Lucene search
+L

3049 matches found

CNNVD
CNNVD
added 2023/06/13 12:00 a.m.11 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8CVSS8.4AI score0.25002EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/06/13 12:00 a.m.13 views

Microsoft Exchange Server 安全漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8.8CVSS8.4AI score0.8145EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/06/13 12:00 a.m.212 views

Security Updates for Microsoft Exchange Server (June 2023)

The Microsoft Exchange Server installed on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities as referenced in the Jun, 2023 security bulletin. - Microsoft Exchange Server Remote Code Execution Vulnerability CVE-2023-28310, CVE-2023-32031 Note tha...

8.8CVSS8.9AI score0.8145EPSS
SaveExploits0References4
CNVD
CNVD
added 2023/06/06 12:00 a.m.31 views

Command Execution Vulnerability in 4A Unified Security Control Platform of Beijing Qixingchen Information Security Technology Co.

Beijing Qixingchen Information Security Technology Co., Ltd. is an enterprise mainly engaged in science and technology promotion and application service industry. A command execution vulnerability exists in the 4A Unified Security Control Platform of Beijing Qixingchen Information Security...

7.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/05/25 1:39 p.m.111 views

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

An unnamed government entity associated with the United Arab Emirates U.A.E. was targeted by a likely Iranian threat actor to breach the victim's Microsoft Exchange Server with a "simple yet effective" backdoor dubbed PowerExchange. According to a new report from Fortinet FortiGuard Labs, the...

7.6AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/05/25 1:39 p.m.32 views

New PowerExchange Backdoor Used in Iranian Cyber Attack on UAE Government

An unnamed government entity associated with the United Arab Emirates U.A.E. was targeted by a likely Iranian threat actor to breach the victim's Microsoft Exchange Server with a "simple yet effective" backdoor dubbed PowerExchange. According to a new report from Fortinet FortiGuard Labs, the...

7.5AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/03/25 6:13 a.m.105 views

Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

Microsoft on Friday shared guidance to help customers discover indicators of compromise IoCs associated with a recently patched Outlook vulnerability. Tracked as CVE-2023-23397 CVSS score: 9.8, the critical flaw relates to a case of privilege escalation that could be exploited to steal NT LAN...

9.8CVSS9AI score0.97408EPSS
SaveExploits18
The Hacker News
The Hacker News
added 2023/03/25 6:13 a.m.7 views

Microsoft Warns of Stealthy Outlook Vulnerability Exploited by Russian Hackers

Microsoft on Friday shared guidance to help customers discover indicators of compromise IoCs associated with a recently patched Outlook vulnerability. Tracked as CVE-2023-23397 CVSS score: 9.8, the critical flaw relates to a case of privilege escalation that could be exploited to steal NT LAN...

9.8CVSS7.2AI score0.97408EPSS
SaveExploits18
Microsoft Secure
Microsoft Secure
added 2023/03/24 6:30 p.m.72 views

Guidance for investigating attacks using CVE-2023-23397

This guide provides steps organizations can take to assess whether users have been targeted or compromised by threat actors exploiting CVE-2023-23397. A successful exploit of this vulnerability can result in unauthorized access to an organization’s environment by triggering a Net-NTLMv2 hash leak...

9.6AI score0.97408EPSS
SaveExploits18
Microsoft Malware Protection
Microsoft Malware Protection
added 2023/03/24 6:30 p.m.326 views

Guidance for investigating attacks using CVE-2023-23397

This guide provides steps organizations can take to assess whether users have been targeted or compromised by threat actors exploiting CVE-2023-23397. A successful exploit of this vulnerability can result in unauthorized access to an organization’s environment by triggering a Net-NTLMv2 hash leak...

9.6AI score0.97408EPSS
SaveExploits18
The Hacker News
The Hacker News
added 2023/03/10 2:02 p.m.101 views

New Version of Prometei Botnet Infects Over 10,000 Systems Worldwide

An updated version of a botnet malware called Prometei has infected more than 10,000 systems worldwide since November 2022. The infections are both geographically indiscriminate and opportunistic, with a majority of the victims reported in Brazil, Indonesia, and Turkey. Prometei, first observed i...

1.9AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/03/06 12:00 a.m.12 views

The vulnerability of the Microsoft Exchange Server mail server, related to errors in code generation, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to errors in code generation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

9CVSS8.1AI score0.04058EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/03 12:00 a.m.14 views

The vulnerability of Microsoft Exchange Server’s mail server, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server is related to incorrect code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

8.3CVSS7.9AI score0.0787EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/03/03 12:00 a.m.13 views

The vulnerability of Microsoft Exchange Server’s mail server, related to improper code generation, allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Exchange Server lies in improper code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted request remotely...

9CVSS8.1AI score0.8202EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2023/02/27 12:00 a.m.19 views

The vulnerability of Microsoft Exchange Server servers, related to the use of dangerous methods or functions, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Exchange Server servers is related to the use of dangerous methods or functions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

9CVSS8.5AI score0.62104EPSS
SaveExploits0References5
hivepro
hivepro
added 2023/02/17 12:05 p.m.15 views

ProxyShellMiner Exploits Windows Exchange Server Vulnerabilities for Cryptocurrency Mining

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary ProxyShellMiner exploits Windows Exchange servers vulnerabilities, which are used to gain unauthorized access and compromise an organization, leading to the installation of cryptocurrency miners...

2.8AI score
SaveExploits0
CNVD
CNVD
added 2023/02/17 12:00 a.m.41 views

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-51370)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8.8CVSS8AI score0.8202EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/17 12:00 a.m.37 views

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-51371)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8.8CVSS8AI score0.04058EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/17 12:00 a.m.54 views

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-51372)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server, which can be exploited...

8.8CVSS8AI score0.62104EPSS
SaveExploits0References1
CNVD
CNVD
added 2023/02/17 12:00 a.m.59 views

Microsoft Exchange Server Remote Code Execution Vulnerability (CNVD-2023-18284)

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. A remote code execution vulnerability exists in Microsoft Exchange Server. An attacker can exploi...

7.2CVSS7.3AI score0.0787EPSS
SaveExploits0References1
Rows per page
Query Builder