118 matches found
CVE-2021-26855
此存储库没有 README。...
CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065
CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 CTT增强版的Microsoft Exchange Server SSRF到RCE漏洞利用(ProxyShell/ProxyLogon),另一个CVSS 10.0关键漏洞,影响了全球数十万个组织。 🏢 CTT Exchange RCE 漏洞利用 v1.0 基于收敛时间理论(CTT)增强的Microsoft Exchange Server漏洞利用框架 🚨 概述 CTT-Exchange-RCE...
ExchangeWeaknessTest
ExchangeWeaknessTest 此脚本用于测试 Exchange Server 上的 CVE-2021-26855 漏洞。 示例 python3 ExchangeWeaknessTest.py mydomain.com 许可证 根据 GPL 版本 3 许可。...
CVE-2021-26855-CVE-2021-27065
CVE-2021-26855-CVE-2021-27065 分析 ProxyLogo Exchange RCE...
CVE-2021-26855-Scanner
CVE-2021-26855-Scanner CVE-2021-26855 的扫描器与 PoC PoC 致谢 GreyOrder。为了方便而重新上传,也因为微软至少下架过一次 : 批量扫描使用示例: shodan download --limit 12345 exchange "http.component:'outlook web+app'" gzip -d exchange.json.gz shodan parse exchange.json --fields=ipstr,port ips.txt python3 scan.py ips.txt...
CVE-2021-26855-SSRF-Exchange
CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...
CVE-2021-26855-d
基本的な使い方:python owamails.py -u -l -p オプション引数: -h, --help show this help message and exit -u URL, --url URL Url, provide schema and not final / eg https://example.org -l LIST, --list LIST Users mailbox list -p PATH, --path PATH Path to write emails in xml format -f FQDN, --fqdn FQDN FQDN -d DOMAIN,...
ProxyLogon-CVE-2021-26855
ProxyLogon-CVE-2021-26855 针对 Microsoft Exchange 中 ProxyLogon 漏洞的 RCE 利用程序 使用 Python 3.9 用法: python proxylogonrce.py 目标 邮箱 命令 示例: python proxylogonrce.py 192.168.227.137 [email protected] whoami 所有功劳归功于 DEVCORE,基于 https://f5.pm/go-62102.html...
exchange-0days-202103
exchange-0days-202103 针对CVE-2021-26855、CVE-2021-26857、CVE-2021-26858和CVE-2021-27065漏洞利用的IoC判定。...
ExchangeSmash
proxylogon Proxyloginチェーン Microsoft Exchange Server - CVE-2021-26855 用のエクスプロイトです。 実行方法: このエクスプロイトは Impacket パッケージを使用します。インストールするには、以下を実行してください: user@host:$ python3 -m pip install impacket 次に、エクスプロイトリポジトリをクローンし、エクスプロイトディレクトリに移動します: user@host:$ git clone https://github.com/hakivvi/proxylogon.git &&...
Flangvik
Flangvik 用于CVE-2021-26855(又名ProxyLogon)的C概念验证代码,支持经典的半交互式Web Shell以及shellcode……...
Siemens SIMATIC Devices Improper Input Validation (CVE-2024-26855)
net: ice: Fix potential NULL pointer dereference in icebridgesetlink. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid503688; scriptversion"1.2";...
CVE-2025-26855
creationtimestamp| type| source ---|---|--- 2025-07-18 11:29:21+00:00| seen| Telegram/gJYskrAFf-ZqdSRpQFDOkvzdEfqJSnIJmR5pdddmQ5lD3ZE...
CVE-2025-26855 Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla
A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...
CVE-2025-26855
The Articles Calendar extension for Joomla (versions 1.0.0 through 1.0.1.0007 ) is vulnerable to a SQL injection (CWE-89). This flaw allows an attacker to execute arbitrary SQL commands , potentially leading to a total impact on confidentiality, integrity, and availability. A functional exploit s...
Linux Distros Unpatched Vulnerability : CVE-2024-26855
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: ice: Fix potential NULL pointer dereference in icebridgesetlink The function...
AlmaLinux 8 : kernel (ALSA-2024:7000)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2024:7000 advisory. CVE-2023-6040 CVE-2024-26595 CVE-2024-26600 CVE-2021-46984 CVE-2023-52478 CVE-2023-52476 CVE-2023-52522 CVE-2021-47101 CVE-2021-47097 CVE-2023-52605...
Microsoft Exchange ProxyLogon Scanner
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework begin auxiliary class class MetasploitModule 'Microsoft Exchange ProxyLogon Scanner', 'Description' = %q This module scan for a vulnerability on Microsoft Exchange Serve...
ALSA-2024:5928 Important: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: nftables: nftsetrbtree skip end interval element from gc CVE-2024-26581 kernel: netfilter: nftlimit: reject configurations that cause integer overflow CVE-2024-26668 kernel: vfio/pci: Loc...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...