ID | Votes | Profile Description |
---|---|---|
Proxylogon | 2 | ProxyLogon is a significant software vulnerability, specifically a server-side request forgery (SSRF) vulnerability in Microsoft Exchange Server. Identified as CVE-2021-26855, it forms part of the ProxyLogon exploit chain and allows attackers to bypass authentication mechanisms and impersonate users |
ID | Type | Votes | Profile Description |
---|---|---|---|
CVE-2021-26855 | Unspecified | 2 | CVE-2021-26855 is a zero-day server-side request forgery (SSRF) vulnerability in Microsoft Exchange servers, particularly versions 2013, 2016, and 2019. This flaw in software design or implementation was exploited by attackers to gain initial access to the email servers and drop an ASPX webshell on |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
MITRE | 9 months ago | Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021 | Microsoft Security Blog | |
MITRE | 9 months ago | Analyzing Attacker Behavior Post-Exploitation of MS Exchange | Rapid7 Blog | |
SecurityIntelligence.com | 10 months ago | X-Force Research Update: Top 10 Cybersecurity Vulnerabilities of 2021 | |
CERT-EU | a year ago | From Caribbean shores to your devices: analyzing Cuba ransomware – GIXtools | |
Securelist | a year ago | Analysis of Cuba ransomware gang activity and tooling | |
CISA | a year ago | 2022 Top Routinely Exploited Vulnerabilities | CISA | |
CERT-EU | a year ago | Close Quarters Encounters with Third Generation Malware Compels UK and Danish Municipalities to Remodel Vulnerability Management Safeguards | |
MITRE | 2 years ago | HAFNIUM targeting Exchange Servers with 0-day exploits - Microsoft Security Blog | |
MITRE | 2 years ago | Exchange servers under siege from at least 10 APT groups | WeLiveSecurity | |
MITRE | 2 years ago | Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware | |
CISA | 2 years ago | Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization | CISA | |
CISA | 2 years ago | Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors | CISA | |
GovCERT CH | 2 years ago | Exchange Vulnerability 2021 | |
CISA | 2 years ago | Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization | CISA | |
CISA | 2 years ago | Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors | CISA | |
CERT-EU | a year ago | A Mere Five Percent of Vulnerable Enterprises Fix Their Issues Every Month: How to Help Them Do Better? | Bitsight | |
CERT-EU | a year ago | Cybersecurity threatscape: year 2021 in review |