Back to the CVE list
CVE-2025-24054 CISA KEV · Actively exploited

NTLM Hash Disclosure Spoofing Vulnerability

CVSS score

6.5

EPSS probability

%62.3

Risk score

8.1

Published

1 y ago

OverviewPublic Exploits (11)NewsroomVulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

G
T0tooro/cve-2025-24054-lab
GitHub

Blue-team lab: detecting & mitigating CVE-2025-24054 (Windows NTLM hash disclosure) with Sysmon, Wazuh SIEM, and Group Policy

Public PoCSource updated: 01.07.2026 10:26:32
G
Fomovet/cve-2025-24054
GitHub

POC for CVE-2025-24054

Public PoCSource updated: 21.06.2026 14:30:10
G
simantchaudhari/CVE-2025-24054-PoC
GitHub

simantchaudhari/CVE-2025-24054-PoC

Public PoCSource updated: 01.05.2026 05:57:15
G
SecurityLayer404/CVE-2025-24054-24071---Metasploit-Module
GitHub

Módulo de Metasploit para explotar CVE-2025-24054 (ex 24071). Exploit de filtración NTLM integrado en Metasploit para vectores de ataque basados en bibliotecas de Windows.

Public PoCSource updated: 01.04.2026 22:41:32
G
Untouchable17/CVE-2025-24054
GitHub

Windows File Explorer Zero Click NTLMv2-SSP Hash Disclosure

Public PoCSource updated: 05.02.2026 06:34:33
G
Wind010/CVE-2025-24054_PoC
GitHub

A proof of concept for CVE-2025-24054/CVE-2025-24071

Public PoCSource updated: 09.11.2025 19:48:58
G
helidem/CVE-2025-24054_CVE-2025-24071-PoC
GitHub

Proof of Concept for the NTLM Hash Leak via .library-ms CVE-2025-24054 / CVE-2025-24071

Public PoCSource updated: 20.09.2026 12:24:30
G
moften/CVE-2025-24054
GitHub

Vulnerabilidad NTLM (CVE-2025-24054) explotada para robo de hashes

Public PoCSource updated: 20.07.2026 23:33:30
E
Windows 10.0.17763.7009 - spoofing vulnerability
Exploit-DB

Windows 10.0.17763.7009 - spoofing vulnerability

Exploit referenceSource updated: 11.02.2026 00:00:00
E
windows 10/11 - NTLM Hash Disclosure Spoofing
Exploit-DB

windows 10/11 - NTLM Hash Disclosure Spoofing

Exploit referenceSource updated: 04.02.2026 00:00:00
E
Microsoft - NTLM Hash Disclosure Spoofing (library-ms)
Exploit-DB

Microsoft - NTLM Hash Disclosure Spoofing (library-ms)

Exploit referenceSource updated: 01.05.2025 00:00:00

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-24054"