85 matches found
M365-Assess
M365 Assess Comprehensive M365 Security Assessment Tool Read-only Microsoft 365 security assessment for IT consultants and administrators...
untitledgoosetool
Untitled Goose Tool The Goose is loose. Table of Contents About Getting Started Prerequisites Requirements Installing Usage Config GUI Auth Csv Honk Messagetrace Recommended Default Workflow Recommended Workflow for UAL Call with Time Bounds Considerations Known Issues Acknowledgements Contributi...
MINI-V4H3-M365-FP9C
Bulletin has no description...
The vulnerability in Microsoft Word, Microsoft Office suites, and Microsoft 365 Apps for Enterprise allows a perpetrator to disclose protected information.
The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
CVE-2026-16053 Path Traversal
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
EUVD-2026-55969
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
CVE-2026-16053
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module...
CVE-2026-16053
ManageEngine M365 Manager Plus and M365 Security Plus (versions below 4820) are affected by an Authenticated Path Traversal vulnerability in the Exchange Online backup module. The issue is described as a path traversal flaw in an authenticated context, with CVSS 3.1 indicating network access, low...
PT-2026-70077
Name of the Vulnerable Software and Affected Versions ManageEngine M365 Manager Plus versions prior to 4820 ManageEngine M365 Security Plus versions prior to 4820 Description An authenticated path traversal issue exists within the Exchange Online backup module. Path traversal is a flaw that allow...
GHSA-M365-X9XQ-2P8X vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-50517
Deserialization of untrusted data in M365 Copilot allows an authorized attacker to execute code over a network...
ManageEngine AD360 Detection Tool
A proof of concept detection tool for ManageEngine AD360 products affected by CVE-2026-11374. The Python utility safely checks whether an ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, or ADAudit Plus deployment is AD360-integrated and therefore meets the exploit precondition for th...
CVE-2026-58617
CVE-2026-58617 affects Microsoft 365 Copilot for iOS. Connected sources describe an improper access control that allows an unauthorized attacker to elevate privileges over the network. Root cause reported as access control deficiencies in the iOS Copilot component; impact is privilege escalation ...
CVE-2026-54130
Missing authentication for critical function in M365 Copilot allows an unauthorized attacker to disclose information over a network...
CVE-2026-42824
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
PT-2026-46401
Name of the Vulnerable Software and Affected Versions Microsoft 365 Copilot Enterprise affected versions not specified Description A critical vulnerability chain known as SearchLeak allows an unauthorized attacker to exfiltrate sensitive corporate data, including email contents, MFA codes, calend...
CVE-2026-42827
Improper neutralization of special elements used in a command 'command injection' in M365 Copilot allows an unauthorized attacker to disclose information over a network...
