PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Microsoft Exchange Control Panel (ECP) Vulnerability CVE-2020-0688 Exploited

volexity.com | vulnerability | CVE-2020-0688 | #rce | #vulnerability-research | #threat-intelligence | #microsoft | #apt | #exploit | #exchange
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

On February 11, 2020, as part of Patch Tuesday, Microsoft released cumulative updates and a service pack that addressed a remote code execution vulnerability found in Microsoft Exchange 2010, 2013, […]
CVE
CVE-2020-0688
Published
Collected

Related coverage

vulnerability · volexity.com
Dark Halo Leverages SolarWinds Compromise to Breach Organizations
Volexity is releasing additional research and indicators associated with compromises impacting customers of the SolarWinds Orion software platform. Volexity has also published a guide for responding to the SolarWinds breach, […]
vulnerability · volexity.com
DriftingCloud: Zero-Day Sophos Firewall Exploitation and an Insidious Breach
Volexity frequently works with individuals and organizations heavily targeted by sophisticated, motivated, and well-equipped threat actors from around the world. Some of these individuals or organizations are attacked infrequently or […]
vulnerability · volexity.com
Virtual Private Keylogging: Cisco Web VPNs Leveraged for Access and Persistence
In the world of information security, there is never a dull moment. Part of the fun of working in this space is that you always get to see attackers do […]
vulnerability · volexity.com
APT Group Wekby Leveraging Adobe Flash Exploit (CVE-2015-5119)
As if the recent breach and subsequent public data dump involving the Italian company Hacking Team wasn’t bad enough, it all gets just a little bit worse. Emerging from the […]
research · volexity.com
Afghan Government Compromise: Browser Beware
Visiting a wide-ranging number of websites associated with the Government of Afghanistan may yield visitors an unwanted surprise. For the second time this year, malicious code has surfaced on, cdn.afghanistan.af, […]
research · volexity.com
Drupal Vulnerability: Mass Scans & Targeted Exploitation
Yesterday (October 15, 2014), a critical SQL injection vulnerability in version 7 of the popular open source content management system (CMS) Drupal was disclosed by Stefan Horst and detailed in […]
Back