Lucene search
+L

3676 matches found

The Hacker News
The Hacker News
added 2024/02/24 11:49 a.m.31 views

Microsoft Expands Free Logging Capabilities for all U.S. Federal Agencies

Microsoft has expanded free logging capabilities to all U.S. federal agencies using Microsoft Purview Audit irrespective of the license tier, more than six months after a China-linked cyber espionage campaign targeting two dozen organizations came to light. "Microsoft will automatically enable th...

7.5AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/02/23 12:13 p.m.606 views

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnera...

9.8CVSS9.2AI score0.9466EPSS
SaveExploits23
CNVD
CNVD
added 2024/02/23 12:0 a.m.6 views

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2024-34110)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to bypass the protected view protocol, obtain local NTLM credentials, and execute arbitrary code with...

9.8CVSS8AI score0.9466EPSS
SaveExploits23References1
CNVD
CNVD
added 2024/02/23 12:0 a.m.11 views

Microsoft Outlook Elevation of Privilege Vulnerability (CNVD-2024-34109)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Outlook, which can be exploited by an attacker to elevate privileges...

7.1CVSS6.5AI score0.00481EPSS
SaveExploits0References1
CNVD
CNVD
added 2024/02/23 12:0 a.m.57 views

Microsoft Outlook Remote Code Execution Vulnerability (CNVD-2024-34111)

Microsoft Outlook is a suite of e-mail applications from the American company Microsoft. A remote code execution vulnerability exists in Microsoft Outlook due to invalid handling of user input in the preview pane. An attacker can exploit the vulnerability to execute arbitrary code on the system...

8.8CVSS7.9AI score0.11064EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2024/02/20 12:41 p.m.572 views

Exploit for Improper Input Validation in Microsoft

Microsoft Outlook Remote Code Execution Vulnerability PoC Th...

9.8CVSS9.9AI score0.9466EPSS
SaveExploits23
Positive Technologies
Positive Technologies
added 2024/02/20 12:0 a.m.6 views

PT-2024-17955

Name of the Vulnerable Software and Affected Versions SKT Page Builder plugin for WordPress versions up to, and including, 4.1 Microsoft Outlook client affected versions not specified Description The issue allows for unauthorized modification of data due to a missing capability check on the...

4.3CVSS6.8AI score0.00343EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:0 a.m.19 views

The vulnerability of the Microsoft Outlook email client, related to insufficient validation of input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.11064EPSS
SaveExploits1References4
HackRead
HackRead
added 2024/02/17 12:54 p.m.11 views

New MonikerLink Flaw Exposes Outlook Users to Data Theft and Malware

By Waqas The MonikerLink security flaw in Microsoft Outlook allows hackers to execute arbitrary code on the targeted device. This is a post from HackRead.com Read the original post: New MonikerLink Flaw Exposes Outlook Users to Data Theft and Malware...

8.1AI score
SaveExploits0
GithubExploit
GithubExploit
added 2024/02/16 9:10 p.m.239 views

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413 - POC Usage: python CVE-2024-21413.py -...

9.8CVSS9.5AI score0.9466EPSS
SaveExploits30
GithubExploit
GithubExploit
added 2024/02/16 3:17 p.m.847 views

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413 | Microsoft Outlook Remote Code Execution Vulne...

9.8CVSS10AI score0.9466EPSS
SaveExploits23
The Hacker News
The Hacker News
added 2024/02/16 6:49 a.m.55 views

U.S. Government Disrupts Russia-Linked Botnet Engaged in Cyber Espionage

The U.S. government on Thursday said it disrupted a botnet comprising hundreds of small office and home office SOHO routers in the country that was put to use by the Russia-linked APT28 actor to conceal its malicious activities. "These crimes included vast spear-phishing and similar credential...

9.8CVSS9.8AI score0.97408EPSS
SaveExploits18
GithubExploit
GithubExploit
added 2024/02/15 7:57 p.m.625 views

Exploit for Improper Input Validation in Microsoft

CVE-2024-21413 - Expect Script POC Microsoft Outlook Leak cre...

9.8CVSS10AI score0.9466EPSS
SaveExploits30
BDU FSTEC
BDU FSTEC
added 2024/02/15 12:0 a.m.8 views

The vulnerability of the Microsoft Outlook email client, related to errors in processing input data, allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client is related to errors in processing input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by having the user open a specially crafted URL address remotely...

10CVSS8.2AI score0.9466EPSS
SaveExploits23References3
Malwarebytes
Malwarebytes
added 2024/02/14 1:17 p.m.74 views

Update now! Microsoft fixes two zero-days on February Patch Tuesday

Microsoft has issued patches for 73 security vulnerabilities in its February 2024 Patch Tuesday. Among these vulnerabilities are two zero-days that are reportedly being used in the wild. The two zero-day vulnerabilities have already been added to the Cybersecurity & Infrastructure Security Agency...

7.5CVSS8.5AI score0.95443EPSS
SaveExploits25
OpenVAS
OpenVAS
added 2024/02/14 12:0 a.m.29 views

Microsoft Outlook 2016 Remote Code Execution Vulnerability (KB5002543)

This host is missing an important security update according to Microsoft KB5002543 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

8.8CVSS9.4AI score0.11064EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
added 2024/02/14 12:0 a.m.149 views

Security Updates for Outlook C2R (February 2024)

The Microsoft Outlook application installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. CVE-2024-21378 - An elevation of privilege vulnerability. CVE-2024-21402 Note that Nessus has not tested fo...

8.8CVSS8.6AI score0.11064EPSS
SaveExploits1References4
NVD
NVD
added 2024/02/13 6:16 p.m.30 views

CVE-2024-21413

Microsoft Outlook Remote Code Execution Vulnerability...

9.8CVSS9.8AI score0.9466EPSS
SaveExploits23References5
OSV
OSV
added 2024/02/13 6:16 p.m.6 views

CVE-2024-21413

Microsoft Outlook Remote Code Execution Vulnerability...

9.8CVSS5.9AI score0.9466EPSS
SaveExploits23References5
Prion
Prion
added 2024/02/13 6:16 p.m.37 views

Remote code execution

Microsoft Outlook Remote Code Execution Vulnerability...

7.5CVSS7.7AI score0.9466EPSS
SaveExploits23References2Affected Software2
Rows per page
Query Builder