Exploit for Deserialization of Untrusted Data in Microsoft

MS-SharePoint-July-Patch-...

CVE-2024-38023

creationtimestamp| type| source ---|---|--- 2024-07-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1324 2024-07-10 09:41:41+00:00| published-proof-of-concept| https://t.me/poxek/4205 2024-07-10 11:35:17+00:00| published-proof-of-concept|...

Patch Tuesday - July 2024

Microsoft is addressing 139 vulnerabilities this July 2024 Patch Tuesday, which is on the high side in terms of typical CVE counts. They’ve also republished details for 4 CVEs issued by other vendors that affect Microsoft products. Microsoft has evidence of in-the-wild exploitation for 2 of the...

CVE-2024-38023

CVE-2024-38023 affects on-premises Microsoft SharePoint Server. Exploitation path described in connected docs: an attacker with Site Owner permissions can abuse the BDC (Business Data Connectivity) feature via a malicious BDCMetadata.bdcm file to trigger reflective code execution, resulting in RC...

CVE-2024-38023 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

Security Updates for Microsoft SharePoint Server Subscription Edition (July 2024)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitra...

Security Updates for Microsoft SharePoint Server 2016 (July 2024)

The Microsoft SharePoint Server 2016 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

Security Updates for Microsoft SharePoint Server 2019 (July 2024)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...