ProxyLogon-CVE-2021-26855

ProxyLogon-CVE-2021-26855 Exploit RCE para a vulnerabilidade ProxyLogon no Microsoft Exchange Funciona com Python 3.9 Uso: python proxylogonrce.py target email command Exemplo: python proxylogonrce.py 192.168.227.137 [email protected] whoami Todos os créditos vão para a DEVCORE, baseado em...

CVE-2024-21413-Microsoft-Outlook-Moniker-Link-Vulnerability

CVE-2024-21413 – Microsoft Outlook Moniker-Link-Schwachstelle Überblick Dieses Repository dokumentiert meine praktische Analyse von CVE-2024-21413 Moniker Link , einer kritischen Microsoft-Outlook-Schwachstelle, die Protected View umgeht, um Windows-NetNTLMv2-Anmeldeinformationen über die...

MSTeams---Vulnerability---Remediation

🛡️ Correzione della CVE-2025-53783: RCE in Microsoft Teams 📝 Panoramica del Progetto Questo progetto dimostra un Workflow di gestione delle vulnerabilità. Utilizzando una VM Azure, ho identificato una vulnerabilità di "Esecuzione Remota di Codice" RCE ad alta gravità in Microsoft Teams, ne ho...

CVE-2017-8641_chakra_Js_GlobalObject

Beschreibung mehr von der Seite CVE !!Yes Microsoft-Browser in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 und Windows RT 8.1, Windows Server 2012 und R2, Windows 10 Gold, 1511, 1607, 1703 und Windows Server 2016 erlauben einem Angreifer die Ausführung von beliebigem Code im...

ZeroPoint

ZeroPoint.ps1 ⚠ Ein defensives PowerShell-Dienstprogramm zur Erkennung und Eindämmung der Ausnutzung der CVE-2025-53770 Zero-Day-Sicherheitslücke in Microsoft SharePoint Server. 🔍 Was es tut Dieses PowerShell-Skript wurde entwickelt, um: Erkennen von Kompromittierungsindikatoren, wie z. B...

CVE-2026-50656-rogueplanet-validation

Rapporto di Convalida Proof of Concept RoguePlanet per Microsoft Defender Scopo e ambito del rapporto Questo rapporto riguarda la convalida del Proof of Concept RoguePlanet descritto pubblicamente e relativo a Microsoft Defender. La tecnica descritta è stata presentata dai media il 10 giugno 2026...

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook- Il 13 febbraio 2024 Microsoft ha pubblicato una grave vulnerabilità di sicurezza in Microsoft Outlook, identificata come CVE-2024-21413, nota come Moniker Link Vulnerability. La vulnerabilità consente a un attaccante di bypassare il meccanismo...

CVE-2024-43451-POC

Descrição Nome : CVE-2024-43451 Pontuação CVSSv3 : 6.5 Versões Afetadas : Todas as versões do Microsoft Windows anteriores ao Patch de Novembro de 2024 CVE-2024-43451 é uma vulnerabilidade de dia zero no Microsoft Windows que permite que atacantes capturem hashes de senha NTLMv2 com interação...

CVE-2023-23397-PoW

CVE-2023-23397-PoW Prova di lavoro di CVE-2023-23397 per l'applicazione client Microsoft Outlook vulnerabile. Solo per scopi educativi e di ricerca. Anteprima di CVE-2023-23397 Questa CVE mira a recuperare l'hash NetNTLM dell'utente autenticato dal client Microsoft Outlook versione 2016, ad...

Microsoft Exchange Server - Cross-Site Scripting

Microsoft Exchange Server, or OWA, is vulnerable to a cross-site scripting vulnerability in refurl parameter of frowny.asp. id: CVE-2021-31195 info: name: Microsoft Exchange Server - Cross-Site Scripting author: infosecsanyam severity: medium description: Microsoft Exchange Server, or OWA, is...

Microsoft Windows 'HTTP.sys' - Remote Code Execution

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability." id: CVE-2015-1635 info: name: Microsoft...

Microsoft SharePoint Server - Authentication Bypass

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. id: CVE-2025-49706 info: name: Microsoft SharePoint Server - Authentication Bypass author: daffainfo severity: medium description: | Improper authentication in Microsoft Offi...

Microsoft Exchange - Authentication Bypass

Microsoft Exchange Server Information Disclosure Vulnerability. This vulnerability enables an attacker to bypass authentication and gain access to the Exchange Server's internal. id: CVE-2021-33766 info: name: Microsoft Exchange - Authentication Bypass author: daffainfo severity: high description...

Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting

Microsoft Exchange Server is vulnerable to a spoofing vulnerability. Be aware this CVE ID is unique from CVE-2021-42305. id: CVE-2021-41349 info: name: Microsoft Exchange Server Pre-Auth POST Based Cross-Site Scripting author: rootxharsh,iamnoooob severity: medium description: Microsoft Exchange...

Microsoft SharePoint - Authentication Bypass

Microsoft SharePoint Server Elevation of Privilege Vulnerability id: CVE-2023-29357 info: name: Microsoft SharePoint - Authentication Bypass author: pdteam severity: critical description: | Microsoft SharePoint Server Elevation of Privilege Vulnerability impact: | Unauthenticated attackers can...

.NET Framework - Leaking ObjRefs via HTTP .NET Remoting

.NET Framework Information Disclosure Vulnerability id: CVE-2024-29059 info: name: .NET Framework - Leaking ObjRefs via HTTP .NET Remoting author: iamnoooob,rootxharsh,DhiyaneshDk,pdresearch severity: high description: .NET Framework Information Disclosure Vulnerability impact: | Attackers can...

CVE-2019-1068

CVE-2019-1068 Ursachenanalyse und PoC für eine Microsoft SQL Server Stack-Overflow-Sicherheitslücke durch Reverse Engineering von „svl.dll“. Links zu unserer Arbeit: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

squarephish

SquarePhish SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes. See PhishInSuits for more details on using OAuth Device Code flow for phishing attacks. root@kitploit: / | | | | | | | | | | | | | \ \ / | | | |/ | '/ \ /| ...

CVE-2022-23270-PPTP

CVE-2022-23270 Un pacchetto per rilevare CVE-2022-23270, una vulnerabilità nell'implementazione PPTP di Microsoft. Esempio Puoi eseguire questa logica sul PCAP incluso nella directory testing\traces: root@kitploit: $ zeek -Cr CVE-2022-23270-exploited.pcap packages $ cat notice.log separator \x09...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 Versão aprimorada pela CTT do exploit de SSRF para RCE do Microsoft Exchange Server ProxyShell/ProxyLogon, outra vulnerabilidade crítica CVSS 10.0 que afetou centenas de milhares de organizações em...