Lucene search
+L

9994 matches found

Qualys Blog
Qualys Blog
•added 2025/07/21 10:03 p.m.•58 views

ToolShell Zero-day: Microsoft Rushes Emergency Patch for Actively Exploited SharePoint Vulnerabilities

On July 19, 2025, Microsoft issued an emergency out-of-band security update to address two zero-day vulnerabilities in Microsoft SharePoint Server: CVE-2025-53770 and CVE-2025-53771. These vulnerabilities are under active exploitation in the wild and demand immediate attention to protect your...

9.8CVSS8AI score0.99999EPSS
SaveExploits42
Talos Blog
Talos Blog
•added 2025/07/21 8:33 p.m.•28 views

ToolShell: Details of CVEs affecting SharePoint servers

Update 2025/07/22: Microsoft has released a security update for Sharepoint Enterprise Server 2016. The update, with the ID KB5002760, is available in the following link . Cisco Talos is aware of the ongoing exploitation of CVE-2025-53770 and CVE-2025-53771 in the wild. These are path traversal...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2025/07/21 6:43 p.m.•233 views

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-53770-Checker Comprueba si un servidor SharePoint on-...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits42
Wiz blog
Wiz blog
•added 2025/07/21 5:42 p.m.•18 views

SharePoint Vulnerabilities (CVE-2025-53770 & CVE-2025-53771): Everything You Need to Know

Detect and mitigate CVE-2025-53770 and CVE-2025-53771 - critical vulnerabilities in Microsoft SharePoint Server currently under active exploitation...

9.8CVSS7.4AI score0.99999EPSS
SaveExploits42
Rapid7 Blog
Rapid7 Blog
•added 2025/07/21 4:42 p.m.•18 views

CVE-2025-53770 - Zero-day exploitation in the wild of Microsoft SharePoint servers

Overview On Saturday July 19, 2025, Microsoft released an advisory for CVE-2025-53770, a critical Remote Code Execution RCE vulnerability affecting on-premise SharePoint servers. This vulnerability has been exploited in the wild as a zero-day by an unknown threat actor prior to the disclosure fro...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits42
The Hacker News
The Hacker News
•added 2025/07/21 4:27 p.m.•15 views

China-Linked Hackers Launch Targeted Espionage Campaign on African IT Infrastructure

The China-linked cyber espionage group tracked as APT41 has been attributed to a new campaign targeting government IT services in the African region. "The attackers used hardcoded names of internal services, IP addresses, and proxy servers embedded within their malware," Kaspersky researchers Den...

6AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/07/21 4:16 p.m.•305 views

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-53770 SharePoint Vulnerability Scanner 100% hacked t...

9.8CVSS7.5AI score0.99999EPSS
SaveExploits42
Krebs on Security
Krebs on Security
•added 2025/07/21 2:45 p.m.•27 views

Microsoft Fix Targets Attacks on SharePoint Zero-Day

On Sunday, July 20, Microsoft Corp. issued an emergency security update for a vulnerability in SharePoint Server that is actively being exploited to compromise vulnerable organizations. The patch comes amid reports that malicious hackers have used the SharePoint flaw to breach U.S. federal and...

9.8CVSS7.2AI score0.99999EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2025/07/21 2:19 p.m.•286 views

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-53770 This is a scanner for the SharePoint unauthen...

9.8CVSS7.8AI score0.99999EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2025/07/21 1:48 p.m.•211 views

Exploit for Deserialization of Untrusted Data in Microsoft

📌 SharePoint WebPart Injection Exploit Toolkit 🍕 Exploit too...

9.8CVSS8.6AI score0.99999EPSS
SaveExploits42
The Hacker News
The Hacker News
•added 2025/07/21 11:38 a.m.•35 views

⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

Even in well-secured environments, attackers are getting in—not with flashy exploits, but by quietly taking advantage of weak settings, outdated encryption, and trusted tools left unprotected. These attacks don’t depend on zero-days. They work by staying unnoticed—slipping through the cracks in...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits53
The Hacker News
The Hacker News
•added 2025/07/21 11:38 a.m.•11 views

⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and More

Even in well-secured environments, attackers are getting in—not with flashy exploits, but by quietly taking advantage of weak settings, outdated encryption, and trusted tools left unprotected. These attacks don’t depend on zero-days. They work by staying unnoticed—slipping through the cracks in...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits53
HackRead
HackRead
•added 2025/07/21 11:30 a.m.•10 views

Microsoft Confirms Hackers Exploiting SharePoint Flaws, Patch Now

Microsoft has released new security updates to fix two serious vulnerabilities affecting on-premises SharePoint servers, warning that attackers…...

7.5AI score
SaveExploits0
GithubExploit
GithubExploit
•added 2025/07/21 6:39 a.m.•94 views

Exploit for Deserialization of Untrusted Data in Microsoft

Microsoft SharePoint CVE-2025-53770 POC DISCLAIMER: This code...

9.8CVSS8AI score0.99999EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2025/07/21 6:29 a.m.•108 views

Exploit for Deserialization of Untrusted Data in Microsoft

ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect an...

9.8CVSS7.9AI score0.99999EPSS
SaveExploits42
GithubExploit
GithubExploit
•added 2025/07/21 5:21 a.m.•175 views

Exploit for Deserialization of Untrusted Data in Microsoft

🔐 Bluefire Redteam – SharePoint CVE-2025-53770 Detection & Rem...

9.8CVSS7.7AI score0.99999EPSS
SaveExploits42
The Hacker News
The Hacker News
•added 2025/07/21 3:30 a.m.•11 views

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks

Microsoft on Sunday released security patches for an actively exploited security flaw in SharePoint and also disclosed details of another vulnerability that it said has been addressed with "more robust protections." The tech giant acknowledged it's "aware of active attacks targeting on-premises...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits42
The Hacker News
The Hacker News
•added 2025/07/21 3:30 a.m.•18 views

Microsoft Releases Urgent Patch for SharePoint RCE Flaw Exploited in Ongoing Cyber Attacks

Microsoft on Sunday released security patches for an actively exploited security flaw in SharePoint and also disclosed details of another vulnerability that it said has been addressed with "more robust protections." The tech giant acknowledged it's "aware of active attacks targeting on-premises...

9.8CVSS7.6AI score0.99999EPSS
SaveExploits42
CNVD
CNVD
•added 2025/07/21 12:00 a.m.•11 views

Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-17497)

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...

8.8CVSS8.4AI score0.01293EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/07/21 12:00 a.m.•12 views

The vulnerability of the Microsoft SharePoint Server software, related to deserialization mechanism flaws, allows attackers to execute arbitrary code.

The vulnerability of the Microsoft SharePoint Server software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.5AI score0.99999EPSS
SaveExploits42References5
Rows per page
Query Builder