Lucene search
+L

9773 matches found

Cvelist
Cvelist
•added 2026/08/06 11:22 p.m.•45 views

CVE-2026-70332 Microsoft Office SharePoint Spoofing Vulnerability

...

9.6CVSS0.00863EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2026/08/06 2:00 p.m.•27 views

Microsoft Office SharePoint Spoofing Vulnerability

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

9.6CVSS8.1AI score0.00863EPSS
SaveExploits0
GithubExploit
GithubExploit
•added 2026/08/06 1:30 p.m.•38 views

Exploit for Missing Authentication for Critical Function in Microsoft

CVE-2026-56164 — Microsoft SharePoint Server Authentication By...

9.8CVSS6.8AI score0.01011EPSS
SaveExploits1
Kaspersky
Kaspersky
•added 2026/08/06 12:00 a.m.•18 views

KLA91193 Multiple vulnerabilities in Microsoft Office

Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Service Bus can be exploited...

10CVSS8.7AI score0.01694EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/06 12:00 a.m.•3 views

CVE-2026-70332: Improper Neutralization of Input During Web Page Generation

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...

9.6CVSS8.1AI score0.00863EPSS
SaveExploits0References4
The Hacker News
The Hacker News
•added 2026/08/05 11:43 a.m.•48 views

Kali365 Weaponizes Microsoft Authentication Against US Companies: New Enterprise Risk

Kali365 is turning a legitimate Microsoft login into a gateway to corporate data. The phishing kit targets US organizations with attacker-controlled device codes that victims approve on Microsoft's real authentication page. Once access and refresh tokens are issued, attackers may retain access to...

5.8AI score
SaveExploits0
Kitploit
Kitploit
•added 2026/08/04 8:55 p.m.•16 views

CVE-2026-50522 — Updated!

CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 payloads and analysis. HTTP requests request| src| user-agent| encoding| unique id| payload ---|---|---|---|---|--- 816978882| 45.63.58.216| Mozilla/5.0 Windows NT 10.0; Win64; x64 AppleWebKit/537.36| '|...

9.8CVSS8AI score0.03042EPSS
SaveExploits4References10
GithubExploit
GithubExploit
•added 2026/08/04 12:15 p.m.•25 views

Exploit for Deserialization of Untrusted Data in Microsoft

cve-2025-53770-research 🚨 Threat intel & incident response...

9.8CVSS7.8AI score0.99998EPSS
SaveExploits42
BDU FSTEC
BDU FSTEC
•added 2026/08/03 12:00 a.m.•16 views

The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

7.8CVSS5.9AI score0.00571EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/08/03 12:00 a.m.•14 views

The vulnerability of Microsoft Word, Microsoft Office products, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server lies in their ability to exploit memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

7.8CVSS5.9AI score0.00571EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•13 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00571EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•11 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint, related to integer overflow, allows attackers to disclose sensitive information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose protected information...

6.2CVSS5.5AI score0.00449EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•15 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint arises from an operation that occurs outside of the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint stems from the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

7.8CVSS6.3AI score0.00571EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•20 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

5.5CVSS5.5AI score0.00583EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•12 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

8.7CVSS5.5AI score0.00946EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•14 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the structure of web pages, allowing attackers to perform spear-phishing attacks.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

5.5CVSS5.5AI score0.00583EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•14 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

5.5CVSS5.6AI score0.00595EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•15 views

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory, allowing an attacker to disclose protected information.

The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is protected by these systems...

5.5CVSS6.4AI score0.00595EPSS
SaveExploits0References2Affected Software7
BDU FSTEC
BDU FSTEC
•added 2026/07/31 12:00 a.m.•15 views

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in their authentication procedures, which allow attackers to bypass existing security mechanisms.

The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server lies in the deficiencies of its authentication procedures. Exploiting this vulnerability could allow attackers to bypass existing security mechanisms remotely...

9.4CVSS6.7AI score0.69536EPSS
SaveExploits5References5Affected Software3
Cvelist
Cvelist
•added 2026/07/30 12:25 p.m.•46 views

CVE-2026-54366 CentreStack < 17.4 XXE via SharePoint Storage Configuration

CentreStack before 17.4 contains an XML external entity XXE injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configuration handler. Attackers can send a crafted request to the unauthenticated...

8.7CVSS0.00486EPSS
SaveExploits0References2
Rows per page
Query Builder