CVE-2022-41082-POC

CVE-2022-41082-POC CVE-2022-41082 NotProxyShell OWASSRF भेद्यता के लिए PoC जो Microsoft Exchange सर्वरों को प्रभावित करती है यह ProxyNotShell OWASSRF के लिए पोस्ट-प्रमाणीकरण RCE है, कमांड निष्पादन के लिए मान्य प्रमाण-पत्र आवश्यक हैं। TabShell भेद्यता CVE-2022-41076 के लिए Powershell PoC स्क्रिप्ट...

Carnivore

Rilasciato come open source da NCC Group Plc - https://www.nccgroup.com/ Sviluppato da Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Rilasciato sotto licenza AGPL https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Strumento di Valutazione Esterna...

CVE-2021-34473-scanner

CVE-2021-34473-scanner ماسح ضوئي لـ CVE-2021-34473، ثغرة ProxyShell، وهي ثغرة في Microsoft Exchange المحلي لاختبار الآلات واحدة تلو الأخرى، استخدم scanner-CVE-2021-34473.bat: scanner-CVE-2021-34473.bat mail.exemple.fr لاختبار آلات متعددة دفعة واحدة، استخدم mass-scanner وأضف عنوان IP / FQDN المراد...

cve-2021-27065

Continuerò ad aggiungere nuovo codice o a modificare il codice esistente basandomi sulla ricerca di dati rubati Se sei stato compromesso, questi script non ti risolveranno il problema! Questi non ti forniscono alcun beneficio se non quello di sapere ora l'entità di ciò che è accaduto al tuo siste...

CVE-2026-71300

CVE-2026-71300 — camel-atmosphere-websocket Dispatch-Header-Injection Lauffähiger Proof-of-Concept-Reproducer für die Apache-Camel-Schwachstelle, bei der der camel-atmosphere-websocket-Producer seine WebSocket-Empfänger aus websocket.-Exchange-Headern auswählt, deren Namen außerhalb des...

msprobe

msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...

CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Microsoft-Exchange-Exploit

CTT-ProxyLogon-RCE-v1.0---Convergent-Time-Theory-Enhanced-Microsoft-Exchange-Exploit Ein fortschrittlicher Exploit für Microsoft Exchange Server CVE-2021-26855, CVE-2021-27065, verbessert mit Prinzipien der Konvergenten Zeittheorie, der durch quantenzeitliche Resonanz und α-Dispersionstechniken...

msmailprobe

msmailprobe Office 365 and Exchange Enumeration It is widely known that OWA Outlook Webapp is vulnerable to time-based user enumeration attacks. This tool leverages all known, and even some lesser-known services exposed by default Exchange installations to enumerate users. It also targets Office...

CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access

Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth clientcredentials grant, validatescopesagainstkey/2 in...

EEF-CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access

Summary Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth client\credentials grant,...

CVE-2026-19685

creationtimestamp| type| source ---|---|--- 2026-08-24 18:08:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttvjzjd6o2t 2026-08-24 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttwqgvsaf2e 2026-08-24 18:50:26+00:00| seen|...

CVE-2026-71300

Improper input validation vulnerability in Apache Camel Atmosphere Websocket component. This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0. The camel-atmosphere-websocket producer selects which connected WebSocket peers a message is...

CVE-2026-62911

CVE-2026-62911 RCE pre-autenticazione su Microsoft Exchange Server. Nessuna credenziale necessaria. Orange Tsai DEVCORE ha sfruttato questa vulnerabilità al Pwn2Own Berlin 2026 come parte di una catena di 3 bug. Premio di 200.000 dollari, compromissione totale come SYSTEM. Cosa fa Exchange espone...

http-vuln-CVE-2022-41082

LA VERSIONE AGGIORNATA CONSENTE ANCHE IL CONTROLLO HTTPS exchange-vuln-check.nse PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

CVE-2021-41349

CVE-2021-41349 Exploit! Microsoft Exchange Server Spoofing-Schwachstellen-Exploit! Schritte zur Reproduktion! 1. Machen Sie eine HTTP-Anfrage wie diese und fangen Sie sie im Burp ab 2. Erstellen Sie einen CSRF-PoC dieser Anfrage und speichern Sie die HTML-Ausgabe in einer Datei 3. Öffnen Sie die...

CVE-2026-77995

creationtimestamp| type| source ---|---|--- 2026-08-24 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150726686144491 2026-08-24 13:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f 2026-08-24 15:50:06+00:00| seen|...

BlackBerryC2

BlackBerryC2 2.0.0-beta BlackBerryC2 é um framework de administração remota e C2 criptografado projetado exclusivamente para uso educacional, pesquisa de segurança e ambientes laboratoriais controlados. O projeto demonstra como construir um servidor de comando e controle personalizado com...

CVE-2026-78251

creationtimestamp| type| source ---|---|--- 2026-08-24 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117149310942090116 2026-08-24 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtsruvafgr2c 2026-08-24 08:17:44+00:00| seen|...

kit-oauth

kit-oauth Libreria client OAuth 2.0 per applicazioni Kit TOC File File| Descrizione ---|--- .editorconfig| Configurazione di formattazione dell'editor .gitignore| Regole Git ignore per artefatti di build e dipendenze .tool-versions| Versioni degli strumenti asdf Zig, Kit LICENSE| File di licenza...

SSH-Weak-DH

Informazioni Questo strumento crea connessioni SSH a un server e passa attraverso diverse configurazioni client per verificare se il server consente uno scambio di chiavi Diffie-Hellman DH utilizzando un gruppo debole. Il nostro obiettivo è aiutare a valutare i server SSH per impostazioni di...