Research

Walkthrough of an Outlook / Exchange information-disclosure issue reachable by sending a crafted PDF that abuses a file-download token via an OAST-style callback.

• Video
• Microsoft
• Outlook
• Exchange
• OAST
• Research

Demonstration of spoofing display names when sending polls or surveys inside Microsoft Teams groups — messages appear to come from other members.

• Video
• Microsoft
• Teams
• Spoofing
• Research

Integrity failure in Microsoft Teams polls / Forms voting — because vote limits are missing, ballots can be cast under other people’s names and appear legitimate in the manager’s voter list.

• Video
• Microsoft
• Teams
• Forms
• Integrity
• Research

Demo of CVE-2023-36845 — a PHP external variable modification flaw in Juniper J-Web (EX / SRX) that lets an unauthenticated attacker set PHPRC and achieve remote code execution.

• Video
• CVE
• Juniper
• RCE
• Junos
• Research