Lucene search
+L

3189 matches found

Kitploit
Kitploit
added 2026/09/14 6:33 p.m.8 views

sharepoint-deserialization-security-assessment

CVE-2026-45659 - Microsoft SharePoint Deserialization RCE Consultant-Style Cybersecurity Report Professional vulnerability assessment report for SharePoint deserialization risk, including executive summary, technical impact, remediation, and mitigation strategy. 📍 Report Snapshot...

8.8CVSS8.1AI score0.76075EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 4:35 p.m.7 views

CVE-2026-50522

CVE-2026-50522 Microsoft SharePoint CVE-2026-50522 cargas útiles y análisis. Peticiones HTTP...

9.8CVSS7.8AI score0.854EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/14 3:40 p.m.9 views

GC2-sheet

GC2 GC2 Google Command and Control es una aplicación de comando y control que permite a un atacante ejecutar comandos en la máquina objetivo utilizando Google Sheet o Microsoft SharePoint List y exfiltrar archivos usando Google Drive o Microsoft SharePoint Document. Por qué Este proyecto ha sido...

6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/09/14 3:15 a.m.6 views

CVE-2025-53770

Microsoft SharePoint CVE-2025-53770 POC 免责声明:此代码/负载仅用于教育目的 。作者不支持或纵容任何未经授权或恶意使用此代码的行为。仅可在您拥有或已获得明确测试许可的环境中使用。滥用可能违反法律并导致严重处罚。...

9.8CVSS7.9AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/14 1:41 a.m.4 views

CVE-2023-24955-PoC

CVE-2023-24955-PoC Microsoft SharePoint 2019 漏洞利用程序 一个针对 CVE-2023-24955 漏洞发布的利用程序。我查看了代码,发现 resolveTargetInfo 和 getOAuthInfo 中存在一些错误。随后我修复了它,现在分享给你。 ❗❗❗❗❗❗ 请记住,你应该使用 Python2 运行它(我尝试的是 python2.7)❗❗❗❗❗❗ 例如:python2.7 CVE-2023-24955.py https://google.com...

7.2CVSS7.4AI score0.85395EPSS
SaveExploits7
Kitploit
Kitploit
added 2026/09/13 5:01 p.m.5 views

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Reglas de detección para CVE-2025-53770 root@kitploit: alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...

9.8CVSS8AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/13 4:36 p.m.7 views

ZeroPoint

ZeroPoint.ps1 ⚠ 一款防御性 PowerShell 工具,用于检测和缓解 Microsoft SharePoint Server 中的 CVE-2025-53770 零日漏洞利用。 🔍 功能说明 该 PowerShell 脚本旨在: 检测入侵迹象,例如可疑的 .aspx webshell 解析 ULS 日志以识别反序列化/欺骗活动 验证关键安全设置,例如 AMSI 和 Microsoft Defender 提供 可选紧急缓解措施 以断开外部接口连接 🚨 CVE 详情 CVE: CVE-2025-53770 类型: 远程代码执行 RCE CVSS 评分: 9.8(严重) 受影...

9.8CVSS7.9AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/12 6:33 p.m.6 views

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server 权限提升(CVE-2023-29357 漏洞利用) CVE-2023-29357 是一个严重的权限提升漏洞,与其他漏洞结合使用时,可能导致远程代码执行。该漏洞的 CVSS 评分为 9.8(严重) 。 事件信息 事件ID : 189 事件时间 : 2023年10月6日,20:05 规则 : SOC227 - Microsoft SharePoint Server 权限提升 - 可能利用 CVE-2023-29357 级别 : 安全分析师 主机名 : MS-SharePointServer 目标IP地址 :...

9.8CVSS8.5AI score0.99984EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/12 2:21 a.m.5 views

CVE-2026-50522

🛡️ CVE-2026-50522 — Investigación de RCE en Microsoft SharePoint Vulnerabilidad crítica de deserialización de SharePoint en explotación activa Creado por Pratik Chhetri Fecha del informe: 2026-07-27 📌 Resumen ejecutivo...

