257 matches found
CVE-2025-54897 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-54897
CVE-2025-54897 is a Microsoft SharePoint remote code execution vulnerability caused by deserialization of untrusted data, enabling an authorized attacker to execute code over the network. The CVSSv3.1 base score is 8.8 ( HIGH ), with network access, low attack complexity, and low privileges requi...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-18824)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
CVE-2025-53760
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2025-49712 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-53760 Microsoft SharePoint Elevation of Privilege Vulnerability
...
August “In the Trend of VM” (#18): vulnerabilities in Microsoft Windows and SharePoint
August "In the Trend of VM" 18: vulnerabilities in Microsoft Windows and SharePoint. A traditional monthly roundup - this time, it's extremely short. Post on Habr rus Digest on the PT website rus Only two trending vulnerabilities: Remote Code Execution - Microsoft SharePoint Server "ToolShell"...
Exploit for Deserialization of Untrusted Data in Microsoft
🚀 SharePoint CVE-2025-53770 RCE Vulnerability Checker !Licen...
Microsoft SharePoint 代码问题漏洞
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
(Pwn2Own) Microsoft SharePoint ToolPane Authentication Bypass Vulnerability
This vulnerability allows remote attackers to bypass authentication on affected installations of Microsoft SharePoint. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ToolPane endpoint. The application does not adequately restrict access to a...
Exploit for Deserialization of Untrusted Data in Microsoft
OurSharePoint - CVE-2025-53770 PoC This is a simple C tool...
National Nuclear Security Administration Systems Breached in SharePoint Cyberattack
National Nuclear Security Administration and National Institutes of Health targeted in global Microsoft SharePoint vulnerability exploitation. Chinese hacking groups suspected in widespread data breaches...
Microsoft Put Older Versions of SharePoint on Life Support. Hackers Are Taking Advantage
Multiple hacking groups—including state actors from China—have targeted a vulnerability in older, on-premises versions of the file-sharing tool after a flawed attempt to patch it...
Imperva Customers Protected Against Critical “ToolShell” Zero‑Day in Microsoft SharePoint
A critical zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53770, is under active exploitation in the wild. The vulnerability, with a CVSS score of 9.8, impacts on-premises SharePoint Server 2016, 2019, and Subscription Edition, and allows unauthenticated remote code execution...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-53770 Scanner by DanSec A simple, effective reconn...
Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access
The recently disclosed critical Microsoft SharePoint vulnerability has been under exploitation as early as July 7, 2025, according to findings from Check Point Research. The cybersecurity company said it observed first exploitation attempts targeting an unnamed major Western government, with the...
PT-2025-30549 · Undefined · Undefined
@FBI @CISAgov Federal systems remained unpatched against CVE-2025-35824—a critical SharePoint flaw exploited since July 19—when CISA’s emergency directive dropped 72 hours ago. Now the same agencies warning about ransomware can’t secure their own networks storing defense contracts and health...
Microsoft SharePoint Improper Authentication Vulnerability
Microsoft SharePoint contains an improper authentication vulnerability that allows an authorized attacker to perform spoofing over a network. Successfully exploitation could allow an attacker to view sensitive information and make some changes to disclosed information. This vulnerability could be...
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the incorrect path name restrictions for the restricted access catalog, allowing attackers to perform spear-phishing attacks.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to perform spear-phishing attacks remotely...