3051 matches found
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
If you've been keeping tabs on the state of vulnerabilities, you've probably noticed that Microsoft Exchange has been in the news more than usual lately. Back in March 2021, Microsoft acknowledged a series of threats exploiting zero-day CVEs in on-premises instances of Exchange Server. Since then...
New APT ChamelGang Targets Russian Energy, Aviation Orgs
A new APT group has emerged that’s specifically targeting the fuel and energy complex and aviation industry in Russia, exploiting known vulnerabilities like Microsoft Exchange Server’s ProxyShell and leveraging both new and existing malware to compromise networks. Researchers at security firm...
This Week in Security News - September 3, 2021
Proxytoken vulnerability can modify Exchange server configs and Lockbit jumps its own countdown, publishes Bangkok Air files...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Exchange Server is related to deficiencies in authentication procedures. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
exprolog
This is a Python script that exploits a vulnerability in Microsoft Exchange Server. The script is designed to target a specific version of the server and exploit a vulnerability to gain access to the system. Here is a summary of the script's functionality: 1. The script starts by importing the...
Microsoft Exchange ‘ProxyToken’ Bug Allows Email Snooping
A serious security vulnerability in Microsoft Exchange Server that researchers have dubbed ProxyToken could allow an unauthenticated attacker to access and steal emails from a target’s mailbox. Microsoft Exchange uses two websites; one, the front end, is what users connect to in order to access...
VulnCheck KEV: CVE-2021-31207
Microsoft Exchange Server contains an unspecified vulnerability that allows for security feature bypass...
VulnCheck KEV: CVE-2021-34473
Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code execution...
VulnCheck KEV: CVE-2021-34523
Microsoft Exchange Server contains an unspecified vulnerability that allows for privilege escalation...
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
Microsoft has broken its silence on the recent barrage of attacks on several ProxyShell vulnerabilities in that were highlighted by a researcher at Black Hat earlier this month. The company released an advisory late Wednesday letting customers know that threat actors may use unpatched Exchange...
Microsoft Exchange ProxyShell Remote Code Execution Exploit
This Metasploit module exploits a vulnerability on Microsoft Exchange Server that allows an attacker to bypass the authentication, impersonate an arbitrary user, and write an arbitrary file to achieve remote code execution. By taking advantage of this vulnerability, you can execute arbitrary...
Microsoft Exchange ProxyShell Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'winrm' class MetasploitModule 'Microsoft Exchange ProxyShell RCE', 'Description' = %q This module exploit a vulnerability on Microsoft Exchange Server that allo...
The vulnerability of Microsoft Exchange Server’s mail server, related to privilege management errors, allows a hacker to elevate their privileges.
The vulnerability of Microsoft Exchange Server is related to privilege management errors. Exploiting this vulnerability can allow an attacker to increase their privileges...
The vulnerability of the Microsoft Exchange Server mail server, related to errors in code generation, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
How to Reduce Exchange Server Downtime in Case of a Disaster?
Exchange Server downtime may occur at any point in time due to several reasons, such as malware attack, server crash, database corruption, and hardware or software-related issues/incompatibility. However, downtime can impact productivity and lead to data loss that can have severe implications on...
VulnCheck KEV: CVE-2021-28482
Microsoft Exchange Server Remote Code Execution Vulnerability...
Exploit for Server-Side Request Forgery in Microsoft
CVE-2021-34473 CVE-2021-34473 Microsoft Exchange Server Remote...
The vulnerability of Microsoft Exchange Server’s mail server, related to insecure management of privileges, allows attackers to elevate their own privileges.
The vulnerability of Microsoft Exchange Server is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
Last Week’s Security News: Black Hat Pwnie Awards, iPhone Checks Photos, Evil Windows Print Server, Cisco VPN Routers Takeovers
Hello everyone! Last Weeks Security News, August 1 - August 8. Black Hat Pwnie Awards Last week was more quiet than normal with Black Hat USA and DEF CON security conferences. I would like to start with the Pwnie Awards, which are held annually at Black Hat. Its like an Oscar or Tony in the...