1655 matches found
CVE-2022-21978
Microsoft Exchange Server Elevation of Privilege Vulnerability...
Description of the security update for Microsoft Exchange Server 2016 and 2019: May 10, 2022 (KB5014261)
None None...
Description of the security update for Microsoft Exchange Server 2013: May 10, 2022 (KB5014260)
Description of the security update for Microsoft Exchange Server 2013: May 10, 2022 KB5014260 This security update rollup resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE: CVE-2022-21978 |...
KLA12527 Elevation of privilege vulnerability in Microsoft Server Software
Elevation of privilege vulnerability was found in Microsoft Server Software. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2022-21978 Related products Microsoft-Exchange-Server CVE list CVE-2022-21978 critical KB list 5014261 5014260 Solution Install...
CISA Alert: Top 15 Routinely Exploited Vulnerabilities
The U.S. Cybersecurity & Infrastructure Security Agency has published its report on the top exploited vulnerabilities of 2021. This blog summarizes the report’s findings and how you can use Qualys VMDR to automatically detect and remediate these risks in your enterprise environment. The...
New Incident Report Reveals How Hive Ransomware Targets Organizations
A recent Hive ransomware attack carried out by an affiliate involved the exploitation of "ProxyShell" vulnerabilities in the Microsoft Exchange Server that were disclosed last year to encrypt an unnamed customer's network. "The actor managed to achieve its malicious goals and encrypt the...
Microsoft Exchange Active Directory Topology 15.0.847.40 - Unquoted Service Path Vulnerability
Exploit Title: Microsoft Exchange Active Directory Topology 15.0.847.40 - 'Service MSExchangeADTopology' Unquoted Service Path Exploit Author: Antonio Cuomo arkantolo Vendor : Microsoft Version : 15.0.847.40 Tested on OS: Microsoft Exchange Server 2013 SP1 PoC : ============== C:\sc qc...
APT 10, a state-sponsored Chinese threat group, conducting a global cyber espionage operation
THREAT LEVEL: Red. For a detailed advisory, download the pdf file here A Chinese state-sponsored advanced persistent threat APT 10 group has been attacking government, legal, religious entities and non-governmental organizations NGOs around the world in what appears to be an espionage campaign th...
The vulnerability of Microsoft Exchange Server’s mail server, related to insufficient input validation, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted data to the server...
The vulnerability of Microsoft Exchange Server servers, related to the exposure of information, allows attackers to perform spear-phishing attacks and disclose protected information.
The vulnerability of Microsoft Exchange Server servers is related to the exposure of information. Exploiting this vulnerability can allow a malicious actor to perform a spear-phishing attack and expose the protected information...
CVE-2022-24463
Microsoft Exchange Server Spoofing Vulnerability...
CVE-2022-23277
Microsoft Exchange Server Remote Code Execution Vulnerability...
Spoofing
Microsoft Exchange Server Spoofing Vulnerability...
Remote code execution
Microsoft Exchange Server Remote Code Execution Vulnerability...
CVE-2022-23277 Microsoft Exchange Server Remote Code Execution Vulnerability
...
Microsoft Patch Tuesday, March 2022 Edition
Microsoft on Tuesday released software updates to plug at least 70 security holes in its Windows operating systems and related software. For the second month running, there are no scary zero-day threats looming for Windows users, and relatively few "critical" fixes. And yet we know from experienc...
The vulnerability of the Microsoft Exchange Server mail server, related to errors in code generation, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to errors in code generation management. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the Microsoft Exchange Server mail server, related to improper code generation, allows a hacker to execute arbitrary code.
The vulnerability of Microsoft Exchange Server is related to incorrect code generation management. Exploitation of this vulnerability can allow a remote attacker to execute arbitrary code...
Description of the security update for Microsoft Exchange Server 2013: March 8, 2022 (KB5010324)
Description of the security update for Microsoft Exchange Server 2013: March 8, 2022 KB5010324 This security update rollup resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following Common Vulnerabilities and Exposures CVE:CVE-2022-23277 |...