Lucene search
+L

40 matches found

Kitploit
Kitploit
added 2026/09/14 2:17 p.m.7 views

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 Windows文件资源管理器零点击NTLMv2-SSP哈希泄露 作者:Ruben Enkaoua 与 Cymulate 第一篇博客:零点击,一个NTLM:微软安全补丁绕过(CVE-2025-50154) 第二篇博客:打了两次补丁,仍然被绕过:新的NTLM泄露(CVE-2025-50154补丁绕过) 描述 虽然微软发布了一个安全更新,修复了基于图标的NTLM哈希泄露漏洞,但我发现了一种绕过方法,仍然允许攻击者在无需用户交互的情况下获取NTLMv2-SSP哈希。...

6.5CVSS7.3AI score0.25564EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 1:34 p.m.8 views

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLM哈希泄露 触发自动SMB认证到攻击者控制的共享。 无需交互——Windows资源管理器自动发起此NTLM认证。 导致NTLMv2哈希泄露(信息泄露)。 影响Windows 10/11所有版本,尤其是11 23H2。 设置攻击者环境 sudo apt update && sudo apt install responder -y 启动Responder sudo responder -I eth0 运行漏洞利用脚本 安装所需Python模块 pip install colorama python3 CVE-2025-24071.py -i -n...

6.5CVSS7.3AI score0.22915EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/13 9:36 p.m.7 views

CVE-2025-24071

セキュリティ脆弱性レポート: CVE-2025-24071 - Windows エクスプローラのなりすまし脆弱性 概要 NSFOCUS CERT は、Microsoft が Windows エクスプローラにおける深刻ななりすまし脆弱性(CVE-2025-24071 )に対処するためのセキュリティ更新プログラムを最近リリースしたことを検出しました。この脆弱性の CVSS スコアは 7.5 であり、その深刻度を示しています。この問題は、Windows エクスプローラにおける .library-ms ファイルの暗黙的な信頼と自動ファイル解析動作に起因します。認証されていない攻撃者は、悪意のある...

6.5CVSS7.3AI score0.22915EPSS
SaveExploits23
Kitploit
Kitploit
added 2026/09/13 10:48 a.m.5 views

cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Vulnerabilidad de suplantación de identidad de divulgación de hash NTLM en Windows Descripción general CVE-2024-43451 es una vulnerabilidad de suplantación de identidad de divulgación de hash NTLMv2 en Windows. Permite que un atacante remoto no autenticado filtre el hash NTLM de ...

6.5CVSS7.5AI score0.84108EPSS
SaveExploits1References2
Kitploit
Kitploit
added 2026/09/11 8:35 p.m.8 views

cve-2025-24071

CVE-2025-24054 y CVE-2025-24071 - Fuga de hash NTLM mediante exploit .library-ms Este PoC demuestra la explotación de la fuga de hash NTLM mediante archivos .library-ms en sistemas Windows sin parchear Patch Tuesday de marzo de 2025. ⚠️ Esto es solo con fines educativos y de investigación. No lo...

6.5CVSS7.5AI score0.58909EPSS
SaveExploits37References1
Kitploit
Kitploit
added 2026/09/08 10:45 p.m.7 views

CVE-2025-52488

DNN Unicode パス正規化 NTLM ハッシュ漏えいエクスプロイト CVE-2025-52488 概要 このエクスプロイトは、DNN 旧 DotNetNuke バージョン 6.0.0 から 10.0.1 未満の脆弱性を標的とし、Unicode パス正規化攻撃を通じて攻撃者が NTLM ハッシュを漏えいさせることを可能にします。 脆弱性の詳細 CVE ID : CVE-2025-52488 深刻度 : 高 CVSS 8.6 影響を受けるバージョン : 6.0.0 から 10.0.1 未満 攻撃ベクトル : ネットワーク 認証 : 不要 仕組み...

8.6CVSS8.4AI score0.35847EPSS
SaveExploits1References1
NVD
NVD
added 2026/09/08 3:17 a.m.8 views

CVE-2026-12962

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the ' Securi...

5.3CVSS0.00361EPSS
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2026/06/12 6:23 p.m.26 views

GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page

Summary A vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page and create files containing the master password in plaintext. The provided file name must be an absolute path to t...

7.2CVSS6.2AI score0.00616EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2025/10/14 5:00 p.m.21 views

CVE-2025-59185 NTLM Hash Disclosure Spoofing Vulnerability

...

6.5CVSS0.01148EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.14 views

EUVD-2024-19879

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00573EPSS
SaveExploits3References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.10 views

EUVD-2023-44832

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00842EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2025/07/31 7:13 a.m.132 views

Exploit for Improper Access Control in Joomla Joomla\!

PoCs This repo contains proof of concept exploits for vulnera...

9.8CVSS6.5AI score0.99864EPSS
SaveExploits114
RedhatCVE
RedhatCVE
added 2025/05/23 1:16 a.m.14 views

CVE-2022-29457

Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps...

8.8CVSS6.8AI score0.07947EPSS
SaveExploits4References1
Exploit DB
Exploit DB
added 2025/05/01 12:00 a.m.336 views

Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing

Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: https://hyp3rlinx.altervista.org/advisories/MicrosoftWindowsxrm-msFileNTLM-HashDisclosure.txt x.com/hyp3rlinx ISR: ApparitionSec Vendor www.microsoft.com Product .xrm-ms File Type Vulnerability Type NTLM Hash...

5.3AI score
SaveExploits0
Exploit DB
Exploit DB
added 2025/05/01 12:00 a.m.416 views

Microsoft - NTLM Hash Disclosure Spoofing (library-ms)

Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...

6.5CVSS7.4AI score0.58909EPSS
SaveExploits20
Cvelist
Cvelist
added 2025/03/11 4:59 p.m.38 views

CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability

...

6.5CVSS0.58909EPSS
SaveExploits20References1
Microsoft CVE
Microsoft CVE
added 2025/03/11 2:00 p.m.37 views

NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

6.5CVSS7AI score0.58909EPSS
SaveExploits20
RedhatCVE
RedhatCVE
added 2025/02/13 8:54 p.m.18 views

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability...

6.5CVSS6.8AI score0.24457EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2025/02/11 5:58 p.m.59 views

CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability

...

6.5CVSS0.24457EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/02/11 12:00 a.m.17 views

PT-2025-6320 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to February 2025 patchday Description: A spoofing issue allows attackers to affect the system. This issue is related to the disclosure of NTLM hash, which can be exploited by attackers. The estimated number of potential...

7.8CVSS8.3AI score0.24457EPSS
SaveExploits0References21
Rows per page
Query Builder