10200 matches found
Microsoft Office SharePoint Remote Code Execution Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
CVE-2025-53770-SharePoint-Deserialization-RCE-PoC
CVE-2025-53770-SharePoint-Deserialization-RCE-PoC A critical vulnerability in Microsoft SharePoint Server allows unauthenticated remote code execution via deserialization of untrusted data. Microsoft is aware of active exploitation; apply CVE mitigations immediately. Severity: Critical. commands...
CVE-2019-0604_sharepoint_CVE
CVE-2019-0604 CVE-2019-0604 From https://www.thezdi.com/blog/2019/3/13/cve-2019-0604-details-of-a-microsoft-sharepoint-rce-vulnerability...
it-sec-toolshell
ToolShell — SharePoint Zero-Day Presentation A Marp slide deck about CVE-2025-53770, with each slide kept in its own file under slides/. Build ./build.sh assemble slides into presentation.md ./build.sh html + render presentation.html ./build.sh pdf + render presentation.pdf ./build.sh all + HTML,...
CVE-2026-108452: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' in Microsoft Office SharePoint allows an authorized attacker to execute code over a network...
PT-2026-115254
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an authorized attacker to execute code over a network...
CVE-2026-88164
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
EUVD-2026-101506
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88164
A Missing Authorization vulnerability in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. This issue is associated with CWE-862 . While specific technical details regarding the affected component or root cause are not provided, the vulnerability has ...
CVE-2026-88164: Missing Authorization
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
PT-2026-114316
Name of the Vulnerable Software and Affected Versions Microsoft Office SharePoint affected versions not specified Description Missing authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. Recommendations At the moment, there is no...
Security Updates for Microsoft SharePoint Server Subscription Edition (October 2026)
The Microsoft SharePoint Server Subscription Edition installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - Remote Code Execution via integer overflow in Microsoft Office SharePoint CVE-2026-88166 - Elevation of Privilege in SharePoi...
CVE-2026-97783
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-97782
Observable discrepancy in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network...
CVE-2026-96044
No cwe for this issue in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...
CVE-2026-88204
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-88209
Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network...
CVE-2026-88206
Server-side request forgery ssrf in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network...