sharepoint-2026-poc

Desserialização WS-Federation /trust do SharePoint: PoC e notas de detecção Artigo ao vivo GitHub Pages: https://sp-poc.wismansec.com/ renderização HTML deste documento. Afetados: SharePoint Server 2016, 2019 e Subscription Edition. Reconstrução de uma intrusão em um SharePoint Server Subscriptio...

GadgetToJScript

विवरण यह .NET सीरियलाइज़्ड गैजेट्स जनरेट करने का एक टूल है, जो JS/VBS/VBA स्क्रिप्ट्स से BinaryFormatter का उपयोग करके डीसीरियलाइज़ किए जाने पर .NET असेंबली लोड/निष्पादन को ट्रिगर कर सकते हैं। वर्तमान गैजेट jscript/vbscript/vba से BinaryFormatter का उपयोग करके डीसीरियलाइज़ किए जाने पर...

Exploit for CVE-2026-26221

📡 Hyland OnBase Timer Service Unauthenticated RCE Mohamm...

Exploit for CVE-2025-59287

In this study, we will examine a critical vulnerability CVE-202...

EUVD-2022-48060

Malicious code in bioql PyPI...

Sitecore CVE-2025-27218 BinaryFormatter Deserialization

This Metasploit module exploits a .NET deserialization vulnerability in Sitecore Experience Manager XM and Experience Platform XP 10.4 by injecting a malicious Base64-encoded BinaryFormatter payload into an HTTP header. This module requires Metasploit: https://metasploit.com/download Current...