61 matches found
cve-2023-29357-Sharepoint
CVE 2023 29357 Information SharePoint Target Windows Server 2016 with SharePoint 2019 Login : FSI\Administrateur Password : Admin123! IP : 192.168.56.4 Hostname : WIN-HEVUJ4GJMA6 Attacker Lubuntu Version 22.04.3 Login : fsi Password : Admin123! IP : 192.168.56.3 Setting up the test environment...
Microsoft Office SharePoint Server cross-site scripting vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a cross-site scripting vulnerability. Attackers exploit this vulnerability to carry out cross-site scripting attacks. The followi...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a cross-site scripting vulnerability. Attackers utilize this vulnerability to carry out phishing attacks. The following products...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a cross-site scripting vulnerability. Attackers exploit this vulnerability to carry out cross-site scripting attacks. The followi...
Microsoft Office SharePoint Server Authorization Vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. There are authorization-related vulnerabilities in Microsoft Office SharePoint. Attackers can exploit these vulnerabilities to execute code remotely. The followi...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a cross-site scripting vulnerability. Attackers exploit this vulnerability to carry out cross-site scripting attacks. The followi...
Microsoft Office SharePoint Server Cross-site Scripting Vulnerability
Microsoft Office SharePoint is an enterprise content collaboration and document management platform developed by Microsoft Corporation. Microsoft Office SharePoint has a cross-site scripting vulnerability. Attackers exploit this vulnerability to carry out cross-site scripting attacks. The followi...
Microsoft Patches SharePoint RCE Flaw CVE-2026-45659 Across Server Versions
Microsoft has rolled out updates to fix a remote code execution vulnerability impacting SharePoint that could be exploited by bad actors in attacks without requiring any specialized conditions to be met. The vulnerability, tracked as CVE-2026-45659 , carries a CVSS score of 8.8. It has been...
Microsoft SharePoint code-related vulnerabilities
Microsoft SharePoint is a corporate business collaboration platform developed by Microsoft Corporation in the United States. This platform is used for integrating business information and enabling sharing of work, collaboration with others, organization of projects and teams, as well as searching...
Description of the security update for SharePoint Server 2019 Language Pack: January 13, 2026 (KB5002823)
Description of the security update for SharePoint Server 2019 Language Pack: January 13, 2026 KB5002823 Applies To SharePoint Server 2019 Summary Important If you're running 2013-type workflows, you must install the August 2025 update for SharePoint Workflow Manager to your farm before you instal...
Microsoft SharePoint SQL injection vulnerability
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. An SQL injection...
Microsoft Word resource management error vulnerabilities
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. A code execution vulnerability exists in Microsoft Word, which can be exploited by an attacker to execute arbitrary code on a system...
Description of the security update for SharePoint Server 2019 Language Pack: October 14, 2025 (KB5002798)
Description of the security update for SharePoint Server 2019 Language Pack: October 14, 2025 KB5002798 Applies To SharePoint Server 2019 Summary Important If you're running 2013-type workflows, you must install the August 2025 update for SharePoint Workflow Manager to your farm before you instal...
EUVD-2024-31585
Malicious code in bioql PyPI...
Microsoft Word security vulnerabilities
Microsoft Word is a word processing software in the Office suite of Microsoft Corporation USA. A security vulnerability exists in Microsoft Word. An attacker exploiting this vulnerability could gain access to sensitive information. The following products and editions are affected:Microsoft...
Description of the security update for SharePoint Server 2019: August 12, 2025 (KB5002769)
Description of the security update for SharePoint Server 2019: August 12, 2025 KB5002769 Applies To SharePoint Server 2019 Summary This security update resolves a Microsoft SharePoint remote code execution vulnerability, Microsoft SharePoint elevation of privilege vulnerability, Microsoft Word...
📄 Microsoft SharePoint 2019 NTLM Authentication Information Disclosure
Microsoft SharePoint Central Administration improperly exposes NTLM-authenticated endpoints to low-privileged or even brute-forced domain accounts. Once authenticated, an attacker can access the api/web endpoint, disclosing rich metadata about the SharePoint site, including user group...
CVE-2024-33880
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. It discloses full pathnames via Virto.SharePoint.FileDownloader/Api/Download.ashx?action=archive...
CVE-2024-33881
An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileDownloader/Api/Download.ashx isCompleted method allows an NTLMv2 hash leak via a UNC share pathname in the path parameter...