CVE-2025-21311 Windows NTLM V1 Elevation of Privilege Vulnerability

...

CVE-2025-21311

Windows NTLM V1 Elevation of Privilege Vulnerability...

CVE-2025-21311 Windows NTLM V1 Elevation of Privilege Vulnerability

...

CVE-2025-21311

CVE-2025-21311 is a Windows NTLMv1 Elevation of Privilege vulnerability. Affected product: Windows NTLM V1. The issue is remotely exploitable over the network with no user interaction required and can lead to a complete compromise of the target (CVSS v3.1: 9.8, Confidentiality, Integrity and Avai...

CVE-2025-21217 Windows NTLM Spoofing Vulnerability

...

CVE-2025-21217

CVE-2025-21217 is a Windows NTLM spoofing vulnerability with a CVSS v3.1 base score of 6.5 (Network, low attack complexity, no privileges required, user interaction required; Confidentiality impact: High). Exploitation details, affected products/versions, and a fixed patch are not provided in the...

CVE-2025-21217 Windows NTLM Spoofing Vulnerability

...

Windows NTLM Spoofing Vulnerability

...

Windows NTLM V1 Elevation of Privilege Vulnerability

...

Microsoft Windows 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft USA. A security vulnerability exists in Microsoft Windows NTLM. An attacker could exploit this vulnerability to conduct spoofing attacks. The following products and versions are affected:Windows 10 Versio...

KB5049984: Windows Server version 23H2 Security Update (January 2025)

The remote Windows host is missing security update 5049984. It is, therefore, affected by multiple vulnerabilities - Windows NTLM V1 Elevation of Privilege Vulnerability CVE-2025-21311 - Windows Telephony Service Remote Code Execution Vulnerability CVE-2025-21223, CVE-2025-21233, CVE-2025-21236,...

CVE-2024-46480

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system...

CVE-2024-46480

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system...

CVE-2024-46480

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system...

CVE-2024-46480

The CVE-2024-46480 entry concerns Venki Supravizio BPM up to version 18.0.1, where an NTLM hash leak could allow an authenticated attacker with Application Administrator access to escalate privileges on the host. Affected component: Venki Supravizio BPM; root cause: NTLM hash leakage used to esca...

CVE-2024-46480

An NTLM hash leak in Venki Supravizio BPM up to 18.0.1 allows authenticated attackers with Application Administrator access to escalate privileges on the underlying host system...

Venki Supravizio BPM 安全漏洞

Venki Supravizio BPM is a process management solution from Venki Brazil. A security vulnerability exists in Venki Supravizio BPM version 18.0.1 and prior versions, which stems from the presence of an NTLM hash leak that allows an authenticated attacker to elevate privileges on the underlying host...

Mintty Path Conversion Improper Input Validation Information Disclosure Vulnerability

This vulnerability allows remote attackers to relay NTLM credentials on affected installations of Mintty. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of printed...

New episode “In The Trend of VM” (#10): 8 trending vulnerabilities of November, zero budget VM and who should look for patches

New episode "In The Trend of VM" 10: 8 trending vulnerabilities of November, zero budget VM and who should look for patches. The competition for the best question on the topic of VM continues. Video on YouTube, LinkedIn Post on Habr rus Digest on the PT website Content: 00:29 Spoofing - Windows...

PT-2025-37303

Name of the Vulnerable Software and Affected Versions: Zabbix Agent 2 affected versions not specified Description: The Zabbix Agent 2 smartctl plugin does not properly sanitize smart.disk.get parameters, which allows an attacker to inject unexpected arguments into the smartctl command. This can b...