CVE-2023-29357-Check

CVE-2023-29357 Microsoft SharePoint Server 权限提升漏洞 此脚本将告知您目标是否易受 CVE-2023-29357 攻击 使用方法 python3 script.py 免责声明 此脚本仅用于教育目的。未经事先双方同意，请勿将其用于攻击目标。 参考 https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29357...

ZeroPoint

ZeroPoint.ps1 ⚠ CVE-2025-53770 のゼロデイ脆弱性（ Microsoft SharePoint Server ）の悪用を検出し緩和するための防御的なPowerShellユーティリティです。 🔍 機能概要 このPowerShellスクリプトは以下のことを行います： 侵害の兆候（不審な .aspx ウェブシェルなど）を検出 ULSログを解析してデシリアライゼーション/スプーフィング活動を特定 AMSIやMicrosoft Defenderなどの重要なセキュリティ設定を確認 外部インターフェースを切断する オプションの緊急緩和策 を提供 🚨 CVE 詳細 CVE:...

CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - 恶意 Register 指令代码注入漏洞利用 描述 本仓库提供针对 Microsoft SharePoint Server 中 CVE-2026-65660（代码生成控制不当，CWE-94）的生产级漏洞利用程序。该漏洞源于未转义的引号注入到 Register 指令中，绕过 SafeControls 验证，并通过 XamlServices.Parse 反序列化实现任意代码执行。 该漏洞利用允许已授权的低权限用户注入恶意指令，实现远程代码执行、部署持久化内存 Webshell、通过 SharePoint...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server の権限昇格 CVE-2023-29357 の悪用 CVE-2023-29357 は重大な権限昇格の脆弱性であり、他の脆弱性と組み合わせることで、リモートコード実行につながる可能性があります。この脆弱性のCVSSスコアは 9.8 Critical です。 イベント情報 EventID : 189 イベント時刻 : 2023年10月6日 20:05 ルール : SOC227 - Microsoft SharePoint Server の権限昇格 - CVE-2023-29357 の悪用の可能性 レベル :...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66805

A CVE-2026-66805 entry exists with conflicting descriptions across sources. The connected Red Hat CVE details describe a flaw in the console component of a managed-cluster hub: an attacker who can write to container logs can inject malicious code into the hub console user’s browser session by vie...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-64916

CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...

CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64897

CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...

CVE-2026-65665

CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...

CVE-2026-65660

A code injection vulnerability exists in Microsoft SharePoint Server (on-premises versions 2016, 2019, and 2022) due to unescaped quote injection into Register directives . This flaw allows an authorized low-privilege user to bypass SafeControls validation and achieve remote code execution (RCE) ...