3561 matches found
Security Updates for Microsoft SharePoint Server 2019 (September 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-54897, CVE-2025-54905 - Information Disclosure Vulnerability CVE-2025-54906 %NASLMINLEVEL 70300...
Security Updates for Microsoft SharePoint Server Subscription Edition (September 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by a remote code execution Vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Security Updates for Microsoft SharePoint Server 2016 (September 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-54897, CVE-2025-54905 - Information Disclosure Vulnerability CVE-2025-54906 %NASLMINLEVEL 70300...
Description of the security update for SharePoint Server Subscription Edition: August 12, 2025 (KB5002773)
None None...
Description of the security update for SharePoint Server 2016: August 12, 2025 (KB5002771)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: August 12, 2025 (KB5002770)
None None...
📄 Microsoft SharePoint Server 2019 16.0.10383.20020 Remote Code Execution
Microsoft SharePoint Server 2019 version 16.0.10383.20020 proof of concept that demonstrates unauthenticated remote code execution by exploiting unsafe deserialization in SharePoint's ToolPane.aspx via the Scorecard:ExcelDataSet control. Exploit Title: Microsoft SharePoint Server 2019 – Remote Co...
Security Updates for Microsoft SharePoint Server 2019 (August 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Elevation of Privilege Vulnerability. CVE-2025-53760 - Information Disclosure Vulnerability CVE-2025-53736 - Remote Code Execution...
Security Updates for Microsoft SharePoint Server Subscription Edition (August 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by an privilege escalation Vulnerability. %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description...
Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)
Exploit Title: Microsoft SharePoint Server 2019 – Remote Code Execution RCE Google Dork: intitle:"Microsoft SharePoint" inurl:"/layouts/15/ToolPane.aspx" Date: 2025-08-07 Exploit Author: Agampreet Singh RedRoot Tool Maker – https://github.com/Agampreet-Singh/RedRoot Vendor Homepage:...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-53770 – Microsoft SharePoint Server 2019 Unauthentica...
📄 Microsoft SharePoint Server ToolPane Unauthenticated Remote Code Execution
This Metasploit module exploits the authentication bypass vulnerabilities CVE-2025-49706 and CVE-2025-53771, and an unsafe deserialization vulnerability CVE-2025-49704, to achieve unauthenticated RCE against a vulnerable Microsoft SharePoint Server. The vulnerability CVE-2025-53770 was disclosed ...
Exploit for Deserialization of Untrusted Data in Microsoft
SharePoint "ToolShell" RCE Exploit CVE-2025-53770 Overvi...
Zeroday vulnerabilities discovered in Microsoft SharePoint Server
Microsoft has released information about actively exploited zeroday vulnerabilities in on-premises versions of Microsoft SharePoint Server. SharePoint Online part of Microsoft 365 has not been affected. The zeroday vulnerabilities, marked CVE-2025-53770 and CVE-2025-53771, allow a malicious perso...
Microsoft SharePoint Server Remote Code Execution Vulnerability
SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A remote code execution vulnerability...
Microsoft SharePoint Server Spoofing Vulnerability
SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A spoofing vulnerability exists in...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-53770 SharePoint Deserialization RCE PoC Critica...
About Remote Code Execution – Microsoft SharePoint Server “ToolShell” (CVE-2025-53770) vulnerability
About Remote Code Execution - Microsoft SharePoint Server "ToolShell" CVE-2025-53770 vulnerability. SharePoint is a web application developed by Microsoft for corporate intranet portals, document management, and collaborative work. A flaw in the deserialization mechanism of an on-premises...