16404 matches found
CVE-2026-63586
creationtimestamp| type| source ---|---|--- 2026-08-25 08:55:44+00:00| seen| https://infosec.exchange/users/certvde/statuses/117155308741154477 2026-08-25 08:55:50+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3mtvh4etatnk2 2026-08-25 09:47:22+00:00| seen|...
Microsoft Exchange Server - Cross-Site Scripting
Microsoft Exchange Server, or OWA, is vulnerable to a cross-site scripting vulnerability in refurl parameter of frowny.asp. id: CVE-2021-31195 info: name: Microsoft Exchange Server - Cross-Site Scripting author: infosecsanyam severity: medium description: Microsoft Exchange Server, or OWA, is...
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28480 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...
Microsoft Exchange - Authentication Bypass
Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...
Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting
Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...
Microsoft OWA Exchange Server 2003 - 'redir.asp' Open Redirection
Open redirect vulnerability in exchweb/bin/redir.asp in Microsoft Outlook Web Access OWA for Exchange Server 2003 SP2 aka build 6.5.7638 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the URL parameter. id: CVE-2008-1547 info: name:...
Microsoft Exchange - Pre-Auth SSRF / ACL Bypass (ProxyNotFound)
Microsoft Exchange Server contains a remote code execution caused by improper input validation in the server component, letting remote attackers execute arbitrary code, exploit requires network access to the server. id: CVE-2021-28481 info: name: Microsoft Exchange - Pre-Auth SSRF / ACL Bypass...
EEF-CVE-2026-75542 OAuth token exchange grants repository scopes for organizations the principal cannot access
Summary Incorrect Authorization vulnerability in the OAuth token endpoint in hexpm hexpm allows an API key holding the repositories permission to read another organization's private packages. When an API key is exchanged for a token through the OAuth client\credentials grant,...
CVE-2026-19685
creationtimestamp| type| source ---|---|--- 2026-08-24 18:08:36+00:00| seen| https://bsky.app/profile/stemshop.bsky.social/post/3mttvjzjd6o2t 2026-08-24 18:30:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mttwqgvsaf2e 2026-08-24 18:50:26+00:00| seen|...
CVE-2026-77995
creationtimestamp| type| source ---|---|--- 2026-08-24 13:30:28+00:00| seen| https://infosec.exchange/users/offseq/statuses/117150726686144491 2026-08-24 13:30:29+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mttfyp326q2f 2026-08-24 15:50:06+00:00| seen|...
CVE-2026-78251
creationtimestamp| type| source ---|---|--- 2026-08-24 07:30:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117149310942090116 2026-08-24 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtsruvafgr2c 2026-08-24 08:17:44+00:00| seen|...
CVE-2026-78050
creationtimestamp| type| source ---|---|--- 2026-08-22 23:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtphorg3bo2p 2026-08-23 00:00:35+00:00| seen| https://infosec.exchange/users/offseq/statuses/117141879828855162 2026-08-23 00:00:37+00:00| seen|...
CVE-2026-78003
creationtimestamp| type| source ---|---|--- 2026-08-22 09:00:25+00:00| seen| https://infosec.exchange/users/offseq/statuses/117138340214723722 2026-08-22 09:00:26+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mtnvxy3zpx2c 2026-08-22 09:03:42+00:00| seen|...
Microsoft Exchange Server SSRF Vulnerability
This vulnerability is part of an attack chain that could allow remote code execution on Microsoft Exchange Server. The initial attack requires the ability to make an untrusted connection to Exchange server port 443. Other portions of the chain can be triggered if an attacker already has access or...
EUVD-2026-63689
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801
Server-side request forgery ssrf in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network...
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
...
CVE-2026-65801 Microsoft Exchange Online Elevation of Privilege Vulnerability
...
CVE-2026-65801
CVE-2026-65801 is a critical (CVSS 3.1: 10.0) server-side request forgery (SSRF) vulnerability in Microsoft Exchange Online that allows an unauthorized, unauthenticated attacker to elevate privileges over a network . The attack requires no user interaction, no prior privileges, and has low comple...
