16698 matches found
EUVD-2026-73124
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
CVE-2026-69355
CVE-2026-69355 is a Remote Code Execution vulnerability in Microsoft Exchange Server caused by external control of a file name or path . An authorized attacker with low privileges can exploit this over the network without user interaction, leading to high impact on confidentiality, integrity, and...
EUVD-2026-73178
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
CVE-2026-55007
CVE-2026-55007 is a double free vulnerability in Microsoft Exchange Server that allows an unauthorized, unauthenticated attacker to achieve remote code execution over the network. The vulnerability is rated CVSS 8.1 (HIGH) with a vector of AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H, meaning exploitation...
ECC_Attacks
Known Attacks On Elliptic Curve Cryptography Introduction Introduction To Elliptic Curves Elliptic Curves In The Context Of Cryptography ECC Attacks ECDH Attacks The Order Of The Generator Is Too Small The Order Of The Generator Is A Smooth Number The Order Of The Generator Is Almost A Smooth...
Exploit_CVE-2020-0688
CVE-2020-0688 Exploitation Script for CVE-2020-0688 "Microsoft Exchange default MachineKeySection deserialize vulnerability" Usage: root@kitploit: powershell -exec bypass -file .\CVE-2020-0688.ps1 -xaml -uri Example: This is an example of vulnerability validation by seting header in response...
CVE-2026-20293
creationtimestamp| type| source ---|---|--- 2026-09-08 16:42:46+00:00| seen| https://infosec.exchange/users/AAKL/statuses/117236417536820043...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Microsoft Exchange Server Elevation of Privilege Vulnerability
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network...
Microsoft Exchange Server Spoofing Vulnerability
Server-side request forgery ssrf in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network...
Microsoft Exchange Server Remote Code Execution Vulnerability
Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network...
Microsoft Exchange Server Denial of Service Vulnerability
Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attacker to deny service over a network...
Microsoft Exchange Server Remote Code Execution Vulnerability
External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by babyhack@OPCIA in WordPress Plugin Return Refund and Exchange For WooCommerce versions = 4.6.4...
patch-CVE-2026-15502
Patch: CVE-2026-15502 Vulnerability Details CVE : CVE-2026-15502 Product : Microsoft Exchange Server Description : SSRF leading to RCE Severity : Critical Patch Status: IN-REVIEW...
Exch-CVE-2021-26855_Priv
Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...
CVE-2026-54998-exp
DESCARGO DE RESPONSABILIDAD Este repositorio es solo para fines educativos y de investigación. El autor no es responsable por ningún uso indebido, daño o actividad ilegal causada por el uso de este material. Úselo bajo su propio riesgo. Respete las leyes aplicables y las pautas éticas. Resumen...
exchange_proxylogon
This repository does not have a README...
ExchangeWeaknessTest
ExchangeWeaknessTest This script test the CVE-2021-26855 vulnerability on Exchange Server. Example root@kitploit: python3 ExchangeWeaknessTest.py mydomain.com Licence Licensed under the GPL, version 3...