510 matches found
NtlmRelayToEWS
ntlmRelayToEWS 作者：Arno0x0x - @Arno0x0x ntlmRelayToEWS 是一款用于对 Exchange Web Services EWS 执行 NTLM 中继攻击的工具。它会在 445 端口启动一个 SMB 监听器，在 80 端口启动一个 HTTP 监听器，等待来自受害者的传入连接。一旦受害者连接到其中一个监听器，就会触发 NTLM 协商，并将该协商中继到目标 EWS 服务器。 显然，该工具并未 实现完整的 EWS API，因此仅实现了少数在某些攻击场景中有用的服务。我可能会在未来添加更多功能。请参阅“用法”部分了解已实现的 EWS 调用。 限制与改进...
CVE-2020-0688-Scanner
CVE-2020-0688-Scanner Este script escanea una IP/rango/CIDR y muestra los servidores Microsoft Exchange y las versiones descubiertas. La IP/rango/CIDR especificada se escaneará con masscan en el puerto tcp/443. Después de un escaneo exitoso, intenta hacer HTTP GET "/owa/auth/logon.aspx" con curl...
EUVD-2017-17603
Malware in sbrugna...
Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 (KB4504705)
Description of the security update for SharePoint Server 2010 Office Web Apps: April 13, 2021 KB4504705 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
Description of the security update for SharePoint Server 2010: April 13, 2021 (KB4504701)
Description of the security update for SharePoint Server 2010: April 13, 2021 KB4504701 Summary This security update resolves a Microsoft Word remote code execution vulnerability. To learn more about these vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-28453. Note: To...
Security Updates for Microsoft SharePoint Server 2010 (March 2021)
The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. C Tenable Network Security, Inc...
Description of the security update for SharePoint Server 2010: March 9, 2021 (KB3101541)
Description of the security update for SharePoint Server 2010: March 9, 2021 KB3101541 Summary This security update resolves a Microsoft SharePoint Server Remote Code Execution Vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2021-27076...
Security Updates for Microsoft SharePoint Server 2010 (February 2021)
The Microsoft SharePoint Server 2010 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24071 - A sessi...
Description of the security update for SharePoint Server 2010 Office Web Apps: January 12, 2021
Description of the security update for SharePoint Server 2010 Office Web Apps: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these...
Description of the security update for SharePoint Server 2010: January 12, 2021
Description of the security update for SharePoint Server 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for SharePoint Server 2010: January 12, 2021
Description of the security update for SharePoint Server 2010: January 12, 2021 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsof...
Description of the security update for SharePoint Server 2010 Office Web Apps: December 8, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: December 8, 2020 Summary This security update resolves Microsoft Excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122...
Description of the security update for SharePoint Server 2010: December 8, 2020
Description of the security update for SharePoint Server 2010: December 8, 2020 Summary This security update resolves Microsoft excel remote code execution vulnerabilities. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-17122. Note To apply...
Description of the security update for SharePoint Server 2010: November 10, 2020
Description of the security update for SharePoint Server 2010: November 10, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microso...
Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2020
Description of the security update for SharePoint Server 2010 Excel Web App: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the...
Description of the security update for SharePoint Server 2010: October 13, 2020
Description of the security update for SharePoint Server 2010: October 13, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not correctly handle objects in memory. To learn more about the vulnerability, see...
Description of the security update for SharePoint Server 2010: September 8, 2020
Description of the security update for SharePoint Server 2010: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel if the software does not check the source markup of an application package. To learn more about the...
Description of the security update for SharePoint Server 2010: September 8, 2020
Description of the security update for SharePoint Server 2010: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Excel or Microsoft Word if the software does not correctly handle objects in memory. To learn more about the...
Description of the security update for SharePoint Server 2010: September 8, 2020
Description of the security update for SharePoint Server 2010: September 8, 2020 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see the...
Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020
Description of the security update for SharePoint Server 2010 Office Web Apps: September 8, 2020 Summary This security update resolves a remote code execution vulnerability that exists in Microsoft Word software if the software does not correctly handle objects in memory. To learn more about the...