46 matches found
CVE-2023-21036
Acropalypse 检测与清理工具 你可以使用 Python 脚本 acropalypsedetection.py 或 yara 规则 acropalypsedetection.yar 来检测受 acropalypse 影响的裁剪图片： root@kitploit: $ for i in testimgs/; do python3 acropalypsedetection.py $i; done testimgs/windows10snippingtool1cropped.png testimgs/windows10snippingtool2cropped.png...
SnipRecover-CLI
SnipRecover CLI 检测并恢复受 CVE-2023-28303 影响的 Windows 截图工具 PNG 截图 SnipRecover CLI 是一款极简、无依赖的命令行工具，旨在： 检测 因 Windows 截图工具漏洞（CVE‑2023‑28303）而被修改的 PNG 文件。 恢复 原始图像，通过恢复附加在 IEND 块之后的压缩数据。 默认情况下，恢复后的图像使用 RGBA ，分辨率为 1920×1080 ；如果未指定输出路径，工具将写入 restored-.png。 🧠 理论背景 根据 PNG 规范（ISO/IEC 15948），所有图像数据（IDAT...
CVE-2026-33829-Writeup
CVE-2026-33829 分析报告 漏洞案例研究：CVE-2026-33829（Windows 截图工具 NTLM 强制认证） 执行摘要 本文详细记录了CVE-2026-33829 的技术复现过程，这是现代 Windows 截图工具应用程序框架中的一个信息泄露漏洞。通过滥用自定义 URI 协议处理器中一个未经验证的输入参数，远程主机可以强制未打补丁的 Windows 机器发起出站 SMB 连接，从而导致 Net-NTLMv2 身份验证哈希值通过网络泄露。 URI 方案 —— （Windows 使用自定义协议（如 ms-screensketch:、ms-settings:、file:）...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2026-33829 - Security Vulnerability Quick Usage ba...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
Security Vulnerability CVE-2026-33829 Overview A MEDIUM...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2026-33829 - Security Vulnerability Quick Usage ba...
Windows Snipping Tool - NTLMv2 Hash Hijack
Exploit Title: Windows Snipping Tool - NTLMv2 Hash Hijack Date: 2026-04-22 Exploit Author: nu11secur1ty Video Demo: https://www.patreon.com/posts/cve-2026-33829-156243398 Vendor Homepage: https://www.microsoft.com Software Link: Built-in Windows Snipping Tool Version: Windows 10, Windows 11,...
CVE-2026-33829
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32183
Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...
Microsoft Windows Snipping Tool Improper Input Validation Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the Snipping Too...
EUVD-2026-22649
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-22564
Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...
CVE-2026-33829
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-32183
Improper neutralization of special elements used in a command 'command injection' in Windows Snipping Tool allows an unauthorized attacker to execute code locally...
CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability
...
CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability
...
CVE-2026-33829
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-33829
CVE-2026-33829 concerns the Windows Snipping Tool and is assigned a CVSSv3.1 base score of 4.3 (Medium). The vulnerability is described with a network attack vector but requires user interaction and does not affect integrity or availability, with confidentiality impact listed as Low. The metric i...