107 matches found
M365Pwned
M365Pwned Red Team tooling for Microsoft 365 exploitation via Microsoft Graph API. Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens — no user interaction required. Tool| Target| What it does ---|---|---...
EUVD-2026-108540
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...
CVE-2026-96185
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...
CVE-2026-96185
A stack-based buffer overflow exists in Microsoft Exchange Online , which could allow an authorized attacker to achieve remote code execution over a network. The vulnerability is classified as HIGH severity with a CVSS score of 7.5. No specific exploit information or remediation details are provi...
CVE-2024-21378
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378...
Microsoft Exchange Online Remote Code Execution Vulnerability
Stack-based buffer overflow in Microsoft Exchange Online allows an authorized attacker to execute code over a network...
CVE-2026-54998-exp
DISCLAIMER This repository is for educational and research purposes only. The author is not responsible for any misuse, damage, or illegal activities caused by the use of this material. Use at your own risk. Respect applicable laws and ethical guidelines. Overview CVE-2026-54998 is an Incorrect...
PT-2026-121679
⚠️ A new vulnerability with increased severity was disclosed for Microsoft Exchange Server CVE-2026-96185 vuldb.com/vuln/425517 https://t.co/lkRAs4a9x5...
EUVD-2026-63689
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
...
CVE-2026-65801
CVE-2026-65801 is a critical (CVSS 3.1: 10.0) server-side request forgery (SSRF) vulnerability in Microsoft Exchange Online that allows an unauthorized, unauthenticated attacker to elevate privileges over a network . The attack requires no user interaction, no prior privileges, and has low comple...
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
...
Microsoft Exchange Online Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801: Server-Side Request Forgery (SSRF)
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
KLA91239 Multiple vulnerability in Microsoft Server Software
Multiple vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-65801 Exploitation Related products Microsoft-Exchange-Online CVE list CVE-2026-65801 critical KB list...
PT-2026-79200
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make request...
CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
