SnaffPoint

SnaffPoint What is it SnaffPoint is a tool for pointesters who are in need of some sweetness in this world. It should help you find sensitive files available on SharePoint online and on shared OneDrive files for your company or your customer. How does it work There are actually 2 tools:...

Vulnerability of the Microsoft SharePoint Online content management software, related to spear-phishing attacks

The vulnerability of the Microsoft SharePoint Online content management software is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks remotely...

Support Statement — Microsoft 365 Changes to Throttling Enforcement

Support Statement This article documents upcoming changes Microsoft is making to application throttling enforcement in Microsoft 365 environments and its potential impact on customers using Veeam Backup for Microsoft 365 and Veeam Data Cloud for Microsoft 365. What's changing? Microsoft has...

The vulnerability of the Microsoft SharePoint Online content management software is related to deficiencies in the deserialization mechanism, which allows attackers to escalate their privileges.

The vulnerability of the Microsoft SharePoint Online content management software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

EUVD-2025-198371

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

CVE-2025-59245

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

CVE-2025-59245

CVE-2025-59245 is a Microsoft SharePoint Online elevation-of-privilege vulnerability. Connected sources describe the flaw as a code/ deserialization issue in SharePoint Online that could allow an attacker with network access and no user interaction to achieve high-impact permissions escalation (C...

CVE-2025-59245 Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

Microsoft SharePoint Online Elevation of Privilege Vulnerability

...

PT-2025-47642

Name of the Vulnerable Software and Affected Versions Microsoft SharePoint Online affected versions not specified Description The software contains an elevation of privilege flaw that could allow remote attackers to gain administrative control through unsafe deserialization. The flaw allows...

CVE-2025-59245: Deserialization of Untrusted Data

Microsoft SharePoint Online Elevation of Privilege Vulnerability...

EUVD-2018-20175

Malware in sbrugna...

EUVD-2023-50857

Malicious code in bioql PyPI...

Code injection

An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a Sharepoint site then that user would have read permissions to all content on the...

CVE-2023-46666

Summary: CVE-2023-46666 affects Elastic Sharepoint Online Python Connector. The issue arises when using Document Level Security with the SPO “Limited Access” feature: a user granted limited access to a single item could read all content on the SharePoint site through Elasticsearch. Affected compo...

CVE-2023-46666: Improper Access Control

An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a Sharepoint site then that user would have read permissions to all content on the...

Elastic Sharepoint Online Python Connector v8.10.3.0 Security Update

Elastic Sharepoint Online Python Connector Improper Access Control ESA-2023-18 An issue was discovered when using Document Level Security and the SPO "Limited Access" functionality in Elastic Sharepoint Online Python Connector. If a user is assigned limited access permissions to an item on a...