a local attacker to perform spoofing. This issue allows attackers to affect the...
CVE-2026-22444 Apache Solr: Insufficient file-access checking in standalone core-creation requests
The "create core" API of Apache Solr 8.6 through 9.10.0 lacks sufficient input validation on some API parameters, which can cause Solr to check the existence of and attempt to read file-system paths that should be disallowed by Solr's "allowPaths" security setting...
CVE-2026-20925
External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-20925
CVE-2026-20925 affects Windows NTLM and is described as an external control of the file name or path that enables spoofing (pretend to be another user) over a network. The vulnerability is assigned a CVSS v3.1 base score of 6.5 (Medium) with network attack vector and required user interaction. Co...
PT-2026-2717
CVE-2026-20872 External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network. https://t.co/cZpV895UgI...
CVE-2023-50916
Kyocera Device Manager before 3.1.1213.0 allows NTLM credential exposure during UNC path authentication via a crafted change from a local path to a UNC path. It allows administrators to configure the backup location of the database used by the application. Attempting to change this location to a...
CVE-2025-59284
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
CVE-2025-59284
Exposure of sensitive information to an unauthorized actor in Windows NTLM allows an unauthorized attacker to perform spoofing locally...
CVE-2025-59284 Windows NTLM Spoofing Vulnerability
...
EUVD-2020-7768
Malware in sbrugna...
EUVD-2021-18830
Malware in sbrugna...
EUVD-2025-2286
Malicious code in bioql PyPI...
EUVD-2025-2376
Malicious code in bioql PyPI...
EUVD-2022-38643
Malicious code in bioql PyPI...