Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing

Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: https://hyp3rlinx.altervista.org/advisories/MicrosoftWindowsxrm-msFileNTLM-HashDisclosure.txt x.com/hyp3rlinx ISR: ApparitionSec Vendor www.microsoft.com Product .xrm-ms File Type Vulnerability Type NTLM Hash...

April “In the Trend of VM” (#14): vulnerabilities in Microsoft Windows, VMware products, Kubernetes, and Apache Tomcat

April "In the Trend of VM" 14: vulnerabilities in Microsoft Windows, VMware products, Kubernetes, and Apache Tomcat. We decided to pause recording new videos, so for now only text. Post on Habr rus Digest on the PT website rus A total of 11 trending vulnerabilities: Elevation of Privilege - Windo...

Microsoft Windows 11 - Kernel Privilege Escalation

Exploit Title: Microsoft Windows 11 - Kernel Privilege Escalation Date: 2025-04-16 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL Tested on: Win, Ubuntu CVE : CVE-2024-21338 include "pch.hpp" include "poc.hpp" // This...

Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

Microsoft Windows NTLM contains an external control of file name or path vulnerability that allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-0539

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself...

Microsoft Windows Admin Center Information Disclosure (April 2025)

The remote Windows host is running a version of Microsoft Windows Admin Center that is missing a security update. It is, therefore, affected by an information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2025-29819 Note that Nessus has...

CVE-2025-0539

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself...

CVE-2025-0539

CVE-2025-0539 affects Octopus Deploy on Windows where the server can be coerced into issuing server-side requests that include authentication material. The underlying impact is that a suitably positioned attacker could compromise the account running the Octopus Server and potentially affect the h...

CVE-2025-0539

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself...

CVE-2025-0539

In affected Microsoft Windows versions of Octopus Deploy, the server can be coerced into sending server-side requests that contain authentication material allowing a suitably positioned attacker to compromise the account running Octopus Server and potentially the host infrastructure itself...

Windows App Client < 2.0.379.0 RCE Vulnerability (Apr 2025) - Windows

Windows App Client is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Windows Hello Security Feature Bypass Vulnerability (CNVD-2025-07780)

Microsoft Windows Hello is a more personalized and secure way to sign in to your Windows device. A security feature bypass vulnerability exists in Microsoft Windows Hello, which can be exploited by an attacker to bypass certain features...

Microsoft Windows Telephony Service Remote Code Execution Vulnerability (CNVD-2025-07784)

Microsoft Windows Telephony Service is based on IBinder to provide phone status and telephony services. A remote code execution vulnerability exists in Microsoft Windows Telephony Service, which can be exploited by an attacker to execute code on the target host...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CNVD-2025-07782)

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CNVD-2025-07781)

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

Microsoft Windows Multiple Vulnerabilities (KB5055521)

This host is missing an important security update according to Microsoft KB5055521 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5055519)

This host is missing an important security update according to Microsoft KB5055519 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Multiple Vulnerabilities (KB5055518)

This host is missing an important security update according to Microsoft KB5055518 SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows dxkrnl Untrusted Pointer Dereference Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the dxkrnl.sys...

Microsoft Windows DWM Core Library Elevation of Privilege Vulnerability (CNVD-2025-07779)

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...