3051 matches found
CVE-2022-21978
CVE-2022-21978 is a Microsoft Exchange Server elevation-of-privilege vulnerability. Affected products include Exchange Server 2013/2016/2019 with local, authenticated access required to exploit; the root cause is exploitation of elevated-privilege workflows that can lead to domain-privilege takeo...
Description of the security update for Microsoft Exchange Server 2016 and 2019: May 10, 2022 (KB5014261)
None None...
Microsoft Exchange Server Elevation of Privilege Vulnerability
...
Description of the security update for Microsoft Exchange Server 2013: May 10, 2022 (KB5014260)
Description of the security update for Microsoft Exchange Server 2013: May 10, 2022 KB5014260 This security update rollup resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: CVE-2022-21978 |...
Microsoft Exchange Server 权限许可和访问控制问题漏洞
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A vulnerability exists in Microsoft Exchange Server with privilege permission and access control...
KLA12527 Elevation of privilege vulnerability in Microsoft Server Software
Elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-21978 Related products Microsoft-Exchange-Server CVE list CVE-2022-21978 critical KB list 5014261 5014260 Solution Install...
CISA Alert: Top 15 Routinely Exploited Vulnerabilities
The U.S. Cybersecurity & Infrastructure Security Agency has published its report on the top exploited vulnerabilities of 2021. This blog summarizes the report’s findings and how you can use Qualys VMDR to automatically detect and remediate these risks in your enterprise environment. The...
Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba Cloud
LemonDuck, a cross-platform cryptocurrency mining botnet, is targeting Docker to mine cryptocurrency on Linux systems as part of an active malware campaign. "It runs an anonymous mining operation by the use of proxy pools, which hide the wallet addresses," CrowdStrike said in a new report. "It...
The vulnerability of the MSExchangeMailboxAssistants service on Microsoft Exchange Server allows attackers to escalate their privileges.
The vulnerability of the MSExchangeMailboxAssistants service in Microsoft Exchange Server lies in the possibility of bypassing the file path. Exploiting this vulnerability can allow an attacker to enhance their privileges by specifying a file path without quotes...
New Incident Report Reveals How Hive Ransomware Targets Organizations
A recent Hive ransomware attack carried out by an affiliate involved the exploitation of "ProxyShell" vulnerabilities in the Microsoft Exchange Server that were disclosed last year to encrypt an unnamed customer's network. "The actor managed to achieve its malicious goals and encrypt the...
Microsoft Exchange Active Directory Topology 15.0.847.40 - Unquoted Service Path Vulnerability
Exploit Title: Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path Exploit Author: Antonio Cuomo arkantolo Vendor : Microsoft Version : 15.0.847.40 Tested on OS: Microsoft Exchange Server 2013 SP1 PoC : ============== C:\sc qc...
Microsoft Patch Tuesday, April 2022 Edition
Microsoft on Tuesday released updates to fix roughly 120 security vulnerabilities in its Windows operating systems and other software. Two of the flaws have been publicly detailed prior to this week, and one is already seeing active exploitation, according to a report from the U.S. National...
APT 10, a state-sponsored Chinese threat group, conducting a global cyber espionage operation
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A Chinese state-sponsored advanced persistent threat APT 10 group has been attacking government, legal, religious entities and non-governmental organizations NGOs around the world in what appears to be an espionage campaign th...
The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient input validation, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data to the server...
The vulnerability of Microsoft Exchange Server servers, related to the exposure of information, allows attackers to perform spear-phishing attacks and disclose protected information.
The vulnerability of Microsoft Exchange Server servers is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to perform a spear-phishing attack and expose the protected information...
AvosLocker ransomware uses Microsoft Exchange Server vulnerabilities, says FBI
The FBI has issued an advisory about the AvosLocker ransomware. Notably the FBI has noticed that several victims have reported Microsoft Exchange Server vulnerabilities as the intrusion vector. AvosLocker is a Ransomware as a Service RaaS affiliate-based group that has targeted victims across...
Microsoft Exchange Server Spoofing Vulnerability (CNVD-2022-77978)
Microsoft Exchange Server is a set of email service programs from Microsoft Corporation USA. It provides mail access, storage, forwarding, voice mail, mail filtering, etc. A spoofing vulnerability exists in Microsoft Exchange Server, which can be exploited by attackers to conduct spoofing attacks...
Update now! Microsoft patches three zero-day vulnerabilities on Patch Tuesday
The updates for Microsofts March 2022 Patch Tuesday should fix 92 vulnerabilities, including three zero-day vulnerabilities. Of the 92 vulnerabilities, 21 are for Microsoft Edge and originate from the Chromium Project. Of the 71 others, three are classified as Critical because they allow remote...
