87 matches found
CVE-2024-21378
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 我们要求安全归还所有被恐怖组织哈马斯绑架的公民。在所有被扣押人员获释并安全返回家园之前，我们不会罢休。你可以帮助他们回家。https://stories.bringthemhomenow.net/ 🛡️ CVE-2024-21378 此仓库包含一个针对通过 Exchange Online 使用 Microsoft Outlook 的漏洞利用示例，利用该漏洞可通过 COM DLL 执行任意代码。该漏洞利用采用修改版的 Ruler，将恶意表单作为电子邮件发送，当用户在 Outlook 胖客户端中交互时触发执行。 漏洞利用概述...
M365Pwned
M365Pwned 用于通过 Microsoft Graph API 进行 Microsoft 365 攻击的红队工具。 两个 WinForms GUI 工具，用于使用应用程序级 OAuth 令牌枚举、搜索和从 M365 环境中窃取数据 — 无需用户交互。 工具| 目标| 功能 ---|---|--- MailPwned-GUI.ps1| Exchange Online / Outlook| 浏览邮箱、搜索邮件、下载附件、发送冒充邮件 SharePwned-GUI.ps1| SharePoint / OneDrive| 浏览站点和驱动器、搜索文件、预览和下载文档 ⚠️ 免责声明...
CVE-2026-54998-exp
DESCARGO DE RESPONSABILIDAD Este repositorio es solo para fines educativos y de investigación. El autor no es responsable por ningún uso indebido, daño o actividad ilegal causada por el uso de este material. Úselo bajo su propio riesgo. Respete las leyes aplicables y las pautas éticas. Resumen...
EUVD-2026-63689
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
...
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
...
CVE-2026-65801
CVE-2026-65801 is a critical (CVSS 3.1: 10.0) server-side request forgery (SSRF) vulnerability in Microsoft Exchange Online that allows an unauthorized, unauthenticated attacker to elevate privileges over a network . The attack requires no user interaction, no prior privileges, and has low comple...
Microsoft Exchange Online Elevation of Privilege Vulnerability
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
PT-2026-79200
Name of the Vulnerable Software and Affected Versions Microsoft Exchange Online affected versions not specified Description Server-side request forgery SSRF allows an unauthorized attacker to elevate privileges over a network. SSRF is a flaw where an attacker can induce the server to make request...
CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
CVE-2026-16053 Path Traversal
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
EUVD-2026-55969
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
CVE-2026-16053
ManageEngine M365 Manager Plus and M365 Security Plus (versions below 4820) are affected by an Authenticated Path Traversal vulnerability in the Exchange Online backup module. The issue is described as a path traversal flaw in an authenticated context, with CVSS 3.1 indicating network access, low...
CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
PT-2026-70077
Name of the Vulnerable Software and Affected Versions ManageEngine M365 Manager Plus versions prior to 4820 ManageEngine M365 Security Plus versions prior to 4820 Description An authenticated path traversal issue exists within the Exchange Online backup module. Path traversal is a flaw that allow...
CVE-2026-56191
Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform tampering over a network...
CVE-2026-56191 Microsoft Exchange Online Tampering Vulnerability
...
CVE-2026-56191
Technical details about CVE-2026-56191 are not provided in the connected documents. Public information here only cites improper authentication and tampering risk for Microsoft Exchange Online. Monitor for updates from official advisories.