148376 matches found
EUVD-2026-30343
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-42897
CVE-2026-42897 affects on-prem Microsoft Exchange Server (2016, 2019, SE) with an XSS flaw in Outlook Web Access caused by improper neutralization of input during web page generation. An attacker could send a crafted email to trigger arbitrary JavaScript execution in the victim’s browser, enablin...
CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability
...
CVE-2026-42897 Microsoft Exchange Server Spoofing Vulnerability
...
Achieve Federal-Grade M365 Security: Governing with Qualys SSPM and SCuBA
Qualys SaaS Security Posture Management SSPM introduces native support for the Secure Cloud Business Applications SCuBA compliance framework, bringing CISA's toughest M365 security benchmarks directly into your continuous posture monitoring workflow. Key Takeaways CISA’s Secure Cloud Business...
Kazuar: Anatomy of a nation-state botnet
In this article 1. Delivery 2. Module types 3. Botnet operations 4. Who is Secret Blizzard? 5. Mitigation and protection guidance 6. Microsoft Defender detections Kazuar, a sophisticated malware family attributed to the Russian state actor Secret Blizzard, has been under constant development for...
Description of the security update for Microsoft Exchange Server 2019 CU14: June 09, 2026 (KB5094142)
None None...
Description of the security update for Microsoft Exchange Server 2016 CU23: June 09, 2026 (KB5094144)
None None...
Microsoft Exchange Server Spoofing Vulnerability
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Exchange Server allows an unauthorized attacker to perform spoofing over a network...
Microsoft Authenticator Information Disclosure Vulnerability
Exposure of sensitive information to an unauthorized actor in Microsoft Authenticator allows an unauthorized attacker to disclose information over a network...
Description of the security update for Microsoft Exchange Server 2019 CU15: June 09, 2026 (KB5094140)
None None...
Description of the security update for Microsoft Exchange Server Subscription Edition RTM: June 09, 2026 (KB5094139)
None None...
FamousSparrow Targeted Oil and Gas Industry via MS Exchange Server Exploit
Bitdefender Labs reveals how the China-linked FamousSparrow hacking group targeted an Azerbaijani energy firm using ProxyNotShell, Deed RAT,…...
CVE-2026-45585
creationtimestamp| type| source ---|---|--- 2026-05-14 09:14:46+00:00| seen| https://www.acn.gov.it/portale/w/microsoft-disponibili-poc-per-lo-sfruttamento-di-vulnerabilita-zero-day 2026-05-19 21:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1878 2026-05-20 02:33:59+00:00|...
cross-proxy Digest auth state leak
...
proxy credentials leak over redirect-to proxy
...
wrong reuse of HTTP Negotiate connection
...
netrc credential leak with reused proxy connection
...