3593 matches found
Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE
Microsoft SharePoint Server 2016, 2019, Subscription Edition = 2026.3.1 contains a remote code execution vulnerability in the WS-Federation passive sign-in endpoint /trust/default.aspx. The SharePoint authentication module SPFederationAuthenticationModuleV2 uses a deflate-only...
cve-2025-53770
CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...
Blackash-CVE-2025-53770
🧠 CVE-2025-53770 : Critical SharePoint RCE Vulnerability Exploited via ViewState Forgery 📌 Vulnerability Overview Type : Remote Code Execution RCE CVSS Score : 9.8 Critical Component : Microsoft SharePoint Server on-prem Root Cause : Insecure deserialization of ViewState data using stolen ASP.NET...
CVE-2025-53770
CVE-2025-53770 – Microsoft SharePoint Server 2019 Unauthenticated RCE via Deserialization Exploit Author: Agampreet Singh Tool: RedRoot https://github.com/Agampreet-Singh/RedRoot Date: August 7, 2025 Tested On: SharePoint Server 2019 v16.0.10383.20020 on Windows Server 2019 CVE-ID: CVE-2025-53770...
SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation
SOC227 - Microsoft SharePoint Server Elevation of Privilege CVE-2023-29357 Exploitation CVE-2023-29357 is a critical privilege escalation vulnerability that, when combined with other vulnerabilities, could potentially lead to remote code execution. The CVSS score for this vulnerability is 9.8...
sharepoint-toolshell-micro-postmortem
Incident Micro-Postmortem — Microsoft SharePoint On-Prem “ToolShell” Campaign This kit triages the mid-2025 “ToolShell” zero-day campaign against on-premises Microsoft SharePoint Server; SharePoint Online is out of scope. It delivers end-to-end reproducible hunts, comms, and figures without relyi...
sharepoint-2026-poc
SharePoint /trust WS-Federation Deserialization: PoC & Detection Notes Live writeup GitHub Pages: https://sp-poc.wismansec.com/ HTML rendering of this document. Affected: SharePoint Server 2016, 2019, and Subscription Edition. Reconstruction of a SharePoint Server Subscription Edition intrusion i...
POC-CVE-2026-56164-exploit
CVE-2026-56164 — Microsoft SharePoint Server Authentication Bypass Exploit Critical CVSS 9.8 — Unauthenticated Privilege Escalation to Farm Administrator in Microsoft SharePoint Server Table of Contents Overview Vulnerability Details Affected Versions Architecture Diagrams Project Structure...
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell
LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell Introduction I went into a SharePoint zero-day called ToolShell CVE-2025-53770 in the LetsDefend lab. I mimicked a real-world zero-day attack where a malicious POST request bypassed auth, ran PowerShell to steal MachineKeySection key...
CVE-2023-29357-Check
CVE-2023-29357 Microsoft SharePoint Server Elevate Privilege Vulnerability This script will tell you if the target is vulnerable to CVE-2023-29357 Usage root@kitploit: python3 script.py Disclaimer This script is for educational purposes only. Do not use it against targets without prior mutual...
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-58639
CVE-2026-58639 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint. The NVD entries indicate an authorized attacker can leverage SSRF to spoof over a network with a base CVSS v3.1 score of 6.5 (Medium): attack vector NETWORK, user interaction NONE, privileges required LO...
CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-62839
CVE-2026-62839 describes insufficient protection of credentials in Microsoft Office SharePoint, enabling an authorized attacker to perform network spoofing. The vulnerability is triggered by inadequate credential handling in SharePoint, which may allow an attacker with low privileges and network ...
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-70326
CVE-2026-70326 describes a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that enables an authorized attacker to elevate privileges over a network . Publicly documented details indicate the affected product is SharePoint Server, with the underlying impact being el...