13643 matches found
CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability...
CVE-2024-43451 NTLM Hash Disclosure Spoofing Vulnerability
...
CVE-2024-43451
CVE-2024-43451 is a Windows NTLMv2 hash disclosure spoofing vulnerability. Affected: Windows; root cause: NTLM hash leakage occurs when the shell processes .URL shortcuts, triggering NTLM authentication over SMB to an attacker-controlled server. Impact: attackers can obtain NTLMv2 hashes and perf...
CVE-2024-43451 NTLM Hash Disclosure Spoofing Vulnerability
...
Description of the security update for Office 2016: November 12, 2024 (KB5002642)
None None...
Description of the security update for Office Online Server: November 12, 2024 (KB5002648)
None None...
net/xen-netback: prevent UAF in xenvif_flush_hash()
...
Description of the security update for SharePoint Server Subscription Edition: November 12, 2024 (KB5002651)
None None...
Description of the security update for SharePoint Server 2019: November 12, 2024 (KB5002650)
None None...
Description of the security update for Word 2016: November 12, 2024 (KB5002619)
None None...
NTLM Hash Disclosure Spoofing Vulnerability
...
KLA77106 Multiple vulnerabilities in Microsoft Products (ESU)
Multiple vulnerabilities were found in Microsoft Products Extended Security Update. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code...
PT-2024-16561 · WordPress · Hash Elements
Name of the Vulnerable Software and Affected Versions: Hash Elements plugin for WordPress versions up to, and including, 1.4.7 Description: The issue is related to unauthorized access of data due to a missing capability check on the hash elements get posts title by id function. This allows...
Fortinet FortiWeb Exposure of password hashes to read-only admin (FG-IR-24-180)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-24-180 advisory. - An exposure of sensitive system information to an unauthorized control sphere vulnerability CWE-497 in FortiWeb version 7.6....
Description of the security update for Microsoft Exchange Server 2019 and 2016: November 12, 2024 (KB5044062)
None None...
CVE-2024-43451
NTLM Hash Disclosure Spoofing Vulnerability Recent assessments: cbeek-r7 at March 10, 2025 6:13pm UTC reported: CVE-2024-43451 is a Windows NTLM hash disclosure vulnerability categorized as a “spoofing” flaw that affects all supported Microsoft Windows versions, including Windows 10, Windows 11,...
Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability
Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user...
VulnCheck KEV: CVE-2024-43451
Microsoft Windows contains an NTLMv2 hash spoofing vulnerability that could result in disclosing a user's NTLMv2 hash to an attacker via a file open operation. The attacker could then leverage this hash to impersonate that user...
CVE-2024-51747
creationtimestamp| type| source ---|---|--- 2024-11-11 21:57:37+00:00| seen| https://t.me/cvedetector/10525 2026-06-29 13:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpgmay3nzd24...
Job Recruitment 安全漏洞
Job Recruitment by code-projects is a job portal project developed using PHP, CSS, JavaScript, and MySQL technologies. A security vulnerability exists in Job Recruitment version 1.0, which originates from an SQL injection vulnerability in the ehash parameter of the /activation.php page...