8860 matches found
Malicious code in proactive-angular-sharepoint (npm)
The package proactive-angular-sharepoint was found to contain malicious code...
MAL-2025-29675 Malicious code in proactive-angular-sharepoint (npm)
The package proactive-angular-sharepoint was found to contain malicious code...
CVE-2025-49712
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-53760
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
August Microsoft Patch Tuesday
August Microsoft Patch Tuesday. A total of 132 vulnerabilities, 20 fewer than in July. Of these, 25 were added between the July and August MSPT. Three are actively exploited, including two related to the trending SharePoint "ToolShell" flaw, exploited since July 17. RCE - Microsoft SharePoint...
Exploit for Deserialization of Untrusted Data in Microsoft
ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Microsoft Office including SharePoint, Visio, Word, Excel and PowerPoint. The vulnerabilities in Microsoft Office include several "use after free" errors, heap-based buffer overflows and other vulnerabilities that allow unauthorized attackers to execute...
CVE-2025-53760
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2025-53760
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2025-49712
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-49712
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-49712
CVE-2025-49712 covers a remote code execution in Microsoft SharePoint caused by deserialization of untrusted data. Connected sources confirm this affects SharePoint Server (2016/2019 and related Office SharePoint components) and is tractable via network access with low privileges (CVSS v3.1: AV:N...
CVE-2025-49712 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-49712 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-53760 Microsoft SharePoint Elevation of Privilege Vulnerability
...
CVE-2025-53760
CVE-2025-53760 is a Microsoft SharePoint elevation-of-privilege vulnerability described as an SSRF issue that can allow an authorized attacker to gain elevated privileges over a network. The CVSS v3.1 score is 7.1 (HIGH) with Network attack vector, low attack complexity, and privileges required: ...
CVE-2025-53760 Microsoft SharePoint Elevation of Privilege Vulnerability
...
August “In the Trend of VM” (#18): vulnerabilities in Microsoft Windows and SharePoint
August "In the Trend of VM" 18: vulnerabilities in Microsoft Windows and SharePoint. A traditional monthly roundup - this time, it's extremely short. Post on Habr rus Digest on the PT website rus Only two trending vulnerabilities: Remote Code Execution - Microsoft SharePoint Server "ToolShell"...
