DefinitelyNotPhishing

⚠️ 免责声明 本仓库仅用于教育和测试目的 。 此处包含的所有工具、配置和资源（如钓鱼模板、红队工具或攻击性安全脚本）严格限定于授权环境 中使用，例如实验室、演示或已获得明确许可 的渗透测试场景。 请勿 使用本代码、数据或任何衍生内容在未经同意的情况下执行未授权攻击、钓鱼活动或入侵系统。 对于使用此处任何材料进行的误用、滥用或任何非法活动，我不承担任何责任 。 未经许可使用这些工具针对系统或个人可能违法并应受到法律制裁 。 请负责任且合乎道德地行事。 这是一个红队学习与演示套件——并非用于现实世界恶意用途的工具包 。 Evilginx 预览 Evilginx Phishlets Amazo...

CVE-2026-58201

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...

aisecplus-week01-danielossai

🔐 AISec Plus — 第 1 周：绘制威胁图景 研究人员： Daniel Ossai 代码库： aisecplus-week01-danielossai 提交： 第 1 周 · AISec Plus 训练营 📌 事件名称与日期 EchoLeak CVE-2025-32711 发现时间：2025 年 1 月 · 披露时间：2025 年 6 月 · 修复时间：2025 年 6 月 📝 发生了什么 Aim Security 的研究人员在 Microsoft 365 Copilot 中发现了一个严重的零点击间接提示注入漏洞。攻击者只需发送一封精心构造的电子邮件——无需任何用户交互——即可...

CVE-2026-54998-exp

免责声明 本仓库仅用于教育和研究目的。 作者不对因使用本材料而造成的任何滥用、损害或非法活动负责。 请自行承担使用风险。 遵守适用的法律和道德准则。 概述 CVE-2026-54998 是 Microsoft Exchange Online 中的一个不正确的授权 （Incorrect Authorization，CWE-863）漏洞。它允许具有低级别用户权限的已认证攻击者通过网络将其访问权限提升到预期授权范围之外。 该漏洞于 2026 年 7 月 3 日发布。CVSS v3.1 评分：8.8（高危） 。 受影响版本 Microsoft Exchange Online（2026 年 7 月...

Release Information for Veeam Backup for Microsoft 365 8.6

Requirements This release can be used to: upgrade an existing v8, v8.1, v8.2, v8.3, v8.4, or v8.5 deployment of Veeam Backup for Microsoft 365 to v8.6. install a new deployment of Veeam Backup for Microsoft 365 v8.6. After installing this release, the Veeam Backup for Microsoft 365 build number...

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks

Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that's targeting Microsoft 365 and other software-as-a-service SaaS offerings through information technology IT help desk vishing, adversary-in-the-middle AitM token theft, and residential-proxy sign-ins...

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions

Cybersecurity researchers have disclosed details of a new adversary-in-the-middle AitM phishing toolkit called NovaCookies that's used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead of publication...

Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic

Cybersecurity researchers have traced the continued evolution of the Cavern aka Cav3rn command-and-control C2 framework used by Iranian nation-state hackers in attacks targeting entities in Israel. Russian cybersecurity company Kaspersky said its ongoing monitoring of the threat activity cluster...

PT-2026-70762

Name of the Vulnerable Software and Affected Versions Microsoft PowerPoint affected versions not specified Microsoft Office affected versions not specified Microsoft 365 Apps for Enterprise affected versions not specified Description Improper input validation in Microsoft Office PowerPoint allows...

The vulnerability of Microsoft Excel spreadsheet editors in Microsoft Office packages and Microsoft 365 Apps for Enterprise allows a hacker to execute arbitrary code.

The vulnerability of Microsoft Excel spreadsheet editors within the Microsoft Office and Microsoft 365 Apps for Enterprise software packages is related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

EUVD-2026-54326

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

How to Apply Custom Settings in Veeam Backup for Microsoft 365 Using Set-VBOConfigurationParameter

Purpose This article explains how to use the Set-VBOConfigurationParameter cmdlet to apply a custom configuration setting within a Veeam Backup for Microsoft 365 deployment. Solution How the Scripts in This Article Are Used Every script in this article begins with the same three variables, which...

CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability

...

CVE-2026-62873

Microsoft 365 Admin Center is affected by CVE-2026-62873 due to improper verification of cryptographic signatures, enabling elevated privileges over a network for an unauthorized attacker. The vulnerability details provided across sources (NVD, ENISA EUVD, CVE listing, and MSRC) confirm the issue...

CVE-2026-62873

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

CVE-2026-62873 Microsoft 365 Admin Center Elevation of Privilege Vulnerability

...

Microsoft 365 Admin Center Elevation of Privilege Vulnerability

Improper verification of cryptographic signature in Microsoft 365 Admin Center allows an unauthorized attacker to elevate privileges over a network...

KLA91190 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of...

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...