CVE-2020-0688

CVE-2020-0688 Microsoft Exchange Server가 설치 시 고유 키를 제대로 생성하지 못할 때 원격 코드 실행 취약점이 존재합니다. 유효성 검사 키를 알면 사서함이 있는 인증된 사용자가 웹 애플리케이션SYSTEM 권한으로 실행됨에 의해 역직렬화될 임의의 개체를 전달할 수 있습니다. 취약점 정보 이 버그는 ECPExchange Control Panel 구성 요소에서 발견됩니다. 버그의 성격은 매우 간단합니다. 설치별로 무작위로 생성된 키를 사용하는 대신, 모든 Microsoft Exchange Server...

keycloak

CVE-2026-9794 — Keycloak SAML ECP 클라이언트 열거 CVE-2026-9794CVSS 5.3, Medium로 이어진 보안 연구. 요약 Keycloak 2.0부터 26.6.1까지 SAML ECP faultstring 오라클을 통한 비인증 클라이언트 ID 열거. 26.6.3에서 수정됨. 발견 사항 VULN-001: 클라이언트 ID 열거 CVE-2026-9794 ✅ 수정됨 VULN-002: 응답 형식 오라클 — 49022 VULN-003: 버전 핑거프린팅 VULN-004: requesturi를 통한 SSRF ...

CVE-2020-0688_EXP

CVE-2020-0688EXP CVE-2020-0688EXP 자동 트리거 페이로드 python3 CVE-2020-0688EXP.py -h usage: CVE-2020-0688EXP.py -h -s SERVER -u USER -p PASSWORD -c CMD -e optional arguments: -h, --help show this help message and exit -s SERVER, --server ECP Server URL Example: http://ip/owa -u USER, --user USER login...

cve-2020-0688

cve-2020-0688 사용법: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password PASSWO...

cve-2021-26855

cve-2021-26855 GET /ecp/x.png HTTP/1.1 Host: 192.168.170.134 Cookie: X-BEResource=localhost1942062522 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:109.0 Gecko/20100101 Firefox/110.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8...

ecp_slap

ecpslap CVE-2020-0688에 대한 이 개념 증명PoC에는 취약한 온프레미스 Exchange 인스턴스를 스캔하고 악용하기 위한 기능이 포함되어 있습니다. 사용법 scan - 악용에 필요한 쿠키를 얻기 위해 자격 증명과 대상 정보를 제공하고 이를 'cookies.txt'에 저장합니다. 또한 대상 Exchange 서버의 ECPExchange Control Panel 서비스 노출 여부를 확인하고, 이 서비스에 대한 인증을 시도하며, 적절한 VIEWSTATEGENERATOR 값이 일치하는지 확인합니다. 인증에 성공하면...

Information Exposure

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Information Exposure via the SAML ECP endpoint when specially crafted SOAP requests are sent with varying...

CVE-2026-9794: Generation of Error Message Containing Sensitive Information

A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP Security Assertion Markup Language Enhanced Client or Proxy endpoint with varying client IDs. By observing distinct faultstrings in the...

EUVD-2019-13489

Malware in sbrugna...

MAL-2025-9965 Malicious code in @zalastax/nolb-_ecp (npm)

The package @zalastax/nolb-ecp was found to contain malicious code...

Malicious code in @zalastax/nolb-_ecp (npm)

The package @zalastax/nolb-ecp was found to contain malicious code...

Exploit for Improper Authentication in Microsoft

cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...

MAL-2025-767 Malicious code in @epic-ecp/types (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @epic-ecp/types (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11594 Malicious code in ferminet-with-ecp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ee00c3ebd9a9dd393b6184c63072d81baa2ae968a831319453996dcf03d47999 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Malicious code in ferminet-with-ecp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ee00c3ebd9a9dd393b6184c63072d81baa2ae968a831319453996dcf03d47999 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Insufficiently Protected Credentials

SimpleSAMLphp is vulnerable to Insufficiently Protected Credentials. The vulnerability is due to credentials being insecurely saved to the user's session state when the ECP profile is disabled but supported in the Identity Provider's metadata, which could result in an attacker with administrator...

GHSA-7WH8-JRQ7-P27F SimpleSAMLphp exposes credentials in session storage

Background In order to implement support for the SAML Enhanced Client or Proxy profile, the credentials obtained for authentication were stored in the state in order to pass them to the relevant routines. This, however, led to the credentials being recorded in the user’s session, which can be...

SimpleSAMLphp exposes credentials in session storage

Background In order to implement support for the SAML Enhanced Client or Proxy profile, the credentials obtained for authentication were stored in the state in order to pass them to the relevant routines. This, however, led to the credentials being recorded in the user’s session, which can be...

PT-2024-40172 · Unknown · Simplesamlphp

Name of the Vulnerable Software and Affected Versions: SimpleSAMLphp versions 1.16.x up to 1.16.2 Description: The issue arises from the storage of credentials obtained for authentication in the state array, which can be persisted to the user's session and stored in permanent storage. This occurs...