Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 21:00:31 +0000 CVE-2026-123532 — gix-fs before 0.24.1 NTLM Credential Disclosure via Windows Symlink UNC Probe https://db.gcve.eu/vuln/cve-2026-123532 <p><strong>Affected:</strong> GitoxideLabs gitoxide</p> <p>gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM credentials by supplying UNC symlink targets in a crafted repository. When a victim checks out the repository on Windows with symlinks enabled, gix_fs::symlink::create calls is_dir() on the UNC target, triggering SMB authentication that leaks the username, domain, and NTLMv2 hash.</p> <p><strong>Affected:</strong> GitoxideLabs gitoxide</p> <p>gix-fs in gitoxide before 0.24.1 contains a credential disclosure vulnerability that allows remote attackers to capture NTLM credentials by supplying UNC symlink targets in a crafted repository. When a victim checks out the repository on Windows with symlinks enabled, gix_fs::symlink::create calls is_dir() on the UNC target, triggering SMB authentication that leaks the username, domain, and NTLMv2 hash.</p> https://db.gcve.eu/vuln/cve-2026-123532