1239 matches found
msprobe
msprobe About Installing Usage Examples Coming Soon Acknowledgements About Finding all things on-prem Microsoft for password spraying and enumeration. The tool will used a list of common subdomains associated with your target apex domain to attempt to discover valid instances of on-prem Microsoft...
Carnivore
Released as open source by NCC Group Plc - https://www.nccgroup.com/ Developed by Chris Nevin, [email protected] https://www.github.com/nccgroup/carnivore Released under the AGPL license https://www.github.com/nccgroup/carnivore/license Carnivore - V.1.0.4 Microsoft External Assessment Tool...
msprobe
msprobe Acerca de Instalación Uso Ejemplos Próximamente Agradecimientos Acerca de Encontrando todo lo relacionado con Microsoft on-premises para pulverización de contraseñas y enumeración. La herramienta utilizará una lista de subdominios comunes asociados con tu dominio apex de destino para...
The vulnerability of the Skype for Business Server’s instant messaging program, related to errors in verifying cryptographic signatures, allows attackers to carry out spoofing attacks.
The vulnerability of the Skype for Business Server’s instant messaging program is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to carry out spoofing attacks remotely...
The vulnerability of the Skype for Business Server’s instant messaging program, related to the possibility of using client-side authentication, allows attackers to carry out spoofing attacks.
The vulnerability of the Skype for Business Server’s instant messaging program relates to the possibility of using client-side authentication. Exploiting this vulnerability could allow attackers to carry out spoofing attacks remotely...
The vulnerability of the Skype for Business Server’s instant messaging program, related to insufficient validation of requests on the server side, allows attackers to disclose protected information.
The vulnerability of the Skype for Business Server’s instant messaging program is related to insufficient validation of requests on the server side. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...
The vulnerability of the Skype for Business Server’s instant messaging program, related to a countable loss of significance, allows a perpetrator to trigger a service failure.
The vulnerability of the Skype for Business Server’s instant messaging program is related to a countable loss of significance. Exploiting this vulnerability could allow a malicious actor to cause service failures...
CVE-2026-12749 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2026-12749 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2026-12750 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2026-12750 Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for August 2026.
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2026-12751: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
IBM Cloud Pak for Business Automation is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site...
CVE-2026-12750: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2026-12749: Improper Neutralization of Input During Web Page Generation
IBM Cloud Pak for Business Automation is vulnerable to stored cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...
CVE-2026-11864: Improper Neutralization of Data within XPath Expressions
IBM Cloud Pak for Business Automation 26.0.0 through 26.0.0 Interim Fix 001, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 008, and 24.0.0 through 24.0.0 Interim Fix 009 is vulnerable to an XPath injection vulnerability, which could allow an authenticated attacker to...
CVE-2026-12759: Uncontrolled Resource Consumption
IBM Cloud Pak for Business Automation could allow an authenticated user to cause a denial of service due to uncontrolled resource consumption...
CVE-2026-12758: Missing Authorization
IBM Cloud Pak for Business Automation could allow a remote attacker to bypass authorization and invoke restricted endpoints due to improper validation of HTTP headers...
Skype for Business (September 2026)
The Microsoft Skype for Business installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - External control of file name or path in Skype for Business allows an unauthorized attacker to execute code over a network. CVE-2026-66302 -...
The vulnerability of the Skype for Business Server’s instant messaging program, related to improper external management of file names or paths, allows a hacker to execute arbitrary code.
The vulnerability of the Skype for Business Server’s instant messaging program is related to improper external management of the file name or path. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
