713 matches found
Smart Office Web 20.28 - Information Disclosure Detection
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx. !/usr/bin/env python3 -- coding: utf-8 -- """An issue was discovered in Smart Office We...
Office Web Apps Server Panel - Detect
Microsoft Office Web App Login Panel was discovered. !/usr/bin/env python3 -- coding: utf-8 -- """Microsoft Office Web App Login Panel was discovered.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Office Web Apps...
Description of the security update for Microsoft Exchange Server 2019 CU15: December 9, 2025 (KB5071875)
Description of the security update for Microsoft Exchange Server 2019 CU15: December 9, 2025 KB5071875 Applies To Exchange Server 2019 Original article content This security update resolves vulnerabilities in Microsoft Exchange Server. To learn more about these vulnerabilities, see the following...
EUVD-2002-0719
Malware in sbrugna...
EUVD-2019-16556
Malware in sbrugna...
EUVD-2020-12317
Malware in sbrugna...
EUVD-2018-19913
Malware in sbrugna...
EUVD-2002-0853
Malware in sbrugna...
CVE-2020-1442
A spoofing vulnerability exists when an Office Web Apps server does not properly sanitize a specially crafted request, aka 'Office Web Apps XSS Vulnerability'...
VulnCheck KEV: CVE-2022-47075
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx...
Description of Office Web Apps SP2
Description of Office Web Apps SP2 Applies To Excel Web App PowerPoint Web App Introduction Microsoft Office Web Apps Service Pack 2 SP2 provides the latest updates for Office Web Apps. Additionally, this service pack includes two kinds of fixes: Previously unreleased fixes that were created...
Description of Microsoft Office Web Apps Server Service Pack 1 (SP1) (KB2880557)
Description of Microsoft Office Web Apps Server Service Pack 1 SP1 KB2880557 Applies To Office Web Apps Server 2013 Introduction Microsoft Office Web Apps Server Service Pack 1 SP1 provides the latest updates for Office Web Apps Server. This service pack includes two kinds of fixes: Previously...
Security Updates for Microsoft Office Online Server (September 2024)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2024-43465 Note that Nessus has not tested for this iss...
Security Updates for Microsoft Office Online Server (August 2023)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities: - Microsoft Office is affected by a remote code execution vulnerability. CVE-2023-35371 - Microsoft Excel is affected by a remote code execution...
Smart Office Web 20.28 Information Disclosure / Insecure Direct Object Reference
Exploit Title: Smart Office Web 20.28 - Remote Information Disclosure Unauthenticated Shodan Dork:: inurl:"https://www.shodan.io/search?query=smart+office" Date: 09/Dec/2022 Exploit Author: Tejas Nitin Pingulkar https://cvewalkthrough.com/ Vendor Homepage: https://smartofficepayroll.com/ Software...
Security Updates for Microsoft Office Online Server (May 2023)
The Microsoft Office Web Apps installation on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
Security Updates for Microsoft Office Web Apps (March 2023)
The Microsoft Office Web Apps installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A denial of service DoS vulnerability. An attacker can exploit this issue to cause the affected component to deny system or application services...
CVE-2022-47075
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx...
CVE-2022-47076
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to view sensitive information via DisplayParallelLogData.aspx...
CVE-2022-47075
An issue was discovered in Smart Office Web 20.28 and earlier allows attackers to download sensitive information via the action name parameter to ExportEmployeeDetails.aspx, and to ExportReportingManager.aspx...