1508 matches found
CVE-2023-29357-Check
CVE-2023-29357 Microsoft SharePoint Server 权限提升漏洞 此脚本将告知您目标是否易受 CVE-2023-29357 攻击 使用方法 python3 script.py 免责声明 此脚本仅用于教育目的。未经事先双方同意，请勿将其用于攻击目标。 参考 https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2023-29357...
ZeroPoint
ZeroPoint.ps1 ⚠ CVE-2025-53770 제로데이 취약점이 Microsoft SharePoint Server 에서 악용되는 것을 탐지하고 완화하기 위한 방어적 PowerShell 유틸리티입니다. 🔍 기능 설명 이 PowerShell 스크립트는 다음을 수행하도록 설계되었습니다: 침해 지표예: 의심스러운 .aspx 웹셸 탐지 ULS 로그를 분석하여 역직렬화/스푸핑 활동 식별 AMSI 및 Microsoft Defender와 같은 중요 보안 설정 확인 외부 인터페이스 연결 해제를 위한 선택적 긴급 완화 제공 🚨 CVE ...
CVE-2026-65660-Poc
MS SharePoint CVE-2026-65660 - 悪意のある Register ディレクティブ コードインジェクションエクスプロイト 説明 このリポジトリは、Microsoft SharePoint Server における CVE-2026-65660（コード生成の不適切な制御、CWE-94）に対する実運用可能なエクスプロイトを提供します。この脆弱性は、Register ディレクティブへのエスケープされていない引用符のインジェクションに起因し、SafeControls の検証をバイパスして、XamlServices.Parse...
SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation
SOC227 - Microsoft SharePoint Server 권한 상승 CVE-2023-29357 악용 CVE-2023-29357 은 다른 취약점과 결합될 경우 원격 코드 실행으로 이어질 수 있는 중요한 권한 상승 취약점입니다. 이 취약점의 CVSS 점수는 9.8 심각 입니다. 이벤트 정보 EventID : 189 이벤트 시간 : 2023년 10월 6일, 오후 8시 5분 규칙 : SOC227 - Microsoft SharePoint Server 권한 상승 - 가능한 CVE-2023-29357 악용 수준 : 보안 분석가...
The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup() function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages allows a attacker to execute arbitrary code.
The vulnerability of the ToolPane.GetPartPreviewAndPropertiesFromMarkup function in Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft SharePoint Server Subscription Edition packages is related to improper code generation. Exploiting this vulnerability could allow ...
Exploit for Code Injection in Microsoft
MS SharePoint CVE-2026-65660 - Malicious Register Directive Co...
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server programs lies in the lack of security measures for website structures, allowing attackers to perform spoofing attacks.
The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform spear-phishin...
CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-66808 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-66805
A CVE-2026-66805 entry exists with conflicting descriptions across sources. The connected Red Hat CVE details describe a flaw in the console component of a managed-cluster hub: an attacker who can write to container logs can inject malicious code into the hub console user’s browser session by vie...
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-64921 Microsoft SharePoint Server Elevation of Privilege Vulnerability
...
CVE-2026-64916
CVE-2026-64916 affects Microsoft Office SharePoint Server and relates to improper neutralization of input during web page generation (XSS), enabling an authorized attacker to spoof over a network. The CVSS 3.1 base score is 4.6 (Medium) with Network access, Low attack complexity, Low privileges r...
CVE-2026-64901 Microsoft SharePoint Server Remote Code Execution Vulnerability
...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64902 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64900 Microsoft SharePoint Server Spoofing Vulnerability
...
CVE-2026-64897
CVE-2026-64897 describes an XSS vulnerability in Microsoft Office SharePoint Server due to improper neutralization of input during web page generation. An authorized attacker could spoof users over the network. Documents indicate the flaw and its impact as spoofing, with CVSSv3.1 base score 4.6 (...