https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-04T21:50:01.769173+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2025-66413 CVE-2025-66413 — Git for Windows leaks NTLM hash when cloning from an attacker-controlled server 2026-10-04T21:50:01.788005+00:00

Affected: git-for-windows git

Git for Windows is the Windows port of Git. Prior to 2.53.0(2), it is possible to obtain a user's NTLM hash by tricking them into cloning from a malicious server. Since NTLM hashing is weak, it is possible for the attacker to brute-force the user's account name and password. This vulnerability is fixed in 2.53.0(2).