PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

[CVE-2025-52488] Abusing Windows, .NET quirks, and Unicode Normalization to exploit DNN (DotNetNuke)

slcyber.io | vulnerability | CVE-2025-52488 | #vulnerability-research
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Assetnote exploits a series of Windows .NET and Unicode normalization quirks to expose NTLM hashes in DNN (DotNetNuke) — CVE-2025-52488.
CVE
CVE-2025-52488
Published
Collected

Related coverage

vulnerability · slcyber.io
High Fidelity Detection Mechanism for php2shell (CVE-2026-109618 and CVE-2026-109619)
The research team releases an open source tool php2shell-scanner which contains a high fidelity scanning mechanism to check for CVE-2026-109618 and CVE-2026-109619 across hosts.
vulnerability · vercel.com
Reproducing, disclosing, and fixing the libheif vulnerability with Hacktron and the maintainers
How Vercel and Hacktron coordinated a fix for a remote code execution vulnerability that reached Next.js image optimization through sharp, libvips, and libheif.
vulnerability · vercel.com
The Vercel OSS Bug Bounty program is now available
Vercel is opening its open source software bug bounty program to the public for researchers find vulnerabilities and make OSS safer
vulnerability · vercel.com
Postmortem on Next.js Middleware bypass
Last week, we published CVE-2025-29927 and patched a critical severity vulnerability in Next.js. Here’s our post-incident analysis and next steps.
vulnerability · horizon3.ai
[CVE-2021-41765] Multiple Vulnerabilities in ResourceSpace
Advisory for CVE-2021-41765, a critical SQL injection vulnerability leading to remote code execution, by the Horizon3 red team.
vulnerability · horizon3.ai
Apache CVE-2021-41773, CVE-2021-42013
We wanted to do something a little bit different with this post. Our vulnerability disclosures, exploit proof-of-concepts, and attack analysis blog posts have…
Back