CVE-2026-65660-Poc

MS SharePoint CVE-2026-65660 - Malicious Register Directive Code Injection Exploit Description This repository provides a production-ready exploit for CVE-2026-65660 Improper Control of Generation of Code, CWE-94 in Microsoft SharePoint Server. The vulnerability stems from unescaped quote injecti...

ZeroPoint

ZeroPoint.ps1 ⚠ A defensive PowerShell utility to detect and mitigate exploitation of the CVE-2025-53770 zero-day vulnerability in Microsoft SharePoint Server. 🔍 What it Does This PowerShell script is designed to: Detect compromise indicators, such as suspicious .aspx webshells Parse ULS logs to...

CVE-2023-29357-Check

CVE-2023-29357 Microsoft SharePoint Server Elevate Privilege Vulnerability This script will tell you if the target is vulnerable to CVE-2023-29357 Usage python3 script.py Disclaimer This script is for educational purposes only. Do not use it against targets without prior mutual consent. Reference...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server Elevation of Privilege CVE-2023-29357 Exploitation CVE-2023-29357 is a critical privilege escalation vulnerability that, when combined with other vulnerabilities, could potentially lead to remote code execution. The CVSS score for this vulnerability is 9.8...

Microsoft SharePoint Server Spoofing

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to insufficient validation of requests on the server side. Exploiting this vulnerability allows a malicious actor to perform spear-phishing attacks...

Microsoft SharePoint Server Privilege Escalation

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Microsoft SharePoint Server Subscription Edition Information Disclosure

The vulnerability of the Microsoft SharePoint Server Subscription Edition package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to disclose protected information remotely...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Microsoft SharePoint Server Subscription Edition Spear Phishing

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...

Microsoft SharePoint Server Privilege Escalation

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

Microsoft SharePoint Server Privilege Escalation

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to improper code generation. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

Microsoft SharePoint Server Privilege Escalation

The vulnerability of the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Microsoft SharePoint Server Subscription Edition Spear Phishing

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks...

Microsoft SharePoint Server Auth Bypass Info Disclosure

The vulnerability in the Microsoft SharePoint Server Subscription Edition web platform for collaborative work and document management is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to disclose protected information remotely...

Microsoft SharePoint Server Privilege Escalation

Microsoft SharePoint Server is susceptible to an elevation of privilege vulnerability. This incident response report provides indicators of compromise, timeline information, and MITRE ATT&CK mappings for attempted exploitation. https://packetstorm.news/download/236094...

Security Updates for Microsoft SharePoint Server Subscription Edition (October 2026)

The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution via integer overflow in Microsoft Office SharePoint CVE-2026-88166 - Elevation of Privilege in SharePoi...

PT-2026-118161

Уязвимость веб-платформы для совместной работы и управления документами Microsoft SharePoint Server Subscription Edition связана с недостатками разграничения доступа. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

PT-2026-118162

Уязвимость веб-платформы для совместной работы и управления документами Microsoft SharePoint Server Subscription Edition связана с отсутствием авторизации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

PT-2026-118164

Уязвимость веб-платформы для совместной работы и управления документами Microsoft SharePoint Server Subscription Edition связана с неверным управлением генерацией кода. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, повысить свои привилегии...

PT-2026-118146

Уязвимость веб-платформы для совместной работы и управления документами Microsoft SharePoint Server Subscription Edition связана с непринятием мер по защите структуры веб-страницы. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, проводить спуфинг-атаки...