Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft

CVE-2025-24071-POC-NTLMHashDisclosure - Triggers automatic SMB...

CVE-2025-24346

A vulnerability in the “Proxy” functionality of the web application of ctrlX OS allows a remote authenticated lowprivileged attacker to manipulate the “/etc/environment” file via a crafted HTTP request...