473 matches found
NtlmRelayToEWS
ntlmRelayToEWS 作者: Arno0x0x - @Arno0x0x ntlmRelayToEWS は、Exchange Web サービス EWS に対して NTLM リレー攻撃を実行するためのツールです。ポート 445 で SMBListener を、ポート 80 で HTTPListener を起動し、被害者からの接続を待ち受けます。被害者がいずれかのリスナーに接続すると、NTLM ネゴシエーションが発生し、ターゲットの EWS サーバーにリレーされます。 明らかにこのツールは EWS API 全体を実装していません...
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner 此脚本扫描一个IP/范围/CIDR，并输出发现的 Microsoft Exchange 服务器及其版本。指定IP/范围/CIDR后，脚本会使用 masscan 在 tcp/443 端口上进行扫描。扫描成功后，它会尝试通过 curl 向 "/owa/auth/logon.aspx" 发送 HTTP GET 请求，获取 Outlook Web Access 页面源码，从而提取构建版本并显示。 在安装了 Exchange Server 2010 SP3 Update Rollup 30 的 Small Business Server 2011...
EUVD-2017-17603
Malware in sbrugna...
Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 (KB4504705)
Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 KB4504705 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
Description of the security update for SharePoint Server 2010: April 13, 2021 (KB4504701)
Description of the security update for SharePoint Server 2010: April 13, 2021 KB4504701 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about these vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28453. Note: To...
Security Updates for Microsoft SharePoint Server 2010 (March 2021)
The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. C Tenable Network Security, Inc...
Description of the security update for SharePoint Server 2010: March 9, 2021 (KB3101541)
Description of the security update for SharePoint Server 2010: March 9, 2021 KB3101541 Summary This security update resolves a Microsoft SharePoint Server Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27076...
Security Updates for Microsoft SharePoint Server 2010 (February 2021)
The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...
Description of the security update for SharePoint Server 2010 Office Web Apps: January 12, 2021
Description of the security update for SharePoint Server 2010 Office Web Apps: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
Description of the security update for SharePoint Server 2010: January 12, 2021
Description of the security update for SharePoint Server 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for SharePoint Server 2010: January 12, 2021
Description of the security update for SharePoint Server 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for SharePoint Server 2010 Office Web Apps: December 8, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: December 8, 2020 Summary This security update resolves Microsoft Excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122...
Description of the security update for SharePoint Server 2010: December 8, 2020
Description of the security update for SharePoint Server 2010: December 8, 2020 Summary This security update resolves Microsoft excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122. Note To apply...
Description of the security update for SharePoint Server 2010: November 10, 2020
Description of the security update for SharePoint Server 2010: November 10, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...
Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2020
Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the...
Description of the security update for SharePoint Server 2010: October 13, 2020
Description of the security update for SharePoint Server 2010: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for SharePoint Server 2010: September 8, 2020
Description of the security update for SharePoint Server 2010: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not check the source markup of an application package. To learn more about the...
Description of the security update for SharePoint Server 2010: September 8, 2020
Description of the security update for SharePoint Server 2010: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel or Microsoft Word if the software does not correctly handle objects in memory. To learn more about the...
Description of the security update for SharePoint Server 2010: September 8, 2020
Description of the security update for SharePoint Server 2010: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the...