15 matches found
CVE-2023-35636
CVE-2023-35636 Microsoft Outlook 정보 유출 취약점 비밀번호 해시 누출 - Expect Script POC CVE-2023-35636은 Microsoft Outlook의 캘린더 공유 기능을 악용한 것으로, 이메일에 두 개의 헤더를 추가하면 Outlook이 콘텐츠를 공유하고 지정된 머신에 접속하도록 하여 NTLM v2 해시를 가로챌 수 있는 기회를 만듭니다. SMB 서버가 켜진 Responder를 실행합니다 이메일을 보내고 기다립니다 수신자 방화벽이 SMB445 트래픽을 허용해야 함 usage:...
EUVD-2022-35805
Malicious code in bioql PyPI...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Microsoft
CVE-2023-35636 Microsoft Outlook Information Disclosure Vulner...
PT-2023-7682
Name of the Vulnerable Software and Affected Versions Microsoft Outlook affected versions not specified Description The issue is related to the calendar sharing function in Microsoft Outlook, which can be exploited to access NT LAN Manager NTLM v2 hashed passwords. Attackers can steal NTLM passwo...
SUSE CVE-2022-32739
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...
CVE-2022-32739
When Secure::DisableBanner system configuration has been disabled and agent shares his calendar via public URL, received ICS file contains OTRS release number...
CVE-2022-32739
CVE-2022-32739 involves OTRS: when Secure::DisableBanner is disabled and an agent shares a calendar via a public URL, the ICS export leaks the OTRS release number. The linked documents explicitly describe the ICS file containing the OTRS release version, linking to multiple advisories and vulnera...
Qnap QcalAgent 跨站脚本漏洞
Qnap QcalAgent is a time management center from China Weilian Technology Qnap. It is used to manage personal schedules, share calendars with others, and share each other's schedules. QNAP QcalAgent suffers from a cross-site scripting vulnerability that stems from insufficient cleaning of...
Description of the security update for Microsoft Exchange: December 12, 2017
None None...
Description of the security update for Microsoft Exchange: September 12, 2017
None None...
CVE-2014-8675
Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...
CVE-2014-8675
Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash...
perl-cal-29920.txt
------=Part1714122617522.1134045408185 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Vendor: Perl-Cal Version tested: Perl-Cal 2.99.20 , other versions may also be affected. Type: Cross Site Scripting Severity: Medium...
