Microsoft Exchange Server Remote Code Execution Vulnerability

External control of file name or path in Microsoft Exchange Server allows an authorized attacker to execute code over a network...

WordPress Return Refund and Exchange For WooCommerce plugin <= 4.6.4 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by babyhack@OPCIA in WordPress Plugin Return Refund and Exchange For WooCommerce versions = 4.6.4...

patch-CVE-2026-15502

Patch: CVE-2026-15502 Vulnerability Details CVE : CVE-2026-15502 Product : Microsoft Exchange Server Description : SSRF leading to RCE Severity : Critical Patch Status: IN-REVIEW...

Exch-CVE-2021-26855_Priv

Exch-CVE-2021-26855 ProxyLogon is the formally generic name for CVE-2021-26855, a vulnerability on Microsoft Exchange Server that allows an attacker bypassing the authentication and impersonating as the admin. We have also chained this bug with another post-auth arbitrary-file-write vulnerability...

CVE-2026-54998-exp

DESCARGO DE RESPONSABILIDAD Este repositorio es solo para fines educativos y de investigación. El autor no es responsable por ningún uso indebido, daño o actividad ilegal causada por el uso de este material. Úselo bajo su propio riesgo. Respete las leyes aplicables y las pautas éticas. Resumen...

exchange_proxylogon

This repository does not have a README...

ExchangeWeaknessTest

ExchangeWeaknessTest This script test the CVE-2021-26855 vulnerability on Exchange Server. Example root@kitploit: python3 ExchangeWeaknessTest.py mydomain.com Licence Licensed under the GPL, version 3...

KLA91270 Multiple vulnerabilities in Microsoft Server Software

Multiple vulnerabilities were found in Microsoft Server Software. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, perform cross-site scripting attack, spoof user...

Microsoft Exchange Server (September 2026)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Double free in Microsoft Exchange Server allows an unauthorized attacker to execute code over a network. CVE-2026-55007 - External control of file name...

PT-2026-87193

🚨 On-prem Exchange has another “please patch immediately” moment: CVE-2026-55007 lets unauthenticated attackers execute code remotely. Double-free memory bugs: free once, panic twice. https://t.co/0McWeFeyWd MicrosoftSecurity Msrc Cve202655007 https://t.co/4SZ9ynrPay...

CVE-2026-71300

CVE-2026-71300 — camel-atmosphere-websocket dispatch header injection Runnable proof-of-concept reproducer for the Apache Camel vulnerability where the camel-atmosphere-websocket producer selects its WebSocket recipients from websocket. Exchange headers whose names fall outside the Camel namespac...

CVE-2026-62911

CVE-2026-62911 Pre-auth RCE on Microsoft Exchange Server. No credentials needed. Orange Tsai DEVCORE used this at Pwn2Own Berlin 2026 as part of a 3-bug chain. $200,000 prize, full SYSTEM takeover. What it does Exchange exposes MailboxReplicationProxyService MRSProxy on two paths. One of them sit...

CVE-2020-0688

CVE-2020-0688 Scanner This is a little dirty Script to Check for vulnerables Exchange Servers by CVE-2020-0688 It's written ugly and in PHP. Caution: It only checks if you have the actual CU update installed. That doesn't mean that you have installed the bugfix patch! Requirements You need php-cl...

http-vuln-CVE-2022-41082

UPDATED VERSION ALLOWS FOR HTTPS CHECK AS WELL exchange-vuln-check.nse FOR HTTP: nmap -p80 --script exchange-vuln-check.nse FOR HTTPS: nmap -p443 --script exchange-vuln-check.nse SAVE RESULTS IN A FILE nmap -p80 --script exchange-vuln-check.nse -oN results.txt http-vuln-CVE-2022-41082 Microsoft...

CVE-2021-26855-Scanner

CVE-2021-26855-Scanner Scanner and PoC for CVE-2021-26855 Credit to GreyOrder for the PoC. Reuploading for convenience and because Microsoft took it down at least once : Example of usage for mass scanning: shodan download --limit 12345 exchange "http.component:'outlook web+app'" gzip -d...

CVE-2021-41349

CVE-2021-41349 Exploit! Microsoft Exchange Server Spoofing Vulnerability Exploit! Step To Reproduce! 1. Make A HTTP Request Like This & Capture On Burp 2. Make A CSRF PoC Of That Request & Save The HTML Output Into A File 3. Open The Saved Output In A Browser & Boom Or Use The HTML File Given &...

CVE-2020-0688

CVE-2020-0688 Microsoft Exchange Server Fixed Cryptographic Key Remote Code Execution RCE Instead of having randomly-generated keys on a per-installation basis, all installations of Microsoft Exchange Server have the same validationKey and decryptionKey values in web.config. Thus, an authenticate...

CVE-2023-32031

CVE-2023-32031 CVE-2023-32031 MS Exchange PowerShell backend RCE Reference https://littlepwner.github.io/posts/cve-2023-32031-ms-exchange-powershell-backend-rce/...

CVE-2021-26855-SSRF-Exchange

CVE-2021-26855-SSRF-Exchange CVE-2021-26855 SSRF Exchange Server Shodan https://beta.shodan.io/search?query=http.component%3A%22outlook+web+app%22 https://beta.shodan.io/search?query=http.html%3A%22%2Fowa%22 Fofa https://fofa.so/result?q=title%3D%22Outlook+Web+App%22...

CVE-2021-26855-d

Basic usage:python owamails.py -u -l -p optional arguments: root@kitploit: -h, --help show this help message and exit -u URL, --url URL Url, provide schema and not final / eg https://example.org -l LIST, --list LIST Users mailbox list -p PATH, --path PATH Path to write emails in xml format -f FQD...