Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office SharePoint Remote Code Execution Vulnerability

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Microsoft Office SharePoint Information Disclosure Vulnerability

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office SharePoint Elevation of Privilege Vulnerability

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2025-53770

CVE-2025-53770 Este es un escáner para la vulnerabilidad de ejecución remota de código no autenticada de SharePoint, asignada con el número de CVE CVE-2025-53770. El código fue escrito mediante ingeniería inversa de un payload visto en la naturaleza. Úselo bajo su propio riesgo, no soy responsabl...

CVE-2026-45659

CVE-2026-45659 Microsoft Office SharePoint 中未受信任数据的反序列化允许经授权的攻击者通过网络执行代码。 ⚡ 简单用法 仅在安全且获得授权的环境中使用本项目，例如： 本地虚拟机 Docker 容器 隔离的实验环境 授权的渗透测试环境 示例设置： root@kitploit: git clone cd 示例用法： root@kitploit: 安装依赖 pip install -r requirements.txt 基本命令执行 python cve-2026-45659.py -t http://sp.lab.local -u...

Microsoft SharePoint Server - Authentication Bypass

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. id: CVE-2025-49706 info: name: Microsoft SharePoint Server - Authentication Bypass author: daffainfo severity: medium description: | Improper authentication in Microsoft Offi...

CVE-2025-49706-SharePoint-Spoofing-Vulnerability-Under-Active-Exploitation

🚨 CVE-2025-49706 – SharePoint 欺骗漏洞正遭到积极利用 作者：Aditya Bhatt – VAPT 专家 | 红队成员 📌 太长不看版 Microsoft SharePoint 正面临积极威胁。CVE‑2025‑49706，一个 SharePoint Server 中的欺骗漏洞，已从中等严重性演变为 现实世界武器化 ，其 变种 CVE‑2025‑53770 目前在野外被积极利用。如果你正在运行本地 SharePoint 2016、2019 或 Subscription Edition，请 立即修补 ，否则面临完全被攻陷的风险。 🧠 漏洞详情...

presentations

Mis presentaciones Se pueden encontrar más cosas en mi sitio personal: https://sites.google.com/site/zhiniangpeng root@kitploit: Explotando vulnerabilidades de RCE de preautenticación y escape de sandbox en EXSi, Typhooncon 2023 Los objetos OLE siguen siendo peligrosos hoy en día — Explotando...

CVE-2019-0604

CVE-2019-0604 CVE-2019-0604 来自 https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...

PT-2026-87491

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

Security Updates for Microsoft SharePoint Server Subscription Edition (September 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

bluefire-sharepoint-cve-2025-53770

🔐 Bluefire Redteam – SharePoint CVE-2025-53770 检测与修复工具包 此开源工具包为安全团队提供了经过实战检验的脚本，用于检测、评估并修复关键的 SharePoint 零日漏洞 CVE-2025-53770（CVSS 9.8） ——该漏洞目前正在野外被利用。 由 Bluefire Redteam 维护，这是一家全球性进攻性安全公司。 ⚠️ 关于 CVE-2025-53770 漏洞类型 ：本地 SharePoint Server 中不可信数据的反序列化 影响 ：未经身份验证的远程代码执行 RCE、MachineKey 窃取、持久性入侵 影响版本...

CVE-2023-21742

CVE-2023-21742 PoC Atención: Es solo un PoC para filtrar el atributo/propiedad, no un EXP de RCE. root@kitploit: POST /vtibin/webpartpages.asmx HTTP/1.1 Host: splab13 SOAPAction: http://microsoft.com/sharepoint/webpartpages/ConvertWebPartFormat Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0...

CVE-2018-8284-Sharepoint-RCE

CVE-2018-8284-Sharepoint-RCE...

CVE-2026-56164-EXP

Microsoft SharePoint Server 权限提升 - CVE-2026-56164 功能完整的未授权 EOP 漏洞利用。 概述 SharePoint Server 用户配置文件和网站集端点缺少关键功能身份验证 CWE-306。允许远程攻击者从匿名用户升级到网站集管理员/场管理员级别。 通过在 /vtibin/client.svc 上发送特制的 SOAP 有效载荷来绕过身份验证网关。 受影响版本 SharePoint Server Subscription Edition 16.0.19725.20434 SharePoint Server 2019...

SharePoint-CVE-2025-53770-POC

OurSharePoint - CVE-2025-53770（PoC） 这是一个简单的 C 工具，用于构建经过 GZip 压缩并 Base64 编码的 .NET DataSet 载荷，其中包含一个使用 LosFormatter 编码的内部载荷。它旨在帮助复现公开研究中描述的 SharePoint 反序列化 RCE 攻击链。 功能说明 你提供一个 Base64 编码的载荷（例如来自 ysoserial.net 生成的载荷），该工具将： 将其封装到一个有效的 .NET DataSet 中，包含自定义 XML 架构和 diffgram 使用 BinaryFormatter 序列化结果...