162985 matches found
Azure-AccessPermissions
Azure-AccessPermissions Easy to use PowerShell script to enumerate access permissions in an Azure Active Directory environment. Background details can be found in the accompanied blog posts: Untangling Azure Active Directory Principals & Access Permissions Untangling Azure Active Directory...
CVE-2023-21716
CVE-2023-21716 — Microsoft Word RTF fonttbl Heap Corruption RCE Severity: Critical CVSS 9.8 Affected: Microsoft Word 2013 / 2016 / 2019 / 2021 unpatched Patch: Microsoft February 2023 Patch Tuesday Author: REGGYRAIDER Vulnerability Overview CVE-2023-21716 is a heap corruption vulnerability in...
CVE-2020-1206-POC
CVE-2020-1206 Uninitialized Kernel Memory Read POC c 2020 ZecOps, Inc. - https://www.zecops.com - Find Attackers' Mistakes POC to check for CVE-2020-1206 / "SMBleed" Expected outcome: Local file containing target computer kernel memory. Intended only for educational and testing in corporate...
CVE-2026-18782-TREX-MES-Uygulamalarinda-SQL-Zafiyeti
TREX-MES-Uygulamalarında-SQLi-Zafiyeti CVE-2026-18782 Genel Bakış TREX MES, üretim sahasından veri toplamak ve yönetmek için kullanılan ticari bir Üretim Yürütme Sistemi MES / Endüstri 4.0 platformudur. Uygulamanın web API'si, istemciden gelen sql parametresi doğrudan arka uçtaki Microsoft SQL...
EUVD-2026-95399
Improper certificate validation in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-95398
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...
EUVD-2026-95397
Deserialization of untrusted data in Microsoft Dataverse allows an unauthorized attacker to execute code over a network...
CVE-2021-28476
CVE-2021-28476: a guest-to-host "Microsoft Hyper-V Remote Code Execution Vulnerability" in vmswitch.sys. This is a proof of concept for CVE-2021-28476 "Hyper-V Remote Code Execution Vulnerability", an arbitrary memory read in vmswitch.sys network virtualization service provider patched by Microso...
cve-2021-27065
I will continue to add any new code or modify existing code based on searching for stolen data If you have been compromised these scripts will by no means fix it for you! These provide no benifit to you other than you now knowing the extent of what has happened to your system With that being said...
Exch-CVE-2021-26855
Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...
CVE-2021-28480_HoneyPoC3
ExchangeRCE-CVE-2021-28480 THIS IS NOT A REAL EXPLOIT IT IS A HONEYPOC https://blog.zsec.uk/cve-2020-1350-honeypoc/ PoC for exploiting RCE in Exchange CVEs: CVE-2021-28480, CVE-2021-28481, CVE-2021-28482 and CVE-2021-28483. Usage Achieves RCE on Exchange Servers To run, from a Linux host: chmod +...
proxylogon-exploit
proxylogon Proof-of-concept exploit for CVE-2021-26855 and CVE-2021-27065, which allows for unauthenticated remote code execution on Microsoft Exchange as described in the following resources: https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers...
CVE-2017-11882
CVE-2017-11882 Article Link Office Remote Code Execution Vulnerability Hidden for 17 Years CVE-2017-11882 http://www.cnblogs.com/Hi-blog/p/7878054.html...
CVE-2021-26855
CVE-2021-26855 CVE-2021-26855, also known as Proxylogon, is a server-side request forgery SSRF vulnerability in Exchange that allows an attacker to send arbitrary HTTP requests and authenticate as the Exchange server. According to Orange Tsai, the researcher who discovered the vulnerabilities,...
CVE-2020-0688
CVE-2020-0688 Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability" Usage: powershell -exec bypass -file .\CVE-2020-0688.ps1 -xaml -uri Example: This is an example of vulnerability validation by seting header in response. powershell -exec...
nse-exchange
nse-exchange Nmap NSE scripts to check against exchange vulnerability CVE-2022-41082. NSE scripts check most popular exposed services on the Internet. It is basic script which checks if virtual patching works. Examples Since, there is no patch currently - only workarounds are checked if host is...
CVE-2017-0199-Fix
CVE-2017-0199 Fix Remove CVE-2017-0199's ability to execute code by changing the default handler for .hta files. The default handler for files invoked through OLE2 COM Objects is stored separately from the local system's default application and can only be changed through the registry. Basic Logi...
CVE-2026-94510
Authorization bypass through user-controlled key in Microsoft Bookings allows an unauthorized attacker to elevate privileges over a network...