CVE-2018-8284-Sharepoint-RCE

CVE-2018-8284-Sharepoint-RCE...

CVE-2026-56164-EXP

Microsoft SharePoint Server Elevation of Privilege - CVE-2026-56164 Functional unauthenticated EOP exploit. Overview Missing authentication for critical function CWE-306 in SharePoint Server user profile and site collection endpoints. Allows remote attackers to escalate from anonymous to Site...

SharePoint-CVE-2025-53770-POC

OurSharePoint - CVE-2025-53770 PoC Esta es una herramienta sencilla en C que construye una carga útil de .NET DataSet comprimida con GZip y codificada en Base64, utilizando una carga útil interna codificada con LosFormatter. Está diseñada para ayudar a reproducir la cadena de ejecución remota de...

CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE

🚨 CVE‑2025‑53770 – SharePoint Zero-Day Variant Exploited for Full RCE A Critical Escalation from CVE‑2025‑49706 By Aditya Bhatt – Red Team | VAPT 📌 TL;DR CVE‑2025‑53770 is a critical CVSS 9.8 zero-auth RCE vulnerability in Microsoft SharePoint now actively exploited in the wild. This isn’t a...

CVE-2025-53770

CVE-2025-53770 This is a multiple site scanner for CVE-2025-53770 Unauthenticated RCE Vulnerability. Other scanners/PoCs:- https://github.com/hazcod/CVE-2025-53770 https://github.com/MuhammadWaseem29/CVE-2025-53770 CVE-2025-53770 Sharepoint RCE Impact: Unauthenticated attackers can achieve remote...

CVE-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

Microsoft SharePoint Server - WS-Federation BinaryFormatter Deserialization RCE

Microsoft SharePoint Server 2016, 2019, Subscription Edition = 2026.3.1 contains a remote code execution vulnerability in the WS-Federation passive sign-in endpoint /trust/default.aspx. The SharePoint authentication module SPFederationAuthenticationModuleV2 uses a deflate-only...

Microsoft SharePoint - Remote Code Execution

Microsoft SharePoint is vulnerable to a remote code execution when the software fails to check the source markup of an application package. id: CVE-2020-16952 info: name: Microsoft SharePoint - Remote Code Execution author: dwisiswant0 severity: high description: Microsoft SharePoint is vulnerabl...

CVE-2025-53770

CVE-2025-53770 This is a scanner for the SharePoint unauthenticated Remote Code Execution vulnerability, assigned CVE number CVE-2025-53770. The code for this was written by reverse-engineering a payload seen in the wild. Use at your own risk, I am not responsible for any negative impact this mig...

Toolshell_CVE-2025-53770

ToolShell → CVE‑2025‑53770 Exploit PoC This package allows: 1. Upload webshell to SharePoint 2. Extract ValidationKey 3. Generate signed ViewState 4. RCE via reverse/bind shell 🔧 Setup root@kitploit: git clone cd toolshell-exploit pip3 install -r requirements.txt 🤖 Running Upload the webshell Fro...

cve-2025-53770

CVE-2025-53770 SharePoint Deserialization RCE PoC Critical — Unauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server CVE-2025-53770 Description Deserialization of untrusted data in on-premises Microsoft SharePoint Server allows an attacker to execute code...

suricata-rule-CVE-2025-53770

suricata-rule-CVE-2025-53770 Detection rules for CVE-2025-53770 root@kitploit: alert http $EXTERNALNET any - $HOMENET any msg: "ET EXPLOIT SharePoint RCE ToolShell CVE-2025-53770"; http.method; content: "POST"; flow: established, toserver; http.uri;...

Blackash-CVE-2025-53770

🧠 CVE-2025-53770 : Critical SharePoint RCE Vulnerability Exploited via ViewState Forgery 📌 Vulnerability Overview Type : Remote Code Execution RCE CVSS Score : 9.8 Critical Component : Microsoft SharePoint Server on-prem Root Cause : Insecure deserialization of ViewState data using stolen ASP.NET...

CVE-2025-53770

CVE-2025-53770 – Microsoft SharePoint Server 2019 未经身份验证的远程代码执行（反序列化） 漏洞作者: Agampreet Singh 工具: RedRoot https://github.com/Agampreet-Singh/RedRoot 日期: 2025年8月7日 测试环境: SharePoint Server 2019 v16.0.10383.20020 在 Windows Server 2019 上 CVE-ID: CVE-2025-53770 漏洞类型: 未经身份验证的远程代码执行 RCE 攻击向量: 通过...

CVE-2025-53770

CVE-2025-53770 Research Lab This repository appears to be a proof-of-concept research project for validating a SharePoint-style deserialization and tool-pane processing issue in a controlled lab. It includes a Python driver, a mock vulnerable application, and container assets for isolated testing...

SOC227-Microsoft-SharePoint-Server-Elevation-of-Privilege-Possible-CVE-2023-29357-Exploitation

SOC227 - Microsoft SharePoint Server Elevation of Privilege CVE-2023-29357 Exploitation CVE-2023-29357 is a critical privilege escalation vulnerability that, when combined with other vulnerabilities, could potentially lead to remote code execution. The CVSS score for this vulnerability is 9.8...

SnaffPoint

SnaffPoint Qué es SnaffPoint es una herramienta para pentesters que necesitan un poco de dulzura en este mundo. Debería ayudarte a encontrar archivos sensibles disponibles en SharePoint online y en archivos compartidos de OneDrive de tu empresa o de tu cliente. Cómo funciona En realidad hay 2...

sharepoint-toolshell-micro-postmortem

Incident Micro-Postmortem — Microsoft SharePoint On-Prem “ToolShell” Campaign This kit triages the mid-2025 “ToolShell” zero-day campaign against on-premises Microsoft SharePoint Server; SharePoint Online is out of scope. It delivers end-to-end reproducible hunts, comms, and figures without relyi...

CVE-2026-50522

🛡️ CVE-2026-50522 — Investigación de RCE en Microsoft SharePoint Vulnerabilidad crítica de deserialización de SharePoint en explotación activa Creado por Pratik Chhetri Fecha del informe: 2026-07-27 📌 Resumen ejecutivo...

sharepoint-2026-poc

SharePoint /trust WS-Federation Deserialization: PoC y notas de detección Informe en vivo GitHub Pages: https://sp-poc.wismansec.com/ renderizado HTML de este documento. Afecta: SharePoint Server 2016, 2019 y Subscription Edition. Reconstrucción de una intrusión en SharePoint Server Subscription...