Exploit for Deserialization of Untrusted Data in Microsoft

🗓️ 10 Jul 2024 07:00:48Reported by testanullType

githubexploit

githubexploit🔗 github.com👁 140 Views

Exploit PoC for Deserialization vulnerabilities in Microsoft SharePoint affecting multiple CVEs

Reporter	Title	Published	Views	Family All 58
ATTACKERKB	CVE-2024-38094	9 Jul 202400:00	–	attackerkb
Information Security Automation	The severity of the Remote Code Execution – Microsoft SharePoint (CVE-2024-38094) vulnerability has increased	27 Oct 202416:24	–	avleonov
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server lies in their deserialization mechanism flaws, which allows attackers to execute arbitrary code.	15 Jul 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.	17 Jul 202400:00	–	bdu_fstec
Circl	CVE-2024-38023	10 Jul 202404:00	–	circl
Circl	CVE-2024-38024	10 Jul 202409:41	–	circl
Circl	CVE-2024-38094	9 Jul 202419:48	–	circl
CISA KEV Catalog	Microsoft SharePoint Deserialization Vulnerability	22 Oct 202400:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	22 Oct 202412:00	–	cisa

31 Aug 2025 09:07Current

7.3High risk

Vulners AI Score7.3

CVSS 3.17.2

EPSS0.55328

SSVC

microsoft sharepoint deserialization vulnerabilities cve-2024-38094 cve-2024-38024 cve-2024-38023