4134 matches found
About Remote Code Execution – Microsoft SharePoint Server “ToolShell” (CVE-2025-53770) vulnerability
About Remote Code Execution - Microsoft SharePoint Server "ToolShell" CVE-2025-53770 vulnerability. SharePoint is a web application developed by Microsoft for corporate intranet portals, document management, and collaborative work. A flaw in the deserialization mechanism of an on-premises...
Exploit for Deserialization of Untrusted Data in Microsoft
🚨 CVE‑2025‑53770 – SharePoint Zero-Day Variant Exploited for F...
Exploit for Deserialization of Untrusted Data in Microsoft
ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect an...
Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2025-16687)
SharePoint Server is a locally deployed enterprise collaboration platform from Microsoft that supports content sharing, knowledge management, and application integration, and works seamlessly with Microsoft 365 subscriptions to access the latest features. A spoofing vulnerability exists in...
Microsoft SharePoint Server Deserialization RCE
The vulnerability of the Microsoft SharePoint Server software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2025-53771 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2025-53771
CVE-2025-53771 is an authentication spoofing (patch-bypass) vulnerability in Microsoft SharePoint Server on-premises, enabling bypass of access checks on /layouts/15/ToolPane.aspx (DisplayMode=Edit) via crafted Referer headers. Connected docs also describe a related RCE chain when paired with CVE...
Description of the security update for SharePoint Server Subscription Edition: July 21, 2025 (KB5002768)
None None...
Description of the security update for SharePoint Server 2016 Language Pack: July 21, 2025 (KB5002759)
None None...
Description of the security update for SharePoint Server 2016: July 21, 2025 (KB5002760)
None None...
Description of the security update for SharePoint Server 2019: July 21, 2025 (KB5002754)
None None...
Description of the security update for SharePoint Server 2019 Language Pack: July 21, 2025 (KB5002753)
None None...
Microsoft SharePoint Server Spoofing Vulnerability
Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CISA Adds One Known Exploited Vulnerability, CVE-2025-53770 “ToolShell,” to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. See CISA’s Alert Microsoft Releases Guidance on Exploitation of SharePoint Vulnerability CVE-2025-53770 for more information and to apply the recommended mitigations...
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2025-53770 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
EUVD-2025-22538
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
EUVD-2025-23309
Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an unauthorized attacker to execute code over a network. Microsoft is aware that an exploit for CVE-2025-53770 exists in the wild. Microsoft is preparing and fully testing a comprehensive update to address this...
Security Updates for Microsoft SharePoint Server 2019
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to...
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability
Microsoft SharePoint Server on-premises contains a deserialization of untrusted data vulnerability that could allow an unauthorized attacker to execute code over a network. This vulnerability could be chained with CVE-2025-53771. CVE-2025-53770 is a patch bypass for CVE-2025-49704, and the update...