3051 matches found
Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2020-18391)
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A cross-site scripting vulnerability exists in Microsoft Exchange Server versions 2016 and 2019...
Description of the security update for Microsoft Exchange Server 2019 and 2016: March 10, 2020
None None...
Microsoft Exchange Server Spoofing Vulnerability
A cross-site-scripting XSS vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server. An authenticated attacker could exploit the vulnerability by sending a specially crafted request to an affected server. The...
The vulnerability of the Microsoft Exchange Server mail server, related to errors in memory object processing, allows attackers to escalate their privileges.
The vulnerability of Microsoft Exchange Server is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
PT-2020-1795 · Microsoft · Exchange Server
Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to a cross-site scripting XSS vulnerability. This occurs when Microsoft Exchange Server fails to properly sanitize a specially crafted web request,...
VulnCheck KEV: CVE-2020-0688
Microsoft Exchange Server Validation Key fails to properly create unique keys at install time, allowing for remote code execution...
Security Updates for Exchange (March 2020)
The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability : - A cross-site-scripting XSS vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an...
KLA11685 Spoofing vulnerability in Microsoft Exchange Server
A spoofing vulnerability was found in Microsoft Exchange Server. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2020-0903 Related products Microsoft-Exchange-Server CVE list CVE-2020-0903 warning KB list 4540123 Solution Install necessary updates...
The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in the deserialization mechanism, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Exploit for Improper Authentication in Microsoft
It is an exploit module targeting Microsoft Exchange Server. The primary CVE ID is CVE-2020-0688. The vulnerability class is a deserialization vulnerability, specifically a TextFormattingRunProperties deserialization vulnerability. The probable entry point is the exploit.py script. Notable...
Exchange Control Panel - Viewstate Deserialization (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'bindata' class MetasploitModule 'Exchange Control Panel Viewstate Deserialization', 'Description' = %q This module exploits a .NET serialization vulnerability i...
Exchange Control Panel Viewstate Deserialization Exploit
This Metasploit module exploits a .NET serialization vulnerability in the Exchange Control Panel ECP web page. The vulnerability is due to Microsoft Exchange Server not randomizing the keys on a per-installation basis resulting in them using the same validationKey and decryptionKey values. With...
Exchange Control Panel Viewstate Deserialization
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'bindata' class MetasploitModule 'Exchange Control Panel Viewstate Deserialization', 'Description' = %q This module exploits a .NET serialization vulnerability i...
Microsoft Exchange Server Remote Code Execution (CVE-2020-0688)
A remote code execution vulnerability exists in Microsoft Exchange Server. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Microsoft Exchange Server Exchange Control Panel Fixed Cryptographic Key Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Exchange Server. Authentication is required to exploit this vulnerability. The specific flaw exists within the Exchange Control Panel web application. The product fails to generate a unique...
Microsoft Exchange Server Elevation of Privilege Vulnerability (CNVD-2020-10478)
Microsoft Exchange Server is a suite of e-mail service programs. Microsoft Exchange Server has a security vulnerability that can be exploited by a remote attacker to submit a special request that can gain the same privileges as any other user of Exchange Server...
Microsoft Exchange Authentication Key Remote Code Execution Vulnerability
Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. Microsoft Exchange Server suffers from a remote code execution vulnerability that stems from the program's failure to proper...
Microsoft Patch Tuesday February 2020
IMHO, these are the two most interesting vulnerabilities in a recent Microsoft Patch Tuesday February 2020: Mysterious Windows RCE CVE-2020-0662. "To exploit the vulnerability, an attacker who has a domain user account could create a specially crafted request, causing Windows to execute arbitrary...
