CVE-2025-49706

This repository provides a detailed technical analysis of CVE-2025-49706, a spoofing vulnerability in Microsoft SharePoint Server. It includes root cause analysis, exploitation steps, detection methods, and mitigation strategies, but does not contain functional exploit code.

This repository contains a detailed technical analysis of CVE-2025-53770, an unauthenticated RCE vulnerability in Microsoft SharePoint, including root cause, attack flow, and mitigation strategies.

This Metasploit module exploits CVE-2025-53771, an authentication bypass vulnerability in Microsoft SharePoint Server, combined with unsafe deserialization (CVE-2025-49704) to achieve unauthenticated remote code execution. It targets vulnerable SharePoint versions by leveraging a gadget chain in the DataSetSurrogateSelector class.