onedrive_user_enum

onedriveuserenum v2.10 تعداد مستخدمي OneDrive الصالحين للحصول على شرح كامل لتقنية التعداد وOneDrive enum، راجع المدونة هنا: https://www.trustedsec.com/blog/onedrive-to-enum-them-all/ إذا كنت تبحث عن الإصدار القديم غير القائم على قاعدة البيانات من OneDrive Enum، يمكنك العثور عليه هنا:...

covert-control

covert-control Control systems remotely by uploading files to Google Drive, OneDrive, Youtube or Telegram using Python to create the files and the listeners. It allows to create text files, images, audio or videos, with the commands in cleartext or encrypted using AES. covert-googledrive.py -...

M365Pwned

M365Pwned Ferramentas de Red Team para exploração do Microsoft 365 via API do Microsoft Graph. Duas ferramentas GUI WinForms para enumerar, pesquisar e exfiltrar dados de ambientes M365 usando tokens OAuth de nível de aplicação — sem necessidade de interação do usuário. Ferramenta| Alvo| O que fa...

o365-attack-toolkit

What is o365-attack-toolkit o365-attack-toolkit allows operators to perform oauth phishing attacks. We decided to move from the old model of static definitions to fully "interactive" with the account in real-time. Some of the changes Interactive E-mail Search - Allows you to search for user e-mai...

SnaffPoint

SnaffPoint Cos'è SnaffPoint è uno strumento per i penetration tester che hanno bisogno di un po' di dolcezza in questo mondo. Dovrebbe aiutarti a trovare file sensibili disponibili su SharePoint online e su file OneDrive condivisi per la tua azienda o per il tuo cliente. Come funziona Ci sono in...

CompMgmtLauncher_DLL_UACBypass

CompMgmtLauncher & Sharepoint DLL Search Order Hijacking UAC/Persistenz über OneDrive CompMgmtLauncher.exe ist anfällig für eine DLL Search Order Hijacking-Schwachstelle. Die Binärdatei durchsucht bei installiertem OneDrive die Benutzerumgebung nach den DLLs Secur32.dll oder Wininet.dll. Auf...

KnockKnock

DIESES REPOSITORY WURDE ARCHIVIERT Um die neueste Version von KnockKnock anzuzeigen oder ein Issue zu melden, siehe https://github.com/waffl3ss/KnockKnock. KnockKnock - v0.9.9 Bitte lesen Sie die README gründlich durch. Entwickelt, um potenzielle Benutzernamen zu validieren, indem OneDrive und/od...

Microsoft OneDrive for MacOS < 26.095.0519.0003 Elevation of Privilege

The version of Microsoft OneDrive for MacOS installed on the remote macOS host is prior to 26.095.0519.0003. It is, therefore, affected by an elevation of privilege vulnerability: - Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680

CVE-2026-65680 : Microsoft OneDrive for MacOS is affected by an Elevation of Privilege vulnerability. The issue arises from improper link resolution before file access (“link following”), allowing an authorized local attacker to escalate privileges. Affected component is OneDrive for MacOS; root ...

EUVD-2026-56826

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

CVE-2026-65680 Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

...

Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

PT-2026-70821

Improper link resolution before file access 'link following' in Microsoft OneDrive allows an authorized attacker to elevate privileges locally...

CVE-2026-55502

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

CVE-2026-55502 Cloudreve: OAuth Admin.Read scope can update OneDrive storage policy credentials

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...

CVE-2026-55502

Cloudreve prior to version 4.17.0 contains an OAuth scope bypass in the admin storage policy route POST /api/v4/admin/policy/oauth/signin. The admin route is under RequiredScopes(Admin.Read) and does not apply the local Admin.Write guard used by sibling policy mutation routes, allowing an attacke...

EUVD-2026-51394

Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, POST /api/v4/admin/policy/oauth/signin requires only Admin.Read even though GetOauthRedirectService persists caller-supplied OneDrive secret and appid values, allowing an OAuth token without Admin.Write to modify...