CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Triggers automatic SMB authentication to an attacker-controlled share. No interaction required — Windows Explorer initiates this NTLM authentication automatically. Results in NTLMv2 hash leakage information disclosure. Affects Windows 10/11 all versions,...

CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 Divulgación de hash NTLMv2-SSP de cero clics en el Explorador de archivos de Windows Por Ruben Enkaoua y Cymulate Primer blog: Zero Click, One NTLM: Bypass del parche de seguridad de Microsoft CVE-2025-50154 Segundo blog: Parcheado dos veces, aún se puede omitir:...

cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Vulnerabilidad de suplantación de identidad de divulgación de hash NTLM en Windows Descripción general CVE-2024-43451 es una vulnerabilidad de suplantación de identidad de divulgación de hash NTLMv2 en Windows. Permite que un atacante remoto no autenticado filtre el hash NTLM de ...

CVE-2025-24071

安全漏洞报告：CVE-2025-24071 - Windows文件资源管理器欺骗漏洞 概述 NSFOCUS CERT 检测到微软最近发布了一个安全更新，以修复 Windows 文件资源管理器中的一个严重欺骗漏洞，该漏洞被标识为 CVE-2025-24071 。此漏洞的 CVSS 评分为 7.5，表明其严重程度。此问题源于 Windows 资源管理器对 .library-ms 文件的隐式信任和自动文件解析行为。未经身份验证的攻击者可以通过构建包含恶意 SMB 路径的 RAR/ZIP 文件来利用此漏洞。解压缩后，会触发 SMB 身份验证请求，可能泄露用户的 NTLM 哈希。该漏洞的...

cve-2025-24071

CVE-2025-24054 和 CVE-2025-24071 - 通过 .library-ms 漏洞泄露 NTLM 哈希 该 PoC 演示了在未修补的 Windows 系统（2025 年 3 月补丁星期二）上通过 .library-ms 文件利用 NTLM 哈希泄露。 ⚠️ 本内容仅供教育和研究目的使用。请勿在生产环境或未经授权的系统上使用。 🧠 描述 当在 Windows 资源管理器中打开（或预览）包含 UNC 路径的 .library-ms 文件时，会触发向指定服务器发送 SMB 认证请求，导致 NTLMv2 哈希泄露。 📁 文件 generatelibraryms.py：生成恶意的...

CVE-2025-52488

Exploit de Divulgación de Hash NTLM por Normalización de Rutas Unicode en DNN CVE-2025-52488 Resumen Este exploit apunta a una vulnerabilidad en DNN anteriormente DotNetNuke versiones 6.0.0 hasta antes de 10.0.1 que permite a los atacantes divulgar hashes NTLM mediante ataques de normalización de...

CVE-2026-12962

A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crate allows a remote user to obtain a local user's NTLM hash by convincing the user to visit a crafted web page that sends a request containing a UNC path to the application's local service endpoint.Refer to the ' Securi...

GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page

Summary A vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page and create files containing the master password in plaintext. The provided file name must be an absolute path to t...

CVE-2025-59185 NTLM Hash Disclosure Spoofing Vulnerability

...

EUVD-2024-19879

Malicious code in bioql PyPI...

EUVD-2023-44832

Malicious code in bioql PyPI...

Exploit for Improper Access Control in Joomla Joomla\!

PoCs This repo contains proof of concept exploits for vulnera...

CVE-2022-29457

Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps...

Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing

Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: https://hyp3rlinx.altervista.org/advisories/MicrosoftWindowsxrm-msFileNTLM-HashDisclosure.txt x.com/hyp3rlinx ISR: ApparitionSec Vendor www.microsoft.com Product .xrm-ms File Type Vulnerability Type NTLM Hash...

Microsoft - NTLM Hash Disclosure Spoofing (library-ms)

Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...

CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability

...

NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability...

CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability

...

PT-2025-6320 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to February 2025 patchday Description: A spoofing issue allows attackers to affect the system. This issue is related to the disclosure of NTLM hash, which can be exploited by attackers. The estimated number of potential...