CVE-2026-62911

CVE-2026-62911 RCE pre-autenticazione su Microsoft Exchange Server. Nessuna credenziale necessaria. Orange Tsai DEVCORE ha sfruttato questa vulnerabilità al Pwn2Own Berlin 2026 come parte di una catena di 3 bug. Premio di 200.000 dollari, compromissione totale come SYSTEM. Cosa fa Exchange espone...

http-vuln-CVE-2022-41082

LA VERSIONE AGGIORNATA CONSENTE ANCHE IL CONTROLLO HTTPS exchange-vuln-check.nse PER HTTP: nmap -p80 --script exchange-vuln-check.nse PER HTTPS: nmap -p443 --script exchange-vuln-check.nse SALVA I RISULTATI IN UN FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt...

CVE-2021-41349

CVE-2021-41349 Exploit! Microsoft Exchange Server Spoofing-Schwachstellen-Exploit! Schritte zur Reproduktion! 1. Machen Sie eine HTTP-Anfrage wie diese und fangen Sie sie im Burp ab 2. Erstellen Sie einen CSRF-PoC dieser Anfrage und speichern Sie die HTML-Ausgabe in einer Datei 3. Öffnen Sie die...

HAFNIUM-IOC

HAFNIUM-IOC Hafnium-IOC è un semplice script PowerShell che viene eseguito sui server Exchange per identificare indicatori di compromissione IOC dall'attività di Hafnium rilasciata da Mircosoft il 02-03-2021 https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/. L...

exchange-scanner

Microsoft Exchange Server Scanner Beschreibung Dieses Tool scannt mehrere gängige öffentlich erreichbare Dienste auf einem Zielhost, um Microsoft Exchange Server zu erkennen und, wenn möglich, dessen Softwareversion zu identifizieren. Hierzu verwendet es die folgenden Techniken: Fingerprinting vo...

CVE-2026-19900

creationtimestamp| type| source ---|---|--- 2026-08-15 17:59:58+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mt5auaw4h526 2026-08-16 02:45:25+00:00| seen| https://bsky.app/profile/pmloik.bsky.social/post/3mt667u2kn52i 2026-08-18 06:00:03+00:00| confirmed|...

CVE-2026-62783

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:57+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:15:55+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:53+00:00| seen|...

CVE-2026-61366

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:53+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:46:09+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:50+00:00| seen|...

CVE-2026-54984

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:45+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:02+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:42+00:00| seen|...

CVE-2026-62703

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:41+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:46:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:38+00:00| seen|...

CVE-2026-65778

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:30+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:18:01+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:27+00:00| seen|...

CVE-2026-68812

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:05+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:01+00:00| seen|...

CVE-2026-66802

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:49+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:21:48+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:00:45+00:00| seen|...

CVE-2026-65813

Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62911

Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...

CVE-2026-62913

Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

CVE-2026-62912

Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network...

CVE-2026-62915

Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network...

CVE-2026-62914

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...

CVE-2026-62910

Improper control of resource identifiers 'resource injection' in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...