ZeroPoint

ZeroPoint.ps1 ⚠ Ein defensives PowerShell-Dienstprogramm zur Erkennung und Eindämmung der Ausnutzung der CVE-2025-53770 Zero-Day-Sicherheitslücke in Microsoft SharePoint Server. 🔍 Was es tut Dieses PowerShell-Skript wurde entwickelt, um: Erkennen von Kompromittierungsindikatoren, wie z. B...

CVE-2026-50656-rogueplanet-validation

Rapporto di Convalida Proof of Concept RoguePlanet per Microsoft Defender Scopo e ambito del rapporto Questo rapporto riguarda la convalida del Proof of Concept RoguePlanet descritto pubblicamente e relativo a Microsoft Defender. La tecnica descritta è stata presentata dai media il 10 giugno 2026...

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook-

THM---CVE-2024-21413-Moniker-Link-Microsoft-Outlook- Il 13 febbraio 2024 Microsoft ha pubblicato una grave vulnerabilità di sicurezza in Microsoft Outlook, identificata come CVE-2024-21413, nota come Moniker Link Vulnerability. La vulnerabilità consente a un attaccante di bypassare il meccanismo...

CVE-2024-43451-POC

Descrição Nome : CVE-2024-43451 Pontuação CVSSv3 : 6.5 Versões Afetadas : Todas as versões do Microsoft Windows anteriores ao Patch de Novembro de 2024 CVE-2024-43451 é uma vulnerabilidade de dia zero no Microsoft Windows que permite que atacantes capturem hashes de senha NTLMv2 com interação...

Microsoft Windows 'HTTP.sys' - Remote Code Execution

HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP requests, aka "HTTP.sys Remote Code Execution Vulnerability." id: CVE-2015-1635 info: name: Microsoft...

Microsoft SharePoint - Authentication Bypass

Microsoft SharePoint Server Elevation of Privilege Vulnerability id: CVE-2023-29357 info: name: Microsoft SharePoint - Authentication Bypass author: pdteam severity: critical description: | Microsoft SharePoint Server Elevation of Privilege Vulnerability impact: | Unauthenticated attackers can...

CVE-2019-1068

CVE-2019-1068 Ursachenanalyse und PoC für eine Microsoft SQL Server Stack-Overflow-Sicherheitslücke durch Reverse Engineering von „svl.dll“. Links zu unserer Arbeit: 1. Ataberk's Blog 2. Fatih's Blog 3. Cem's Blog https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1068...

squarephish

SquarePhish SquarePhish is an advanced phishing tool that uses a technique combining the OAuth Device code authentication flow and QR codes. See PhishInSuits for more details on using OAuth Device Code flow for phishing attacks. root@kitploit: / | | | | | | | | | | | | | \ \ / | | | |/ | '/ \ /| ...

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065

CTT-Exchange-RCE-v1.0---Microsoft-Exchange-Exploit-CVSS-10.0-CRITICAL-CVE-2021-26855-CVE-2021-27065 Versão aprimorada pela CTT do exploit de SSRF para RCE do Microsoft Exchange Server ProxyShell/ProxyLogon, outra vulnerabilidade crítica CVSS 10.0 que afetou centenas de milhares de organizações em...

exchange_webshell_detection

Questo progetto è stato interrotto Utilizza invece gli strumenti Microsoft: Microsoft Safety Scanner Altre rilevazioni e mitigazioni elencate in: https://github.com/microsoft/CSS-Exchange/tree/main/Security Nel valutare l'impatto, suggeriamo vivamente di presumere una compromissione e di esaminar...

onedrive_user_enum

onedriveuserenum v2.10 enumerate valid onedrive users For a full rundown of the enumeration technique and OneDrive enum, check out the blog here: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ If you are looking for the old, non-database vesion of OneDrive Enum, you can find it here:...

MS10-059

Dieses Repository hat keine README-Datei...

CVE-2018-8174-msf

CVE-2018-8174-msf Questo è un modulo metasploit che crea un documento Word dannoso per sfruttare la vulnerabilità CVE-2018-8174 - corruzione della memoria di VBScript. Questo modulo è un porting molto rapido e utilizza il campione di exploit trovato in natura. L'exploit funziona solo per Microsof...

MS10-070

MS-10-070 CVE-2010-3332 Oracle-Padding-Sicherheitsanfälligkeit in Microsoft ASP.NET...

rats-re

Ricostruzione del codice sorgente di Rats! con LLM locali Questo repository è una ricostruzione in corso d'opera del codice sorgente di RATS.EXE, la versione Windows originale di Rats! 1994 di Sean O'Connor. Compila un eseguibile Win32 con Microsoft Visual C++ 4.1 tramite wibo e può essere testat...

CVE-2026-69414 ShieldBreak Zero-Day: No Patch, and CISA BOD 26-04 Gives You 14 Days

Executive Summary ShieldBreak CVE-2026-69414 is a zero-day elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Microsoft Defender, allowing a low-privilege local attacker to escalate to SYSTEM. A public PoC was released on August 12, 2026, and Microsoft assigne...

o365enum

Office 365 User Enumeration Enumerate valid usernames from Office 365 using ActiveSync, Autodiscover, or office.com login page. Usage o365enum will read usernames from the file provided as first parameter. The file should have one username per line. The output is CSV-based for easier parsing. Val...

VulnCheck KEV: CVE-2026-63520

Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...

The vulnerability of the `mana_hwcDestroyChannel()` function in the `drivers/net/ethernet/microsoft/mana/hw_channel.c` file of the Ethernet network adapter driver in Microsoft’s Linux kernel allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the manahwcDestroyChannel function in the drivers/net/ethernet/microsoft/mana/hwchannel.c file of the Ethernet network adapter driver in Microsoft’s Linux kernel is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow an attacker ...

CVE-2023-23397

CVE-2023-23397 Patch für eine kritische Sicherheitslücke in MS Outlook – CVSS 9.8 Im Ordner "Patch" sind 3 PowerShell-Skripte enthalten. Falls Ihre Patch-Management-Software ein Evaluierungs- und ein Behebungsskript verwendet, verwenden Sie die entsprechenden Dateien/Skripte. Das All-In-One-Skrip...