452 matches found
CompMgmtLauncher_DLL_UACBypass
CompMgmtLauncher & Sharepoint DLL Search Order hijacking UAC/persist via OneDrive CompMgmtLauncher.exe is vulnerable to to a DLL Search Order hijacking vulnerability. The binary, will perform a search within user env for the DLL's Secur32.dll or Wininet.dll when Onedrive is installed...
M365Pwned
M365Pwned Red Team tooling for Microsoft 365 exploitation via Microsoft Graph API. Two WinForms GUI tools for enumerating, searching, and exfiltrating data from M365 environments using application-level OAuth tokens โ no user interaction required. Tool| Target| What it does ---|---|---...
o365-attack-toolkit
What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...
covert-control
covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...
KnockKnock
THIS REPOSITORY HAS BEEN ARCHIVED To view the latest version of KnockKnock or to submit an issue, reference https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Please make sure to actually utilize the README. Designed to validate potential usernames by querying OneDrive and/or Microsoft...
onedrive_user_enum
onedriveuserenum v2.10 ๆๅนใชOneDriveใฆใผใถใผใๅๆใใ ๅๆใใฏใใใฏใจOneDrive enumใฎ่ฉณ็ดฐใซใคใใฆใฏใใใกใใฎใใญใฐใๅ็ งใใฆใใ ใใ: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ ใใผใฟใใผในใไฝฟ็จใใชใๆงใใผใธใงใณใฎOneDrive Enumใใๆขใใชใใใใกใใซใใใพใ: https://github.com/nyxgeek/simplescanners 2.10ใฎๆฐๆฉ่ฝ: ใชใขใผใMySQL DBใญใฐใชใใทใงใณ -- ใชใขใผใใใผใฟใใผในใซใญใฐใ่จ้ฒ...
OneDrive-UDC2
OneDrive UDC2 ไธไธชไฝฟ็จ OneDrive ไฝไธบไผ ่พๅฑ็ Cobalt Strike ็จๆท่ชๅฎไน C2 ้้ใ ไฝ ้่ฆๅๅค ไธไธช Microsoft Entra ID ็งๆท๏ผๅ ถไธญๆไธไธชๆฅๆ OneDrive for Business ็็จๆทใ ไธไธชๅ ทๆ Files.ReadWrite.All ๅบ็จ็จๅบๆ้็ๅบ็จๆณจๅใ ่ฎพ็ฝฎ 1. ๆณจๅๅบ็จ็จๅบ ๅจ Azure ้จๆทไธญ๏ผ่ฝฌๅฐ ๅบ็จๆณจๅ ๅนถๅๅปบไธไธชๆฐๅบ็จ๏ผ ่ดฆๆท็ฑปๅ๏ผ ๅ็งๆทใ ้ๅฎๅ URI๏ผ ็็ฉบใ ่ฎฐไธๆฆ่ง้กต้ขไธญ็ ็งๆท ID ๅ ๅฎขๆท็ซฏ ID ใ 2. ๆทปๅ Graph ๆ้ ๅจ API ๆ้ ไธ๏ผ 1. ๆทปๅ ...
CVE-2026-52782
abraxaslabs.tech ยท github.com/abraxas ยท @abraxasnull ยท CVE-2026-52782 CVE-2026-52782 OpenProject 17.3.2 โ OpenProject GmbH OpenProject ๆฏไธๆฌพๅผๆบใๅบไบ Web ็้กน็ฎ็ฎก็่ฝฏไปถใๅจ 17.3.3 ๅ 17.4.1 ไนๅ๏ผ้่ฟ้กน็ฎๅญๅจ่ฎพ็ฝฎๅญๅจ็ IDOR ๆผๆดๅ ่ฎธ้กน็ฎ็ฎก็ๅๅซๆๅฆไธไธช้กน็ฎๆ็ฎก็็ Nextcloud ๆ OneDrive ๆไปถๅคนใ | ---|--- CVE| CVE-2026-52782 ยท CVE.org CWE| CWE-639 CVS...
SnaffPoint
SnaffPoint What is it SnaffPoint is a tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company or your customer. How does it work There are actually 2 tools:...
CVE-2026-93986
A flaw was found in rclone. This path traversal vulnerability allows a remote attacker to craft special names in server and third-party listing responses. These crafted names, containing directory traversal sequences, could potentially enable writing outside the intended destination directory...
SUSE CVE-2026-55502
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...
GO-2026-6101 Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials in github.com/cloudreve/Cloudreve
Cloudreve OAuth Admin.Read scope can update OneDrive storage policy credentials in github.com/cloudreve/Cloudreve. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive report...
Microsoft OneDrive for MacOS < 26.095.0519.0003 Elevation of Privilege
The version of Microsoft OneDrive for MacOS installed on the remote macOS host is prior to 26.095.0519.0003. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to...
CVE-2026-65680
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...
CVE-2026-65680
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...
CVE-2026-65680
CVE-2026-65680 : Microsoft OneDrive for MacOS is affected by an Elevation of Privilege vulnerability. The issue arises from improper link resolution before file access (โlink followingโ), allowing an authorized local attacker to escalate privileges. Affected component is OneDrive for MacOS; root ...
EUVD-2026-56826
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...
CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
...
CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
...
Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability
Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...