3189 matches found
CVE-2021-34517
Microsoft SharePoint Server Spoofing Vulnerability...
CVE-2021-34468
Microsoft SharePoint Server Remote Code Execution Vulnerability...
Information disclosure
Microsoft SharePoint Server Information Disclosure Vulnerability...
Spoofing
Microsoft SharePoint Server Spoofing Vulnerability...
Remote code execution
Microsoft SharePoint Server Remote Code Execution Vulnerability...
Remote code execution
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2021-34468
Microsoft SharePoint Server Remote Code Execution Vulnerability...
CVE-2021-34520
CVE-2021-34520 concerns a Microsoft SharePoint Server Remote Code Execution vulnerability. The related connected document KB5001975 confirms a security update for SharePoint Server 2019 (16.0.10376.20001) that addresses this vulnerability. The CVE is described with high severity in accompanying m...
CVE-2021-34520 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2021-34517 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2021-34468 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
Security Updates for Microsoft SharePoint Server 2019 (July 2021)
The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-34467, CVE-2021-34468, CVE-2021-34520 - Microsoft SharePoint Server...
PT-2021-5682 · Microsoft · Sharepoint Server +1
Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server affected versions not specified Description: The issue is related to incorrect code generation management in Microsoft SharePoint products. It allows a remot...
KLA12220 Multiple vulnerabilities in Microsoft Office
Multiple vulnerabilities were found in Microsoft Office. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution...
Security Updates for Microsoft SharePoint Server 2013 (July 2021)
The Microsoft SharePoint Server 2013 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Microsoft SharePoint Server Remote Code Execution Vulnerability CVE-2021-34467, CVE-2021-34468, CVE-2021-34520 - Microsoft SharePoint Server...
Microsoft SharePoint Server 远程代码执行漏洞(CVE-2021-28474)
In May of 2021, Microsoft released a patch to correct CVE-2021-28474, a remote code execution bug in supported versions of Microsoft SharePoint Server. This bug was reported to ZDI by an anonymous researcher and is also known as ZDI-21-574. This blog takes a deeper look at the root cause of this...
Microsoft SharePoint WorkflowCompilerInternal Exposed Dangerous Function Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft SharePoint. Authentication is required to exploit this vulnerability. The specific flaw exists within the System.Workflow.ComponentModel.Compiler.WorkflowCompilerInternal class. This class...
Microsoft SharePoint Unsafe Control And ViewState Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'http://microsoft.com/sharepoint/webpartpages', 'soap' = 'http://www.w3.org/2003/05/soap-envelope', 'xsi' =...
Microsoft SharePoint Unsafe Control And ViewState Remote Code Execution Exploit
The EditingPageParser.VerifyControlOnSafeList method fails to properly validate user supplied data. This can be leveraged by an attacker to leak sensitive information in rendered-preview content. This module will leak the ViewState validation key and then use it to sign a crafted object that will...
Microsoft SharePoint Server 16.0.10372.20060 Server-Side Request Forgery
Exploit Title: Microsoft SharePoint Server 16.0.10372.20060 - 'GetXmlDataFromDataSource' Server-Side Request Forgery SSRF Date: 09 Jun 2021 Exploit Author: Alex Birnberg Software Link: https://www.microsoft.com/en-us/download/details.aspx?id=57462 Version: 16.0.10372.20060 Tested on: Windows Serv...