8950 matches found
Security Updates for Microsoft SharePoint Server 2016 (September 2025)
The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution Vulnerability. CVE-2025-54897, CVE-2025-54905 - Information Disclosure Vulnerability CVE-2025-54906 %NASLMINLEVEL 70300...
Warlock: From SharePoint Vulnerability Exploit to Enterprise Ransomware
Warlock ransomware exploits unpatched Microsoft SharePoint vulnerabilities to gain access, escalate privileges, steal credentials, move laterally, and deploy ransomware with data exfiltration across enterprise environments...
Microsoft SharePoint Elevation of Privilege Vulnerability (CNVD-2025-24452)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation of...
Microsoft SharePoint Remote Code Execution Vulnerability (CNVD-2025-18824)
Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code executi...
Malicious code in proactive-angular-sharepoint (npm)
The package proactive-angular-sharepoint was found to contain malicious code...
MAL-2025-29675 Malicious code in proactive-angular-sharepoint (npm)
The package proactive-angular-sharepoint was found to contain malicious code...
CVE-2025-49712
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-53760
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
August Microsoft Patch Tuesday
August Microsoft Patch Tuesday. A total of 132 vulnerabilities, 20 fewer than in July. Of these, 25 were added between the July and August MSPT. Three are actively exploited, including two related to the trending SharePoint "ToolShell" flaw, exploited since July 17. RCE - Microsoft SharePoint...
Exploit for Deserialization of Untrusted Data in Microsoft
ToolShell-CVE-2025-53770-SharePoint-Exploit-Lab-LetsDefend TL...
Vulnerabilities fixed in Microsoft Office
Microsoft has fixed vulnerabilities in Microsoft Office including SharePoint, Visio, Word, Excel and PowerPoint. The vulnerabilities in Microsoft Office include several "use after free" errors, heap-based buffer overflows and other vulnerabilities that allow unauthorized attackers to execute...
CVE-2025-53760
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2025-53760
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2025-49712
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-49712
Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-49712
CVE-2025-49712 covers a remote code execution in Microsoft SharePoint caused by deserialization of untrusted data. Connected sources confirm this affects SharePoint Server (2016/2019 and related Office SharePoint components) and is tractable via network access with low privileges (CVSS v3.1: AV:N...
CVE-2025-49712 Microsoft SharePoint Remote Code Execution Vulnerability
...
CVE-2025-49712 Microsoft SharePoint Remote Code Execution Vulnerability
...