cve-2023-29357-Sharepoint

CVE 2023 29357 Informations Cible SharePoint Windows Server 2016 avec SharePoint 2019 Login : FSI\Administrateur Password : Admin123! IP : 192.168.56.4 Hostname : WIN-HEVUJ4GJMA6 Attanquant Lubuntu Version 22.04.3 Login : fsi Password : Admin123! IP : 192.168.56.3 Mise en place de l'environnement...

irdoc-app

IRDoc - Платформа документирования реагирования на инциденты Документирование IR с приоритетом временной шкалы, визуальный конструктор отчётов, автосинхронизация с SharePoint и сводки с помощью ИИ. Что такое IRDoc? IRDoc — это платформа документирования реагирования на инциденты с открытым ядром,...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server: повышение привилегий эксплуатация CVE-2023-29357 CVE-2023-29357 — это критическая уязвимость повышения привилегий, которая в сочетании с другими уязвимостями потенциально может привести к удаленному выполнению кода. Оценка CVSS для этой уязвимости составляет...

SnaffPoint

SnaffPoint Что это SnaffPoint — это инструмент для пентестеров, которым не хватает сладости в этом мире. Он должен помочь вам находить конфиденциальные файлы, доступные в SharePoint Online и в общих файлах OneDrive вашей компании или вашего заказчика. Как это работает На самом деле есть 2...

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows -...

Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

Summary With $wgEmbedVideoRequireConsent disabled not the default, the urls for videos are passed into an iframe src attribute without sanitization. When given a malformed url or id, the src attribute can be escaped via double quotes, allowing for html/javascript injection. Details The iframe...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

Microsoft SharePoint Code Injection Vulnerability

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network...

VulnCheck KEV: CVE-2026-65660

Microsoft SharePoint contains a code injection vulnerability which could allow an authorized attacker to execute code over a network...

SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE

A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with a CVSS score of 6.5 actually enables authenticated remote code execution, according to full technical details published today by Viettel Cyber Security researcher Dinh Ho Anh Khoa. The flaw, CVE-2026-656...

About Authentication Bypass - Microsoft SharePoint (CVE-2026-55040) vulnerability

About Authentication Bypass - Microsoft SharePoint CVE-2026-55040 vulnerability. SharePoint is a web application for corporate intranet portals, document management, and collaboration. This vulnerability was disclosed as part of the July Microsoft Patch Tuesday. A remote unauthenticated attacker...

CVE-2026-69904

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69804

Time-of-check time-of-use toctou race condition in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69724

Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

CVE-2026-69716

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

CVE-2026-69690

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69683

Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69636

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network...

CVE-2026-69615

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

CVE-2026-69464

Execution with unnecessary privileges in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...