M365Pwned

M365Pwned Herramientas de Red Team para la explotación de Microsoft 365 mediante la API de Microsoft Graph. Dos herramientas GUI de WinForms para enumerar, buscar y extraer datos de entornos M365 utilizando tokens OAuth a nivel de aplicación — sin interacción del usuario. Herramienta| Objetivo| Q...

CVE-2024-21378

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 Exigimos el regreso seguro de todos los ciudadanos que han sido tomados como rehenes por el grupo terrorista Hamás. No descansaremos hasta que cada rehén sea liberado y regrese a casa sano y salvo. Puedes ayudar a traerlos de vuelta a...

CVE-2026-54998-exp

DESCARGO DE RESPONSABILIDAD Este repositorio es solo para fines educativos y de investigación. El autor no es responsable por ningún uso indebido, daño o actividad ilegal causada por el uso de este material. Úselo bajo su propio riesgo. Respete las leyes aplicables y las pautas éticas. Resumen...

EUVD-2026-63689

Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-65801

Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability

...

CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability

...

CVE-2026-65801

CVE-2026-65801 is a critical (CVSS 3.1: 10.0) server-side request forgery (SSRF) vulnerability in Microsoft Exchange Online that allows an unauthorized, unauthenticated attacker to elevate privileges over a network . The attack requires no user interaction, no prior privileges, and has low comple...

Microsoft Exchange Online Elevation of Privilege Vulnerability

Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...

KLA91239 Multiple vulnerability in Microsoft Server Software

Multiple vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to bypass security restrictions, gain privileges. Original advisories CVE-2026-65801 Exploitation Related products Microsoft-Exchange-Online CVE list CVE-2026-65801 unknown Solution Insta...

CVE-2026-65801: Server-Side Request Forgery (SSRF)

Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...

PT-2026-79200

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make request...

CVE-2026-16053

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

EUVD-2026-55969

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

CVE-2026-16053 Path Traversal

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

CVE-2026-16053

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

CVE-2026-16053 Path Traversal

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...

CVE-2026-16053

ManageEngine M365 Manager Plus and M365 Security Plus (versions below 4820) are affected by an Authenticated Path Traversal vulnerability in the Exchange Online backup module. The issue is described as a path traversal flaw in an authenticated context, with CVSS 3.1 indicating network access, low...

PT-2026-70077

Name of the Vulnerable Software and Affected Versions ManageEngine M365 Manager Plus versions prior to 4820 ManageEngine M365 Security Plus versions prior to 4820 Description An authenticated path traversal issue exists within the Exchange Online backup module. Path traversal is a flaw that allow...

CVE-2026-16053: Relative Path Traversal

Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...