mssharepoint-scanner

MS SharePoint 扫描器 一个单文件、无依赖的 防御性 工具，用于 Microsoft SharePoint，将 服务发现 （单个或批量）与针对两个关键本地部署漏洞的 CVE 评估 相结合： CVE-2026-55040 （严重 9.1）— JWT 令牌身份验证绕过 CVE-2026-63520 （高危 8.1）— 通过 BDC 模型 / 不安全的 .NET 类型实例化实现远程代码执行 全部集成在一个源文件中 — 无需单独的脚本。 功能 1. 服务发现 在单个目标或大型网络中查找 SharePoint 服务器： 输入类型| 示例 ---|--- 域名|...

Rapid7 Analysis: Microsoft SharePoint Remote Code Execution (CVE-2026-63520)

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-63520

CVE-2026-63520 is an improper input validation vulnerability in Microsoft SharePoint Server that allows an unauthorized attacker to achieve remote code execution over a network with no privileges or user interaction required, though attack complexity is high. It affects SharePoint Server 2016 , 2...

Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE

Security researchers found a way to enter Microsoft SharePoint servers as any user, including an administrator, with no valid account. A significant part of the work that found it was done through an AI agent. The flaw, tracked as CVE-2026-55040 CVSS 9.1, affects SharePoint Server Subscription...

CVE-2026-63520

creationtimestamp| type| source ---|---|--- 2026-08-11 14:10:50+00:00| seen| https://bsky.app/profile/infosecbot.bsky.social/post/3msss6utij425 2026-08-11 17:32:13+00:00| seen| https://bsky.app/profile/arc-codex.com/post/3mst5gyl7bk2z 2026-08-11 18:00:03+00:00| published-proof-of-concept|...