ZeroPoint

ZeroPoint.ps1 ⚠ Una utilidad defensiva de PowerShell para detectar y mitigar la explotación de la vulnerabilidad de día cero CVE-2025-53770 en Microsoft SharePoint Server. 🔍 Qué hace Este script de PowerShell está diseñado para: Detectar indicadores de compromiso, como webshells .aspx sospechosas...

CVE-2023-29357-Check

CVE-2023-29357 Vulnerabilidad de Elevación de Privilegios en Microsoft SharePoint Server Este script te indicará si el objetivo es vulnerable a CVE-2023-29357 Uso python3 script.py Aviso Legal Este script es solo con fines educativos. No lo utilices contra objetivos sin consentimiento mutuo previ...

CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - Exploit de inyección de código mediante directiva Register maliciosa Descripción Este repositorio proporciona un exploit listo para producción para CVE-2026-65660 Control inadecuado de la generación de código, CWE-94 en Microsoft SharePoint Server. La vulnerabilidad...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Elevación de Privilegios en Microsoft SharePoint Server Explotación de CVE-2023-29357 CVE-2023-29357 es una vulnerabilidad crítica de escalada de privilegios que, combinada con otras vulnerabilidades, podría conducir a la ejecución remota de código. La puntuación CVSS para esta...

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spoofing attacks.

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...

CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-66805

A CVE-2026-66805 entry exists with conflicting descriptions across sources. The connected Red Hat CVE details describe a flaw in the console component of a managed-cluster hub: an attacker who can write to container logs can inject malicious code into the hub console user’s browser session by vie...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-64916

CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...

CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability

...

CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-64897

CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...

CVE-2026-65665

CVE-2026-65665 involves deserialization of untrusted data in Microsoft Office SharePoint Server, enabling an authorized attacker to execute code remotely over the network. NVD records show a CVSSv3.1 base score of 8.8 (High), with network access, low attack complexity, privileges required: Low, a...

CVE-2026-65660

A code injection vulnerability exists in Microsoft SharePoint Server (on-premises versions 2016, 2019, and 2022) due to unescaped quote injection into Register directives . This flaw allows an authorized low-privilege user to bypass SafeControls validation and achieve remote code execution (RCE) ...