News for hackers. Stuff that matters.

A comment on Zoom Windows client could allow credentials to be leaked via UNC path injection.

Re:Zoom Windows client could allow credentials to be leaked ... by throwanem on Wednesday April 01, 2020 @09:57AM (#22748488)
tl;dr: Zoom chat links UNC paths on Windows, and clicking one sends your username and easily cracked NTLM password hash to the remote host.
[ Parent | on HN ]

There are no comments on this comment yet.