CVE-2020-0688_EXP

CVE-2020-0688EXP CVE-2020-0688EXP Auto trigger payload python3 CVE-2020-0688EXP.py -h usage: CVE-2020-0688EXP.py -h -s SERVER -u USER -p PASSWORD -c CMD -e optional arguments: -h, --help show this help message and exit -s SERVER, --server ECP Server URL Example: http://ip/owa -u USER, --user USER...

cve-2021-26855

cve-2021-26855 GET /ecp/x.png HTTP/1.1 Host: 192.168.170.134 Cookie: X-BEResource=localhost1942062522 User-Agent: Mozilla/5.0 Windows NT 10.0; Win64; x64; rv:109.0 Gecko/20100101 Firefox/110.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8...

cve-2020-0688

cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...

CVE-2020-0688

CVE-2020-0688 A remote code execution vulnerability exists in Microsoft Exchange Server when the server fails to properly create unique keys at install time. Knowledge of a the validation key allows an authenticated user with a mailbox to pass arbitrary objects to be deserialized by the web...

keycloak

CVE-2026-9794 — Keycloak SAML ECP Client Enumeration Security research leading to CVE-2026-9794 CVSS 5.3, Medium. Summary Unauthenticated client ID enumeration via SAML ECP faultstring oracle in Keycloak 2.0 through 26.6.1. Fixed in 26.6.3. Findings VULN-001: Client ID enumeration CVE-2026-9794 ✅...

ecp_slap

ecpslap This proof-of-concept for CVE-2020-0688 includes functions for the scanning and exploitation of a vulnerable on-prem Exchange instance. Usage scan - provide credentials and target information to obtain cookies required for exploitation and saves them to 'cookies.txt'. Also checks for...

Exchange OWA Detection

Detects Outlook Web App and Exchange Control Panel endpoints. !/usr/bin/env python3 -- coding: utf-8 -- """Detect Microsoft Exchange OWA/ECP exposure.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = "name": "Exchange OWA...

Information Exposure

Overview org.keycloak:keycloak-services is an open source identity and access management solution for modern applications and services. Affected versions of this package are vulnerable to Information Exposure via the SAML ECP endpoint when specially crafted SOAP requests are sent with varying...

CVE-2026-9794: Generation of Error Message Containing Sensitive Information

A flaw was found in Keycloak. A remote, unauthenticated attacker can exploit this vulnerability by sending specially crafted SOAP requests to the SAML ECP Security Assertion Markup Language Enhanced Client or Proxy endpoint with varying client IDs. By observing distinct faultstrings in the...

PT-2025-48503

An issue was discovered in Arm Mbed TLS before 2.23.0. A side channel allows recovery of an ECC private key, related to mbedtls ecp check pub priv, mbedtls pk parse key, mbedtls pk parse keyfile, mbedtls ecp mul, and mbedtls ecp mul restartable...

EUVD-2019-13489

Malware in sbrugna...

MAL-2025-9965 Malicious code in @zalastax/nolb-_ecp (npm)

The package @zalastax/nolb-ecp was found to contain malicious code...

Malicious code in @zalastax/nolb-_ecp (npm)

The package @zalastax/nolb-ecp was found to contain malicious code...

Exploit for Improper Authentication in Microsoft

cve-2020-0688 Usage: usage: cve-2020-0688.py -h -s SERVER -u USER -p PASSWORD -c CMD optional arguments: -h, --help show this help message and exit -s SERVER, --server SERVER ECP Server URL Example: http://ip/owa -u USER, --user USER login account Example: domain\user -p PASSWORD, --password...

Malicious code in @epic-ecp/types (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-767 Malicious code in @epic-ecp/types (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in ferminet-with-ecp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ee00c3ebd9a9dd393b6184c63072d81baa2ae968a831319453996dcf03d47999 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

MAL-2024-11594 Malicious code in ferminet-with-ecp (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ee00c3ebd9a9dd393b6184c63072d81baa2ae968a831319453996dcf03d47999 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

Insufficiently Protected Credentials

SimpleSAMLphp is vulnerable to Insufficiently Protected Credentials. The vulnerability is due to credentials being insecurely saved to the user's session state when the ECP profile is disabled but supported in the Identity Provider's metadata, which could result in an attacker with administrator...

GHSA-7WH8-JRQ7-P27F SimpleSAMLphp exposes credentials in session storage

Background In order to implement support for the SAML Enhanced Client or Proxy profile, the credentials obtained for authentication were stored in the state in order to pass them to the relevant routines. This, however, led to the credentials being recorded in the user’s session, which can be...