oskarsve/ms-teams-rce
View on GitHub ↗ ★ 1,104
7 mentions on Hacker News by 6 people: 2 stories, 5 comments · first 2020-12-07 · latest 2022-02-20
20082026
-
I'm surprised Microsoft didn't categorise it as "Important, Spoofing". https://github.com/oskarsve/ms-teams-rce/blob/main/README.md
comment by dane-pgp · 2022-02-20 · in Compromising Angular via expired NPM publisher email domains -
…enough. Microsoft Teams [0], Jabber [1] and Slack [2] were all hit by real 0-interaction RCEs. [0] https://github.com/oskarsve/ms-teams-rce/blob/main/README.md [1] https://nvd.nist.gov/vuln/detail/CVE-2020-3495 [2]…
comment by shakna · 2021-06-18 · in 80% of orgs that paid the ransom were hit again -
…Teams by Oskars Vegeris.[1] [0] https://www.microsoft.com/en-us/msrc/bounty-online-services?... [1] https://github.com/oskarsve/ms-teams-rce/blob/main/README.md
comment by dane-pgp · 2021-03-06 · in Can’t use iCloud with “true” as the last name -
…ensures that XSS is "only" XSS and doesn't turn into RCE as well. 0: https://www.risky.biz/ 1: https://github.com/oskarsve/ms-teams-rce
comment by K0nserv · 2020-12-31 · in Firefox not planning on supporting PWA -
…is attempting to capitalize on the shock/outrage factor. Edit: Thanks, author has added some dates. https://github.com/oskarsve/ms-teams-rce/commit/35eac619fdef...
comment by politelemon · 2020-12-07 · in Zero-click, wormable, cross-platform remote code execution in Microsoft Teams