sharepoint-toolshell-cve-2025-53770

SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overview CVE-2025-53770 is a critical remote code execution RCE vulnerability affecting Microsoft SharePoint Server 2016, 2019, and Subscription Edition on-premises only, not SharePoint Online. Attackers can bypass authentication and achieve full...

drs-malware-scan

使用 AWS 服务对本地服务器进行恶意软件扫描分析 本地服务器恶意软件检测面临的挑战 受预算和资源限制，安全团队难以持续监控所有本地服务器。仅靠基于特征的防病毒软件是不够的，因为现代恶意软件使用了各种混淆技术。服务器管理员过去可能无法全面了解所有服务器上的安全事件。在事件响应期间，如果没有集中监控和告警，确定受损系统和可安全恢复的备份就变得极具挑战性。服务器管理员为高级威胁检测而设置和维护额外的安全工具也是一项繁重的工作。快速的平均检测和修复感染时间至关重要，但如果没有合适的自动化解决方案，就难以实现。...

CVE-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Crítico — Ejecución remota de código no autenticada mediante deserialización no segura en Microsoft SharePoint Server CVE-2025-53770 Descripción La deserialización de datos no confiables en Microsoft SharePoint Server local permite a un atacante...

Exploit-CVE-2023-22518

Exploit-CVE-2023-22518 CVE-2023-22518 in Confluence CVE-2023-22518: This vulnerability is described as “an improper authorization vulnerability in Confluence's database and server”. The issue affects On-premises versions of Atlassian products. Setup Environment Use the vulnerable version 8.0.4 UR...

Structurizr on-premises - Cross Site Scripting

Cross-site Scripting XSS - Reflected in GitHub repository structurizr/onpremises prior to 3194. id: CVE-2023-5556 info: name: Structurizr on-premises - Cross Site Scripting author: shankaracharya severity: medium description: | Cross-site Scripting XSS - Reflected in GitHub repository...

CVE-2025-53770

CVE-2025-53770 SharePoint Descripción La deserialización de datos no confiables en Microsoft SharePoint Server local permite que un atacante ejecute código de forma remota y comprometa el sistema. Microsoft está al tanto de la explotación activa y está preparando una actualización integral...

sharepoint-toolshell-micro-postmortem

Incident Micro-Postmortem — Microsoft SharePoint On-Prem “ToolShell” Campaign This kit triages the mid-2025 “ToolShell” zero-day campaign against on-premises Microsoft SharePoint Server; SharePoint Online is out of scope. It delivers end-to-end reproducible hunts, comms, and figures without relyi...

Azure-AD-Incident-Response-PowerShell-Module

Módulo de PowerShell de Respuesta a Incidentes de Azure AD El módulo de PowerShell de Respuesta a Incidentes de Azure Active Directory proporciona una serie de herramientas, desarrolladas por el Grupo de Producto de Azure Active Directory en conjunto con el Equipo de Detección y Respuesta de...

CVE-2026-63077

Resumen • Flujo visual • Requisitos • Uso • Limitaciones • Mitigación !CAUTION Este PoC ejecuta un comando del sistema operativo y puede modificar el directorio de la aplicación TeamCity. Úselo únicamente en un laboratorio aislado o contra sistemas para los que tenga autorización explícita por...

cve-2024-56348

JetBrains TeamCity 认证绕过 + RCE CVE-2024-56348 PoC 📜 描述 CVE-2024-56348 是一个严重的认证绕过漏洞，影响 JetBrains TeamCity 本地部署 所有早于 2024.12 的版本。REST API 错误地处理包含 ;.jsp 的路径请求，允许未经认证的攻击者像完全认证用户一样调用任意 REST 端点。 此漏洞利用将绕过与 TeamCity 自身的 REST API 结合，创建一个 SYSTEMADMIN 账户，生成 API 令牌，并实现 完全远程代码执行 — 通过内置调试端点或动态上传的 JSP 插件...

EIPP

Listas de Contraseñas Prohibidas de EIPP Herramientas para manipular Listas de Contraseñas Prohibidas BPL de Entra ID Password Protection. El archivo eipp-global-bpl.txt que contiene las entradas de la lista global de contraseñas prohibidas fue volcado el 2024-04-11. Más información en...

analyze-Exploit-CVE-2023-22518-Confluence

Exploit-CVE-2023-22518 CVE-2023-22518 en Confluence CVE-2023-22518 : Esta vulnerabilidad se describe como “vulnerabilidad de autorización incorrecta en la base de datos y el servidor de Confluence”. El fallo afecta a las versiones On-premises de los productos de Atlassian. CONFIGURACIÓN Configura...

Microsoft Dynamics 365 (on-premises) (September 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-65772 Note that Nessus has not tested fo...

Microsoft Dynamics 365 (on-premises) (September 2026)

The Microsoft Dynamics 365 on-premises is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network. CVE-2026-77908 Note that...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Improper control of generation of code 'code injection' in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability

Deserialization of untrusted data in Microsoft Dynamics 365 allows an authorized attacker to execute code over a network...

CVE-2026-19117

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...

EUVD-2026-70252

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...

CVE-2026-19117

CVE-2026-19117 affects Delinea Secret Server in on-premises deployments . Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and subsequently authenticate as that user, effectively bypassing authentication. The vulnerability is rat...

CVE-2026-19117 Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability

Under specific conditions, an attacker can register an attacker-controlled FIDO2 credential against a target account and then authenticate as that user. This issue affects on-premises deployments only...