2979 matches found
ShroudedSnooper's HTTPSnoop Backdoor Targets Middle East Telecom Companies
Telecommunication service providers in the Middle East are the target of a new intrusion set dubbed ShroudedSnooper that employs a stealthy backdoor called HTTPSnoop. "HTTPSnoop is a simple, yet effective, backdoor that consists of novel techniques to interface with Windows HTTP kernel drivers an...
Microsoft Exchange SharedTypeResolver Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the lack of protection against deserialization of the SharedTypeResolver class. The issue...
Microsoft Exchange ExFileLog Deserialization of Untrusted Data Denial-of-Service Vulnerability
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Microsoft Exchange. Authentication is required to exploit this vulnerability. The specific flaw exists within the lack of protection against deserialization of the ExFileLog class. The...
The vulnerability of the ProjectInstance class in the Microsoft Exchange Server mail server allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the ProjectInstance class in Microsoft Exchange Server involves deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-72225)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...
The vulnerability of Microsoft Exchange Server’s mail server, related to access control errors, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to access control errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the server’s account context through a remote network call...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to carry out spear-phishing attacks.
The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks remotely...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Microsoft Patch Tuesday for September 2023 — Unusually low 5 critical vulnerabilities included in Microsoft Patch Tuesday, along with two zero-days
Microsoft disclosed 65 vulnerabilities across its suite of products and software Tuesday, only five of which are considered critical, which is very low compared to Microsofts usual security updates. However, there are two issues disclosed and patched this month that have already been exploited in...
CVE-2023-36777
Microsoft Exchange Server Information Disclosure Vulnerability...
CVE-2023-36757
Microsoft Exchange Server Spoofing Vulnerability...
CVE-2023-36757
Microsoft Exchange Server Spoofing Vulnerability...
CVE-2023-36745
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-36744
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-36744
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2023-36756
Microsoft Exchange Server Remote Code Execution Vulnerability...
Spoofing
Microsoft Exchange Server Spoofing Vulnerability...
Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability...