Zirconium

ZIRCONIUM ZIRCONIUM wurde entwickelt, um auf Exchange-Servern nach Indicators of Compromise IOCs zu suchen, die auf Zero-Day-Exploits von HAFNIUM hindeuten. ZIRCONIUM sucht nach: CVE-2021-26855 CVE-2021-26958 CVE-2021-26857 CVE-2021-27027065 Verdächtigen .dmp-Dateien .aspnet-Dateien, die in...

CVE-2021-26855-PoC

CVE-2021-26855-PoC CVE-2021-26855 के लिए PoC शोषण कोड। मूल कोड https://github.com/GreyOrder द्वारा विकसित किया गया था। CVE-2021-26855 ssrf golang अभ्यास का सरल उपयोग प्रभावित संस्करण root@kitploit: Exchange Server 2013 CU23 से कम है Exchange Server 2016 CU18 से कम है Exchange Server 2019 CU7 से क...

Exch-CVE-2021-26855

Exch-CVE-2021-26855 ProxyLogon ist der formell generische Name für CVE-2021-26855, eine Sicherheitslücke auf Microsoft Exchange Server, die es einem Angreifer ermöglicht, die Authentifizierung zu umgehen und sich als Admin auszugeben. Wir haben diesen Fehler auch mit einer weiteren post-auth...

CVE-2021-24085

Microsoft Exchange Server msExchEcpCanary Vulnerabilità di elevazione dei privilegi tramite Cross Site Request Forgery Questa è una prova di concetto per CVE-2021-24085. 1. poc.py scarica il file del certificato del target con la chiave privata all'interno 2. YellowCanary genera il token csrf...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon è il nome generico formale per CVE-2021-26855, una vulnerabilità su Microsoft Exchange Server che consente a un attaccante di bypassare l'autenticazione e impersonare l'amministratore. Abbiamo anche concatenato questo bug con un'altra vulnerabilità post-autenticazio...

patch-CVE-2026-15502

Patch: CVE-2026-15502 Dettagli della vulnerabilità CVE : CVE-2026-15502 Prodotto : Microsoft Exchange Server Descrizione : SSRF che porta a RCE Gravità : Critica Stato della patch: IN REVISIONE...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 Versão aprimorada pela CTT do exploit de SSRF para RCE do Microsoft Exchange Server ProxyShell/ProxyLogon, outra vulnerabilidade crítica CVSS 10.0 que afetou centenas de milhares de organizações em...

CVE-2026-19900

creationtimestamp| type| source ---|---|--- 2026-08-15 17:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5auaw4h526 2026-08-16 02:45:25+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i 2026-08-18 06:00:03+00:00| confirmed|...

CVE-2026-62783

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:57+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:15:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:53+00:00| seen|...

CVE-2026-61366

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:53+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:46:09+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:50+00:00| seen|...

CVE-2026-54984

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:45+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:02+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:42+00:00| seen|...

CVE-2026-62703

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:41+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:46:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:38+00:00| seen|...

CVE-2026-65778

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:30+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:18:01+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:27+00:00| seen|...

CVE-2026-68812

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:05+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:01+00:00| seen|...

CVE-2026-66802

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:49+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:21:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:00:45+00:00| seen|...

CVE-2026-65813

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62911

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62912

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...

CVE-2026-62913

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

CVE-2026-62915

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...