Lucene search
2D0AC1C7-F656-5D6B-9FC2-79525014BE1EHistorySep 04, 2021 - 3:34 p.m.
Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft
2021-09-0415:34:03
253
unrestricted upload file
microsoft exchange
proxyshell
proof of concept
active directory
legacydn
sid
load-balanced
security updates
prior research
academic research
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
8.5
Confidence
High
EPSS
0.973
Percentile
99.9%
ProxyShell
Proof of Concept Exploit for Microsoft Exchange CVE…
This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.
Related
thn
thn
New Incident Report Reveals How Hive Ransomware Targets Organizations
2022-04-21 10:00:00
MS Exchange Server Flaws Exploited to Deploy Keylogger in Targeted Attacks
2024-05-22 07:41:00
WARNING: Microsoft Exchange Under Attack With ProxyShell Flaws
2021-08-22 09:51:00
rapid7blog
rapid7blog
For Microsoft Exchange Server Vulnerabilities, Patching Remains Patchy
2021-10-06 14:07:12
ProxyShell: More Widespread Exploitation of Microsoft Exchange Servers
2021-08-12 21:08:43
Metasploit Wrap-Up
2021-08-20 19:12:00
cisa
cisa
Urgent: Protect Against Active Exploitation of ProxyShell Vulnerabilities
2021-08-21 00:00:00
attackerkb
attackerkb
ProxyShell Exploit Chain
2023-12-28 00:00:00
CVE-2021-34523
2021-07-14 00:00:00
CVE-2021-31207
2021-05-11 00:00:00
hivepro
hivepro
BlackByte ransomware exploits Microsoft Servers ProxyShell Vulnerabilities
2021-12-07 13:24:49
Magic Hound Exploiting Old Microsoft Exchange ProxyShell Vulnerabilities
2022-03-25 04:05:09
Hive Ransomware targets organizations with ProxyShell exploit
2022-04-22 14:34:47
pentestpartners
pentestpartners
Hive Ransomware is on the rise. How should you deal with it?
2022-11-18 06:44:42
threatpost
threatpost
Microsoft Breaks Silence on Barrage of ProxyShell Attacks
2021-08-26 12:39:54
ProxyShell Attacks Pummel Unpatched Exchange Servers
2021-08-23 18:54:29
‘Tortilla’ Wraps Exchange Servers in ProxyShell Attacks
2021-11-03 18:16:37
malwarebytes
malwarebytes
IIS extensions are on the rise as backdoors to servers
2022-07-27 13:58:06
Patch now! Microsoft Exchange is being attacked via ProxyShell
2021-08-23 13:21:08
trellix
trellix
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
Trellix Global Defenders: Analysis and Protections for BlackByte Ransomware
2022-02-28 00:00:00
zdt
zdt
Microsoft Exchange ProxyShell Remote Code Execution Exploit
2021-08-21 00:00:00
fireeye
fireeye
PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers
2021-09-03 10:00:00
metasploit
metasploit
Microsoft Exchange ProxyShell RCE
2021-08-18 14:50:34
githubexploit
githubexploit
Exploit for Vulnerability in Microsoft
2021-10-02 07:29:24
Exploit for Server-Side Request Forgery in Microsoft
2022-06-29 12:37:31
Exploit for Vulnerability in Microsoft
2021-08-10 15:01:02
packetstorm
packetstorm
Microsoft Exchange ProxyShell Remote Code Execution
2021-08-20 00:00:00
qualysblog
qualysblog
AvosLocker Ransomware Behavior Examined on Windows & Linux
2022-03-07 05:18:46
In-Depth Look Into Data-Driven Science Behind Qualys TruRisk
2022-10-10 14:32:29
Qualys Tackles 2022’s Top Routinely Exploited Cyber Vulnerabilities
2023-08-24 19:07:05
securelist
securelist
Tropic Trooper spies on government entities in the Middle East
2024-09-05 08:00:12
CVE-2022-41040 and CVE-2022-41082 – zero-days in MS Exchange
2022-12-19 16:15:49
From Caribbean shores to your devices: analyzing Cuba ransomware
2023-09-11 10:00:26
checkpoint_advisories
checkpoint_advisories
ics
ics
#StopRansomware: Hive Ransomware
2022-11-25 12:00:00
mmpc
mmpc
msrc
msrc
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
April 2021 Update Tuesday packages now available
2021-04-13 07:00:00
prion
prion
Security feature bypass
2021-05-11 19:15:00
Privilege escalation
2021-07-14 18:15:00
Remote code execution
2021-07-14 18:15:00
zdi
zdi
nvd
nvd
cisa_kev
cisa_kev
Microsoft Exchange Server Privilege Escalation Vulnerability
2021-11-03 00:00:00
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-11-03 00:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-11-03 00:00:00
mscve
mscve
Microsoft Exchange Server Elevation of Privilege Vulnerability
2021-07-13 07:00:00
Microsoft Exchange Server Security Feature Bypass Vulnerability
2021-05-11 07:00:00
Microsoft Exchange Server Remote Code Execution Vulnerability
2021-07-13 07:00:00
cvelist
cvelist
cve
cve
avleonov
avleonov
nessus
nessus
Security Updates for Microsoft Exchange Server (April 2021)
2021-04-13 00:00:00
Security Updates for Exchange (May 2021)
2021-05-11 00:00:00
mskb
mskb
kaspersky
kaspersky
KLA12224 Multiple vulnerabilities in Microsoft Exchange Server
2021-07-13 00:00:00
KLA12169 Multiple vulnerabilities in Microsoft Exchange Server
2021-05-11 00:00:00
krebs
krebs
Microsoft Patch Tuesday, July 2021 Edition
2021-07-13 21:41:47
impervablog
impervablog
Microsoft Exchange Server Vulnerabilities CVE-2022-41040 and CVE-2022-41082
2022-09-30 16:47:34
nuclei
nuclei
Exchange Server - Remote Code Execution
2021-08-10 07:59:06
mssecure
mssecure
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS3
9.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
AI Score
8.5
Confidence
High
EPSS
0.973
Percentile
99.9%
Related for 2D0AC1C7-F656-5D6B-9FC2-79525014BE1E