9.8CVSS7.8AI score0.854EPSS
SaveExploits4
Kitploit
Kitploit
added 2026/09/11 10:24 p.m.7 views

ToolShellFinder

🛠️ ToolShellFinder: Detección de CVE-2025-53770 y CVE-2025-53771 Un script de alto rendimiento en PowerShell 7+ para escanear registros de IIS y detectar signos de explotación relacionados con ToolShell , dirigido específicamente a las vulnerabilidades de día cero CVE-2025-53770 y CVE-2025-53771 e...

9.8CVSS7.5AI score0.99998EPSS
SaveExploits42
Kitploit
Kitploit
added 2026/09/11 5:30 p.m.10 views

CVE-2026-55040

Omisión de Autenticación JWT de Microsoft SharePoint CVE-2026-55040 Resumen CVE-2026-55040.py es un script de prueba de concepto para explotar la vulnerabilidad de omisión de autenticación de SharePoint, CVE-2026-55040. Para un análisis técnico completo, consulte nuestro Análisis de Rapid7. Uso...

9.1CVSS8.2AI score0.50585EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 12:11 p.m.15 views

mssharepoint-scanner

MS SharePoint Scanner A single-file, dependency-free defensive tool for Microsoft SharePoint that combines service discovery single or bulk with CVE assessment for two critical on-premises vulnerabilities: CVE-2026-55040 Critical 9.1 — JWT token authentication bypass CVE-2026-63520 High 8.1 —...

9.1CVSS7.8AI score0.50585EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/11 5:53 a.m.6 views

MS-SharePoint-July-Patch-RCE-PoC

MS-SharePoint-July-Patch-RCE-PoC PoC para: CVE-2024-38094 CVE-2024-38024 CVE-2024-38023 Video del PoC: https://youtu.be/u8mccaakISw...

7.2CVSS7.8AI score0.529EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/09/10 5:31 a.m.11 views

CVE-2026-55040-Mass-Exploit

Exploit de Bypass de Token JWT para Microsoft SharePoint CVE-2026-55040, CVSS 9.1. Forja tokens de autenticación usando tres vectores de ataque: Algoritmo "none" omite la verificación de firma Secretos HS256 débiles con soporte de diccionario de fuerza bruta Sustitución de clave RS256 Suplanta a...

9.1CVSS8.4AI score0.50585EPSS
SaveExploits5
Kitploit
Kitploit
added 2026/09/10 12:51 a.m.7 views

CVE-2023-29357-Check

CVE-2023-29357 Microsoft SharePoint Server Elevate Privilege Vulnerability This script will tell you if the target is vulnerable to CVE-2023-29357 Usage root@kitploit: python3 script.py Disclaimer This script is for educational purposes only. Do not use it against targets without prior mutual...

9.8CVSS8.5AI score0.99984EPSS
SaveExploits10
Kitploit
Kitploit
added 2026/09/09 1:44 p.m.12 views

CVE-2026-63520

CVE-2026-63520 RCE por tipo inseguro en SharePoint + cadena CVE-2026-55040 RCE no autenticado en Microsoft SharePoint Server. No se necesitan credenciales. Stephen Fewer Rapid7 demostró CVE-2026-55040 en Pwn2Own Berlín 2026. Rapid7 luego descubrió CVE-2026-63520 durante una investigación de...

9.1CVSS8.1AI score0.50585EPSS
SaveExploits5References1
Kitploit
Kitploit
added 2026/09/09 9:18 a.m.9 views

CVE-2025-54897-LAB

Lab: CVE-2025-54897 - Vulnerabilidad de Deserialización en Microsoft Office SharePoint 🚀 Descripción General Este laboratorio demuestra una vulnerabilidad de deserialización en Microsoft Office SharePoint que permite la ejecución remota de código RCE. El problema surge del manejo inadecuado de...

8.8CVSS7.8AI score0.19148EPSS
SaveExploits0
NVD
NVD
added 2026/09/08 6:19 p.m.13 views

CVE-2026-69716

Improper neutralization of special elements used in an sql command 'sql injection' in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...

8.8CVSS0.0092EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:19 p.m.9 views

CVE-2026-69402

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...

7.3CVSS0.00409EPSS
SaveExploits0References1
NVD
NVD
added 2026/09/08 6:18 p.m.6 views

CVE-2026-69268

Improper access control in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...

8.8CVSS0.00726EPSS
SaveExploits0References1
Rows per page
Query Builder