CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download

🗓️ 18 Apr 2025 04:29:00Reported by The Hacker NewsType

thn

thn🔗 thehackernews.com👁 192 Views

Active attack on CVE-2025-24054 steals NTLM credentials via file download vulnerabilities in Windows.

Reporter	Title	Published	Views	Family All 147
githubexploit	Exploit for External Control of File Name or Path in Microsoft	14 Jun 202506:46	–	githubexploit
githubexploit	Exploit for External Control of File Name or Path in Microsoft	21 Jun 202614:29	–	githubexploit
githubexploit	Exploit for External Control of File Name or Path in Microsoft	1 Jul 202610:14	–	githubexploit
githubexploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	5 Jul 202509:22	–	githubexploit
githubexploit	Exploit for External Control of File Name or Path in Microsoft	1 Apr 202621:11	–	githubexploit
githubexploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	13 Aug 202505:40	–	githubexploit
githubexploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	27 Mar 202514:36	–	githubexploit
githubexploit	Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft	21 Apr 202520:05	–	githubexploit
githubexploit	Exploit for External Control of File Name or Path in Microsoft	23 Nov 202513:30	–	githubexploit
githubexploit	Exploit for External Control of File Name or Path in Microsoft	9 Nov 202519:48	–	githubexploit

19 Apr 2025 08:34Current

7.4High risk

Vulners AI Score7.4

CVSS 3.16.5

EPSS0.81817

SSVC

cve-2025-24054 ntlm credentials medium severity windows vulnerability active exploitation spoofing attacks