Lucene search
+L

40 matches found

Kitploit
Kitploit
added 2026/09/15 7:56 p.m.8 views

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

6.5CVSS7.3AI score0.22915EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/15 12:49 a.m.7 views

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 Windows エクスプローラー ゼロクリック NTLMv2-SSP ハッシュ開示 著者: Ruben Enkaoua と Cymulate 最初のブログ: Zero Click, One NTLM: Microsoft Security Patch Bypass CVE-2025-50154 2つ目のブログ: Patched Twice, Still Bypassed: New NTLM Leak CVE-2025-50154 Patch Bypass 説明 Microsoft がアイコンベースの NTLM...

6.5CVSS7.3AI score0.25564EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 1:34 p.m.8 views

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure 攻撃者管理の共有フォルダーへの自動SMB認証をトリガーします。 操作は不要です — Windows ExplorerがこのNTLM認証を自動的に開始します。 NTLMv2ハッシュの漏えい(情報開示)が発生します。 Windows 10/11 の全バージョンに影響。特に 11 23H2。 攻撃者環境のセットアップ sudo apt update && sudo apt install responder -y Responder を起動 sudo responder -I eth0 エクスプロイトスクリプトの実行...

6.5CVSS7.3AI score0.22915EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/13 10:48 a.m.6 views

cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Windows NTLM ハッシュ漏えいのスプーフィング脆弱性 概要 CVE-2024-43451 は、Windows における NTLMv2 ハッシュ漏えいのスプーフィング脆弱性です。認証されていないリモートの攻撃者が、被害者に悪意のある .url ショートカットファイルとのやり取りを誘導することで、被害者の NTLM ハッシュを漏えいさせることができます。この脆弱性は、ごく最小限のユーザー操作(ファイルを右クリックする、削除する、移動するだけ)でトリガーされ、ハッシュが漏えいします。CVSS スコアは...

6.5CVSS7.5AI score0.84108EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/11 8:35 p.m.8 views

cve-2025-24071

CVE-2025-24054 和 CVE-2025-24071 - 通过 .library-ms 漏洞泄露 NTLM 哈希 该 PoC 演示了在未修补的 Windows 系统(2025 年 3 月补丁星期二)上通过 .library-ms 文件利用 NTLM 哈希泄露。 ⚠️ 本内容仅供教育和研究目的使用。请勿在生产环境或未经授权的系统上使用。 🧠 描述 当在 Windows 资源管理器中打开(或预览)包含 UNC 路径的 .library-ms 文件时,会触发向指定服务器发送 SMB 认证请求,导致 NTLMv2 哈希泄露。 📁 文件 generatelibraryms.py:生成恶意的...

6.5CVSS7.5AI score0.58909EPSS
SaveExploits37References1
Kitploit
Kitploit
added 2026/09/08 10:45 p.m.8 views

CVE-2025-52488

DNN Unicode パス正規化 NTLM ハッシュ漏えいエクスプロイト CVE-2025-52488 概要 このエクスプロイトは、DNN 旧 DotNetNuke バージョン 6.0.0 から 10.0.1 未満の脆弱性を標的とし、Unicode パス正規化攻撃を通じて攻撃者が NTLM ハッシュを漏えいさせることを可能にします。 脆弱性の詳細 CVE ID : CVE-2025-52488 深刻度 : 高 CVSS 8.6 影響を受けるバージョン : 6.0.0 から 10.0.1 未満 攻撃ベクトル : ネットワーク 認証 : 不要 仕組み...

8.6CVSS8.4AI score0.35847EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/08 3:17 a.m.8 views

CVE-2026-12962

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the ' Securi...

5.3CVSS0.00361EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/06/12 6:23 p.m.26 views

GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page

Summary A vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page and create files containing the master password in plaintext. The provided file name must be an absolute path to t...

7.2CVSS6.2AI score0.00616EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2025/10/14 5:00 p.m.22 views

CVE-2025-59185 NTLM Hash Disclosure Spoofing Vulnerability

...

6.5CVSS0.01148EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-19879

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00573EPSS
SaveExploits3References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-44832

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00842EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2025/07/31 7:13 a.m.132 views

Exploit for Improper Access Control in Joomla Joomla\!

PoCs This repo contains proof of concept exploits for vulnera...

9.8CVSS6.5AI score0.99864EPSS
SaveExploits114
RedhatCVE
RedhatCVE
added 2025/05/23 1:16 a.m.16 views

CVE-2022-29457

Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps...

8.8CVSS6.8AI score0.07947EPSS
SaveExploits4References1
Exploit DB
Exploit DB
added 2025/05/01 12:00 a.m.336 views

Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing

Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: https://hyp3rlinx.altervista.org/advisories/MicrosoftWindowsxrm-msFileNTLM-HashDisclosure.txt x.com/hyp3rlinx ISR: ApparitionSec Vendor www.microsoft.com Product .xrm-ms File Type Vulnerability Type NTLM Hash...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2025/05/01 12:00 a.m.416 views

Microsoft - NTLM Hash Disclosure Spoofing (library-ms)

Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...

6.5CVSS7.4AI score0.58909EPSS
SaveExploits20
Cvelist
Cvelist
added 2025/03/11 4:59 p.m.39 views

CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability

...

6.5CVSS0.58909EPSS
SaveExploits20References1
Microsoft CVE
Microsoft CVE
added 2025/03/11 2:00 p.m.37 views

NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7AI score0.58909EPSS
SaveExploits20
RedhatCVE
RedhatCVE
added 2025/02/13 8:54 p.m.18 views

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability...

6.5CVSS6.8AI score0.24457EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/11 5:58 p.m.59 views

CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability

...

6.5CVSS0.24457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/11 12:00 a.m.20 views

PT-2025-6320 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to February 2025 patchday Description: A spoofing issue allows attackers to affect the system. This issue is related to the disclosure of NTLM hash, which can be exploited by attackers. The estimated number of potential...

7.8CVSS8.3AI score0.24457EPSS
SaveExploits0References21
Rows per page
Query Builder