257 matches found
PT-2026-33169
🔴 SharePoint CVE-2026-32115 is under active exploitation. Patch now. 🔴 Marimo CVE-2026-29104 targets exposed notebooks for cloud credential theft. 🟡 108 malicious Chrome extensions stole Google and Telegram data. https://t.co/pBWq66uIkZ...
PT-2026-29591
https://t.co/UOa9QBXyfb BSI: Critical SharePoint vulnerability is being actively attacked The German Federal Office for Information Security BSI is warning of a critical vulnerability in Microsoft SharePoint version 9.8 CVE-2026-238220-1032 that, according to available ev… https://t.co/QFBtTAIUNm...
CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA has urged government agencies to apply patches for two security flaws impacting Synacor Zimbra Collaboration Suite ZCS and Microsoft Office SharePoint, stating they have been actively exploited in the wild. The vulnerabilities in...
CVE-2026-20958 Microsoft SharePoint Information Disclosure Vulnerability
...
CVE-2026-20958 Microsoft SharePoint Information Disclosure Vulnerability
...
PT-2026-2747
🟠 CVE-2026-20947 - High Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. https://t.co/plm6gTTLxj https://t.co/1kjK6Hr4sV...
PT-2026-2757
CVE-2026-20958 Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network. https://t.co/27qwZPmRNM...
Microsoft SharePoint 代码问题漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing work, collaborating with others, organizing projects and workgroups, and searching for people and information. A code issue vulnerabili...
CVE-2025-64672
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
About Remote Code Execution – Microsoft SharePoint “ToolShell” (CVE-2025-49704) vulnerability
About Remote Code Execution - Microsoft SharePoint "ToolShell" CVE-2025-49704 vulnerability. This vulnerability is from the Microsoft's July Patch Tuesday. SharePoint is a web application developed by Microsoft for corporate intranet portals, document management, and collaborative work...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in several Office products. A malicious party can exploit the vulnerabilities to grant themselves elevated privileges, execute arbitrary code in the victim's context and gain access to sensitive data. Successful exploitation requires the malicious party to tric...
CVE-2025-62204
CVE-2025-62204 describes a remote code execution vulnerability in Microsoft Office SharePoint caused by deserialization of untrusted data. Connected sources confirm impact across SharePoint Server on premises: SharePoint Server 2016 (KB for November 2025), SharePoint Server 2019, and SharePoint S...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-24451)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
CVE-2025-59237
CVE-2025-59237 is a SharePoint remote code execution vulnerability described as deserialization of untrusted data allowing an authenticated attacker to run code over the network. The advisory includes a CVSS v3.1 base score of 8.8 (HIGH) with network access, low attack complexity, and privileges ...
CVE-2025-59228 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-59228 Microsoft SharePoint Remote Code Execution Vulnerability
...
Description of the security update for SharePoint Server 2019: October 14, 2025 (KB5002796)
None None...
Microsoft SharePoint 代码问题漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
Hackers Turn Velociraptor DFIR Tool Into Weapon in LockBit Ransomware Attacks
Threat actors are abusing Velociraptor, an open-source digital forensics and incident response DFIR tool, in connection with ransomware attacks likely orchestrated by Storm-2603 aka CL-CRI-1040 or Gold Salem, which is known for deploying the Warlock and LockBit ransomware. The threat actor's use ...
