ID | Type | Votes | Profile Description |
---|---|---|---|
CVE-2021-26855 | Unspecified | 2 | CVE-2021-26855 is a zero-day server-side request forgery (SSRF) vulnerability in Microsoft Exchange servers, particularly versions 2013, 2016, and 2019. This flaw in software design or implementation was exploited by attackers to gain initial access to the email servers and drop an ASPX webshell on |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
MITRE | 9 months ago | Evolving trends in Iranian threat actor activity – MSTIC presentation at CyberWarCon 2021 | Microsoft Security Blog | |
MITRE | 9 months ago | Analyzing Attacker Behavior Post-Exploitation of MS Exchange | Rapid7 Blog | |
MITRE | 9 months ago | An In-Depth Look at Black Basta Ransomware | |
CERT-EU | 9 months ago | Over 20,000 vulnerable Microsoft Exchange servers exposed to attacks | |
CERT-EU | 9 months ago | Sensor Intel Series: Top CVEs in October 2023 | |
CERT-EU | a year ago | Sensor Intel Series: Top CVEs in August 2023 | F5 Labs | |
CERT-EU | a year ago | From Caribbean shores to your devices: analyzing Cuba ransomware – GIXtools | |
Securelist | a year ago | Analysis of Cuba ransomware gang activity and tooling | |
CISA | a year ago | 2022 Top Routinely Exploited Vulnerabilities | CISA | |
CERT-EU | a year ago | Sensor Intel Series: Top CVEs in May 2023 | |
MITRE | 2 years ago | Operation Exchange Marauder: Active Exploitation of Multiple Zero-Day Microsoft Exchange Vulnerabilities | |
MITRE | 2 years ago | HAFNIUM targeting Exchange Servers with 0-day exploits - Microsoft Security Blog | |
MITRE | 2 years ago | Exchange servers under siege from at least 10 APT groups | WeLiveSecurity | |
MITRE | 2 years ago | Iron Tiger APT Updates Toolkit With Evolved SysUpdate Malware | |
CISA | 2 years ago | Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization | CISA | |
CISA | 2 years ago | Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors | CISA | |
GovCERT CH | 2 years ago | Exchange Vulnerability 2021 | |
CISA | 2 years ago | Impacket and Exfiltration Tool Used to Steal Sensitive Information from Defense Industrial Base Organization | CISA | |
CISA | 2 years ago | Top CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors | CISA | |
CERT-EU | a year ago | A Mere Five Percent of Vulnerable Enterprises Fix Their Issues Every Month: How to Help Them Do Better? | Bitsight |