KnockOutlook

KnockOutlook "The best feeling is to win by knockout." - Nonito Donaire Overview KnockOutlook is a C project that interacts with Outlook's COM object in order to perform a number of operations useful in red team engagements. Command Line Usage / /// / // \ / // / / / / , / / / / /// / / / / / / /...

azureOutlookC2

Azure Outlook C2 Azure Outlook Command & Control that uses Microsoft Graph API for C2 communications & data exfiltration. Remotely Control a compromised Windows Device from your Outlook Mailbox. Creators: Bobby Cooke @0xBoku & Paul Ungur @C5pider CTI Threat update 02/13/22 Elastic Security Labs h...

ExchangeRelayX

ExchangeRelayX Version 1.0.0. This tool is a PoC to demonstrate the ability of an attacker to perform an SMB or HTTP based NTLM relay attack to the EWS endpoint on an on-premise Microsoft Exchange server to compromise the mailbox of the victim. This tool provides the attacker with an OWA looking...

CVE-2018-8581

CVE-2018-8581 This is a lateral movement and privilege escalation vulnerability at the mailbox level. It can be used to delegate and take over the inbox of other users including domain administrators after obtaining the credentials of a regular mailbox account. This EXP script is an enhanced...

CVE-2024-21413

CVE-2024-21413 이 Python 스크립트는 "MonikerLink"라고 불리는 CVE-2024-21413을 악용하는 데 사용됩니다. TryHackMe 룸: MonikerLink 가정 이 PoC는 랩 환경을 위해 제작되었으며, 이는 서버가 특정 설정으로 구성되어야 함을 의미합니다예: 편의를 위해 TLS 인증은 지원되지 않음. 실제 취약점은 매우 실재하지만, 이것은 훈련용으로 제공됩니다. 특정 랩 환경을 대상으로 하고 코드가 특정 사용자를 위해 최대한 기본적으로 유지되므로, 여기에 기능을 추가하지는 않을 것입니다. "더...

CVE-2018-8581

CVE-2018-8581 이것은 메일박스 수준의 측면 이동 및 권한 상승 취약점입니다. 일반 권한의 메일박스 계정 비밀번호를 보유한 상태에서 다른 사용자도메인 관리자 포함의 메일박스 받은 편지함에 대한 위임 접근을 완료할 수 있습니다. 본 EXP 스크립트는 원본 PoC를 기반으로 수정된 강화형 원클릭 스크립트입니다. 관련 매개변수를 구성한 후 자동으로 대상 메일박스의 받은 편지함에 위임 추가 및 삭제 작업을 수행하여 보안 부서와 레드팀이 승인된 기업에서 모의 공격 과정을 완료할 수 있도록 합니다. 원본 PoC는 두 개의 스크립...

CVE-2026-100267

In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters...

CVE-2026-100260

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

EUVD-2026-90011

In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters...

CVE-2026-100267

JetBrains YouTrack versions prior to 2026.2.19197 are vulnerable to a Regular Expression Denial of Service (reDoS) attack. The vulnerability exists in the mailbox regex mail-rule filters , where a specially crafted regex can cause significant resource exhaustion. The impact is a high availability...

CVE-2026-100267

In JetBrains YouTrack before 2026.2.19197 reDoS attack was possible via mailbox regex mail-rule filters...

CVE-2026-100260

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

EUVD-2026-90004

In JetBrains YouTrack before 2026.2.18991 mailbox integration allowed authentication after a password reset...

CVE-2026-100260

In JetBrains YouTrack versions prior to 2026.2.18991 , a vulnerability exists in the mailbox integration that allowed authentication to persist or occur after a password reset . The vulnerability carries a CVSS 3.1 score of 5.3 (Medium) , indicating a network-based attack vector with low complexi...

Security Bulletin: This Power System update is being released to address CVE-2026-96264

Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowing arbitrary code to be...

Security Bulletin: This Power System update is being released to address CVE-2026-96262

Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to overflow host firmware runtime attribute storage, allowing arbitrary code to be...

Security Bulletin: This Power System update is being released to address CVE-2026-96265

Summary Power Systems Firmware is affected by a vulnerability in the service processor mailbox interface. An attacker with authenticated service-level access to the FSP can send a specially crafted mailbox message to read or modify arbitrary regions of Hostboot memory, compromising the host...

CVE-2026-82973

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configured, to inject additional IMAP commands into an authenticated upstream mailbox connection via...

CVE-2026-82973 Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configured, to inject additional IMAP commands into an authenticated upstream mailbox connection via...

CVE-2026-82973 Improper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox

Improper neutralization of CRLF sequences in IMAP command construction in psyb0t/docker-mailbox before 0.4.13 allows a remote unauthenticated attacker, when bearer-token authentication is not configured, to inject additional IMAP commands into an authenticated upstream mailbox connection via...