10113 matches found
Microsoft Office 资源管理错误漏洞
Microsoft Office is an office software suite product from the U.S.-based Microsoft Corporation Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and others. A resource management error vulnerability exists in Microsoft Office. An attacker can...
PT-2025-15579
Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue is related to improper authorization, allowing an authorized attacker to execute code over a network. This enables remote attackers to execute arbitrary code a...
Microsoft SharePoint 授权问题漏洞
Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft...
CVE-2025-29793: Deserialization of Untrusted Data
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2025-15578 · Microsoft · Sharepoint Server
Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue allows an authorized attacker to execute code over a network by deserializing untrusted data. This enables remote attackers to execute arbitrary code and affec...
Security Updates for Microsoft SharePoint Server 2019 (April 2025)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-26642, CVE-2025-27747, CVE-2025-29793, CVE-2025-29794 %NASLMINLEVEL 7030...
CVE-2025-29794: Improper Authorization
Improper authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
Security Updates for Microsoft SharePoint Server Subscription Edition (April 2025)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple Remote Code Execution vulnerabilities: - Remote Code Execution Vulnerabilites. CVE-2025-29793, CVE-2025-29794 %NASLMINLEVEL 70300 C Tenable, Inc...
FIN7 Deploys Anubis Backdoor to Hijack Windows Systems via Compromised SharePoint Sites
The financially motivated threat actor known as FIN7 has been linked to a Python-based backdoor called Anubis not to be confused with an Android banking trojan of the same name that can grant them remote access to compromised Windows systems. "This malware allows attackers to execute remote shell...
PT-2025-14011 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft Azure Health Bot affected versions not specified Microsoft SharePoint Server affected versions not specified Description: The issue is related to a Server-Side Request Forgery SSRF vulnerability. An authenticated attacker can exploi...
Security Bulletin: CVE-2023-50164 affects Apache Struts2 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint
Summary Vulnerability found in Apache Struts2 used by Content Collector for Email, Content Collector for File Systems and Content Collector for Microsoft SharePoint. This bulletin identifies the steps to take to address the vulnerability. Vulnerability Details CVEID:CVE-2023-50164 DESCRIPTION:...
"SharePoint Server backup is not configured for this organization."
Challenge A SharePoint backup job in Veeam Data Cloud for Microsoft 365 fails with the following error: SharePoint Server backup is not configured for this organization. Note: This error occurs despite SharePoint being correctly configured in Microsoft 365. Cause The issue occurs for specific...
CVE-2025-1080
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with...
UBUNTU-CVE-2025-1080
LibreOffice supports Office URI Schemes to enable browser integration of LibreOffice with MS SharePoint server. An additional scheme 'vnd.libreoffice.command' specific to LibreOffice was added. In the affected versions of LibreOffice a link in a browser using that scheme could be constructed with...
PT-2025-9702 · Document Foundation +9 · Libreoffice +9
Name of the Vulnerable Software and Affected Versions: LibreOffice versions 24.8 through 24.8.4 LibreOffice versions 25.2 through 25.2.0 Description: The issue affects LibreOffice's integration with MS SharePoint server, where an additional scheme 'vnd.libreoffice.command' was added to support...
Hackers Use ClickFix Trick to Deploy PowerShell-Based Havoc C2 via SharePoint Sites
Cybersecurity researchers are calling attention to a new phishing campaign that employs the ClickFix technique to deliver an open-source command-and-control C2 framework called Havoc. "The threat actor hides each malware stage behind a SharePoint site and uses a modified version of Havoc Demon in...
Microsoft SharePoint Input Validation Error Vulnerability (CNVD-2025-02964)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An input validation...
Microsoft SharePoint Authorization Issues Vulnerability (CNVD-2025-02968)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. Microsoft SharePoint ...
Microsoft SharePoint Cross-Site Scripting Vulnerability (CNVD-2025-02967)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A cross-site scriptin...
