CVE-2025-50154

CVE-2025-50154, CVE-2025-59214 विंडोज़ फ़ाइल एक्सप्लोरर ज़ीरो क्लिक NTLMv2-SSP हैश प्रकटीकरण द्वारा Ruben Enkaoua और Cymulate पहला ब्लॉग: ज़ीरो क्लिक, एक NTLM: माइक्रोसॉफ्ट सुरक्षा पैच बाइपास CVE-2025-50154 दूसरा ब्लॉग: दो बार पैच किया गया, फिर भी बाइपास: नया NTLM लीक CVE-2025-50154 पैच बाइपास...

CVE-2025-24071-POC-NTLMHashDisclosure-

CVE-2025-24071-POC-NTLMHashDisclosure Déclenche l'authentification SMB automatique vers un partage contrôlé par l'attaquant. Aucune interaction requise — l'Explorateur Windows initie cette authentification NTLM automatiquement. Entraîne une fuite de hash NTLMv2 divulgation d'informations. Concern...

cve-2024-43451-ntlm_hash_disclosure_reproduction

CVE-2024-43451 — Windows NTLM हैश प्रकटीकरण स्पूफिंग भेद्यता अवलोकन CVE-2024-43451 Windows में एक NTLMv2 हैश प्रकटीकरण स्पूफिंग भेद्यता है। यह एक अनधिकृत दूरस्थ हमलावर को एक दुर्भावनापूर्ण .url शॉर्टकट फ़ाइल के साथ इंटरैक्ट करने के लिए प्रेरित करके पीड़ित के NTLM हैश को लीक करने की अनुमति देता है...

CVE-2025-24071

Security Vulnerability Report: CVE-2025-24071 - Windows File Explorer Spoofing Vulnerability Overview NSFOCUS CERT has detected that Microsoft recently released a security update to address a critical spoofing vulnerability in Windows File Explorer, identified as CVE-2025-24071. This vulnerabilit...

cve-2025-24071

CVE-2025-24054 و CVE-2025-24071 - تسريب هاش NTLM عبر استغلال .library-ms يُظهر هذا الإثبات المفاهيمي PoC استغلال تسريب هاش NTLM عبر ملفات .library-ms على أنظمة ويندوز غير مصححة تحديثات مارس 2025 الثلاثاء التصحيحي. ⚠️ هذا للأغراض التعليمية والبحثية فقط. لا تستخدمه على أنظمة إنتاج أو أنظمة غير مصرح...

CVE-2025-52488

استغلال كشف تجزئة NTLM عبر تطبيع مسار Unicode في DNN CVE-2025-52488 نظرة عامة يستهدف هذا الاستغلال ثغرة في إصدارات DNN المعروفة سابقًا باسم DotNetNuke من 6.0.0 إلى ما قبل 10.0.1، والتي تسمح للمهاجمين بكشف تجزئات NTLM عبر هجمات تطبيع مسار Unicode. تفاصيل الثغرة معرف CVE : CVE-2025-52488 الشدة :...

GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page

Summary A vulnerability exists that allows an authenticated administrator with access to GeoServer's security system to pass arbitrary file names to the Master Password Dump web page and create files containing the master password in plaintext. The provided file name must be an absolute path to t...

CVE-2025-59185 NTLM Hash Disclosure Spoofing Vulnerability

...

EUVD-2024-19879

Malicious code in bioql PyPI...

EUVD-2023-44832

Malicious code in bioql PyPI...

Exploit for Improper Access Control in Joomla Joomla\!

PoCs This repo contains proof of concept exploits for vulnera...

CVE-2022-29457

Zoho ManageEngine ADSelfService Plus before 6121, ADAuditPlus 7060, Exchange Reporter Plus 5701, and ADManagerPlus 7131 allow NTLM Hash disclosure during certain storage-path configuration steps...

Microsoft - NTLM Hash Disclosure Spoofing (library-ms)

Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...

Microsoft Windows - XRM-MS File NTLM Information Disclosure Spoofing

Exploit Author: John Page aka hyp3rlinx Website: hyp3rlinx.altervista.org Source: https://hyp3rlinx.altervista.org/advisories/MicrosoftWindowsxrm-msFileNTLM-HashDisclosure.txt x.com/hyp3rlinx ISR: ApparitionSec Vendor www.microsoft.com Product .xrm-ms File Type Vulnerability Type NTLM Hash...

CVE-2025-24054 NTLM Hash Disclosure Spoofing Vulnerability

...

NTLM Hash Disclosure Spoofing Vulnerability

External control of file name or path in Windows NTLM allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-21377

NTLM Hash Disclosure Spoofing Vulnerability...

CVE-2025-21377 NTLM Hash Disclosure Spoofing Vulnerability

...

PT-2025-6320 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to February 2025 patchday Description: A spoofing issue allows attackers to affect the system. This issue is related to the disclosure of NTLM hash, which can be exploited by attackers. The estimated number of potential...

November Patch Tuesday release contains three critical remote code execution vulnerabilities

The Patch Tuesday for November of 2024 includes 89 vulnerabilities, including four that Microsoft marked as "critical." The remaining vulnerabilities listed are classified as "important." Microsoft assessed that exploitation of the four "critical" vulnerabilities is "less likely." CVE-2024-43639 ...