CompMgmtLauncher_DLL_UACBypass

CompMgmtLauncher & Sharepoint: перехват порядка поиска DLL, обход UAC/постоянство через OneDrive CompMgmtLauncher.exe подвержен уязвимости перехвата порядка поиска DLL. Бинарный файл выполняет поиск в пользовательском окружении для DLL-файлов Secur32.dll или Wininet.dll, когда установлен OneDrive...

M365Pwned

M365Pwned Инструменты Red Team для эксплуатации Microsoft 365 через Microsoft Graph API. Два инструмента с графическим интерфейсом WinForms для перечисления, поиска и эксфильтрации данных из сред M365 с использованием токенов OAuth на уровне приложения — без взаимодействия с пользователем...

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

KnockKnock

ЭТОТ РЕПОЗИТОРИЙ БЫЛ АРХИВИРОВАН Чтобы просмотреть последнюю версию KnockKnock или отправить issue, обратитесь к https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Пожалуйста, убедитесь, что вы действительно используете README. Предназначен для проверки потенциальных имён пользователей...

onedrive_user_enum

onedriveuserenum v2.10 перечисление действительных пользователей OneDrive Полное описание техники перечисления и OneDrive enum см. в блоге здесь: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ Если вы ищете старую версию OneDrive Enum без базы данных, её можно найти здесь:...

OneDrive-UDC2

OneDrive UDC2 OneDrive를 전송 계층으로 사용하는 Cobalt Strike 사용자 정의 C2 채널입니다. 필요한 것 OneDrive for Business를 사용하는 사용자가 있는 Microsoft Entra ID 테넌트. Files.ReadWrite.All 애플리케이션 권한이 있는 앱 등록. 설정 1. 애플리케이션 등록 Azure Portal에서 App registrations 로 이동하여 새 앱을 만듭니다: Account type: Single tenant. Redirect URI: 비워 둡니다. 개요...

CVE-2026-52782

abraxaslabs.tech · github.com/abraxas · @abraxasnull · CVE-2026-52782 CVE-2026-52782 OpenProject 17.3.2 — OpenProject GmbH OpenProject는 오픈소스 웹 기반 프로젝트 관리 소프트웨어입니다. 17.3.3 및 17.4.1 이전 버전에서 프로젝트 스토리지 설정을 통한 IDOR로 인해 프로젝트 관리자가 다른 프로젝트의 관리형 Nextcloud 또는 OneDrive 폴더를 탈취할 수 있습니다. | ---|--- CVE|...

SnaffPoint

SnaffPoint Что это SnaffPoint — это инструмент для пентестеров, которым не хватает сладости в этом мире. Он должен помочь вам находить конфиденциальные файлы, доступные в SharePoint Online и в общих файлах OneDrive вашей компании или вашего заказчика. Как это работает На самом деле есть 2...

CVE-2026-93986

A flaw was found in rclone. This path traversal vulnerability allows a remote attacker to craft special names in server and third-party listing responses. These crafted names, containing directory traversal sequences, could potentially enable writing outside the intended destination directory...

SUSE CVE-2026-55502

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

GO-2026-6101 Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials in github.com/cloudreve/Cloudreve

Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials in github.com/cloudreve/Cloudreve. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive report...

Microsoft OneDrive for MacOS < 26.095.0519.0003 Elevation of Privilege

The version of Microsoft OneDrive for MacOS installed on the remote macOS host is prior to 26.095.0519.0003. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

CVE-2026-65680 : Microsoft OneDrive for MacOS is affected by an Elevation of Privilege vulnerability. The issue arises from improper link resolution before file access (“link following”), allowing an authorized local attacker to escalate privileges. Affected component is OneDrive for MacOS; root ...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

EUVD-2026-56826

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...