SnaffPoint

SnaffPoint Qué es SnaffPoint es una herramienta para pentesters que necesitan un poco de dulzura en este mundo. Debería ayudarte a encontrar archivos sensibles disponibles en SharePoint online y en archivos compartidos de OneDrive de tu empresa o de tu cliente. Cómo funciona En realidad hay 2...

Vulnerability of the Microsoft SharePoint Online content management software, related to spear-phishing attacks

The vulnerability of the Microsoft SharePoint Online content management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Support Statement — Microsoft 365 Changes to Throttling Enforcement

Support Statement This article documents upcoming changes Microsoft is making to application throttling enforcement in Microsoft 365 environments and its potential impact on customers using Veeam Backup for Microsoft 365 and Veeam Data Cloud for Microsoft 365. What's changing? Microsoft has...

The vulnerability of the Microsoft SharePoint Online content management software is related to deficiencies in the deserialization mechanism, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft SharePoint Online content management software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

EUVD-2025-198371

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

CVE-2025-59245

CVE-2025-59245 is a Microsoft SharePoint Online elevation-of-privilege vulnerability. Connected sources describe the flaw as a code/ deserialization issue in SharePoint Online that could allow an attacker with network access and no user interaction to achieve high-impact permissions escalation (C...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

CVE-2025-59245: Deserialization of Untrusted Data

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

PT-2025-47642

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Online affected versions not specified Description The software contains an elevation of privilege flaw that could allow remote attackers to gain administrative control through unsafe deserialization. The flaw allows...

EUVD-2018-20175

Malware in sbrugna...

EUVD-2023-50857

Malicious code in bioql PyPI...

Code injection

An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a Sharepoint site then that user would have read permissions to all content on the...

CVE-2023-46666

Summary: CVE-2023-46666 affects Elastic Sharepoint Online Python Connector. The issue arises when using Document Level Security with the SPO “Limited Access” feature: a user granted limited access to a single item could read all content on the SharePoint site through Elasticsearch. Affected compo...

CVE-2023-46666: Improper Access Control

An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a Sharepoint site then that user would have read permissions to all content on the...

Elastic Sharepoint Online Python Connector v8.10.3.0 Security Update

Elastic Sharepoint Online Python Connector Improper Access Control ESA-2023-18 An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a...