NA

CVE-2021-41349

Published: 10/11/2021 Updated: 10/11/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

Microsoft Exchange Server Spoofing Vulnerability This CVE ID is unique from CVE-2021-42305.

Most Upvoted Vulmon Research Post

There is no Researcher post for this vulnerability
Would you like to share something about it? Sign up now to share your knowledge with the community.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft exchange server 2013

microsoft exchange server 2016

microsoft exchange server 2019

Github Repositories

CVE-2021-41349-Exploit Microsoft Exchange Server Spoofing Vulnerability Exploit!

CVE-2021-41349 Exploit! Microsoft Exchange Server Spoofing Vulnerability Exploit! Step To Reproduce! Make A HTTP Request Like This & Capture On Burp Make A CSRF PoC Of That Request & Save The HTML Output Into A File Open The Saved Output In A Browser & Boom Or Use The HTML File Given & Just Change targetcom To Your Sever!

Microsoft Exchange Exploit CVE-2021-41349 Exploitation of CVE-2021-41349 This exploiting tool creates a Form for posting XSS Payload to the target Exchange server You need to create a js containing your desire to do Usage Create Your js Payload and upload it somewhare run the CVE-2021-41349py same as following steps python3 CVE-2021-41349py "mailtargetcom

Introduction expbox is an exploit code collection repository List CVE-2021-41349 Exchange XSS PoC <= Exchange 2013 update 23 <= Exchange 2016 update 22 <= Exchange 2019 update 11 CVE-2021–3945 Django-helpdesk stored XSS PoC <= 030 Note All content comes from the I

漏洞研究 关于漏洞研究,我想引用图南&Veraxy@QAX CERT这篇文章《一个简单的 RCE 漏洞到底能挖出什么知识》中的一段话来给出我的理解: 漏洞研究其实不应该只盯着漏洞本身,漏洞可以扩展的知识点太多了: 偏应用架构:了解这个软件/组件/中间件是干什么的的、尝试搭建起来写点

漏洞研究 关于漏洞研究,我想引用图南&Veraxy@QAX CERT这篇文章《一个简单的 RCE 漏洞到底能挖出什么知识》中的一段话来给出我的理解: 漏洞研究其实不应该只盯着漏洞本身,漏洞可以扩展的知识点太多了: 偏应用架构:了解这个软件/组件/中间件是干什么的的、尝试搭建起来写点

漏洞索引 Program List 开源产品、国外应用软件 应用列表 国产应用软件 Program List Apache APISIX Apache Druid Apache Flink Apache HTTP Server Apache JSPWiki Apache OFBiz Apache ShenYu Apache SkyWalking Apache Solr Apache Storm Apache Struts2 Atlassian Confluence Atlassian Crowd Atlassian Jira Citrix Cisco ECShop Exchange F5 BIG-IP Gitlab Grafana Harbo

漏洞索引 Program List 开源产品、国外应用软件 应用列表 国产应用软件 Program List Apache APISIX Apache Druid Apache Flink Apache HTTP Server Apache JSPWiki Apache OFBiz Apache ShenYu Apache SkyWalking Apache Solr Apache Storm Apache Struts2 Atlassian Confluence Atlassian Crowd Atlassian Jira Citrix Cisco ECShop Exchange F5 BIG-IP Gitlab Grafana Harbo

漏洞索引 Program List 开源产品、国外应用软件 应用列表 国产应用软件 Program List Apache APISIX Apache Druid Apache Flink Apache HTTP Server Apache JSPWiki Apache OFBiz Apache ShenYu Apache SkyWalking Apache Solr Apache Storm Apache Struts2 Atlassian Confluence Atlassian Crowd Atlassian Jira Citrix Cisco ECShop Exchange F5 BIG-IP Gitlab Grafana Harbo

goby poc (共926个) 最近一次检查时间 2022-12-03 10:14:29 收集记录 文件名称 收录时间 H3C-IMC-dynamiccontentpropertiesxhtm-RCEjson 2022-12-03 10:13:52 Oracle-Weblogic-Server-Deserialization-RCE(CVE-2018-2628)json 2022-12-03 10:13:52 tongda-OA-file-include-getshelljson 2022-12-03 10:13:52 H3C-Next-generation-firewall-File-readjson 2022-12-03

PoC in GitHub 2022 CVE-2022-0185 (2022-02-11) A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a f

PoC in GitHub 2022 CVE-2022-0185 (2022-02-11) A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a f

PoC in GitHub 2022 CVE-2022-0185 (2022-02-11) A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length An unprivileged (in case of unprivileged user namespaces enabled, otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a f