Exploitation Summary
EIP tracks 7 public exploits for CVE-2026-33829. PoCs published by nu11secur1ty, Hex0rc1st, jenniferreire26.
AI-analyzed exploit summary The provided content describes a vulnerability in Windows Snipping Tool (CVE-2026-33829) but lacks actual exploit code. It directs users to external sources (Patreon, GitHub) for the exploit, which is a common tactic in suspicious repositories.
Description
Exposure of sensitive information to an unauthorized actor in Windows Snipping Tool allows an unauthorized attacker to perform spoofing over a network.
Exploits (7)
The provided content describes a vulnerability in Windows Snipping Tool (CVE-2026-33829) but lacks actual exploit code. It directs users to external sources (Patreon, GitHub) for the exploit, which is a common tactic in suspicious repositories.
The repository lacks actual exploit code and instead directs users to an external download link (tinyurl.com). The README provides generic details about the vulnerability but no technical depth or functional PoC.
The repository contains a Bash script that passively monitors for SMB connections from a Windows target after it interacts with a crafted 'search:' URI, indicating potential vulnerability to CVE-2026-33829. It does not exploit the vulnerability but detects potential exposure by logging SMB traffic.
The repository claims to provide an exploit for CVE-2026-33829 but only contains a README with vague details and a link to an external download (tinyurl.com). No actual exploit code is present, and the README lacks technical depth.
The repository lacks actual exploit code and instead directs users to an external download link (tinyurl.com). The README provides minimal technical details about the vulnerability, focusing on generic usage instructions and affected versions without explaining the root cause or exploitation mechanics.
This repository provides a detailed technical analysis of CVE-2026-33829, an NTLM coercion vulnerability in the Windows Snipping Tool. It includes root cause analysis, proof-of-concept HTML payload, and remediation steps, demonstrating how an attacker can leak Net-NTLMv2 hashes via a malicious URI scheme.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N