/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 darkatlas.io
Critical SharePoint Vulnerability CVE-2025-53770: Remote Code Execution via ViewState Abuse | Blog | Dark Atlas | Dark Web Monitoring Platform | Compromised Credentials Monitoring | Account Takeover Prevention Platform | Threat Intelligence | Buguard
| | blog.talosintelligence.com
ToolShell: Details of CVEs affecting SharePoint servers
2.9 parsecs away

Travel
| | Cisco Talos is aware of the ongoing exploitation of CVE-2025-53770 and CVE-2025-53771 in the wild. These are path traversal vulnerabilities affecting SharePoint Server Subscription Edition, SharePoint Server 2016, and SharePoint Server 2019.
| | notsosecure.com
Path Traversal to Remote Code Execution | NotSoSecure
3.4 parsecs away

Travel
| | In this blog post, Sanjay from the NotSoSecure Training team describes an interesting project where he starts with a path traversal vulnerability, and chains multiple vulnerabilities to achieve remote code execution (RCE) in a .NET web application.
| | forensicitguy.github.io
Inspecting a PowerShell Cobalt Strike Beacon | Tony Lambert
3.6 parsecs away

Travel
| | In this post I want to take a look at a PowerShell-based Cobalt Strike beacon that appeared on MalwareBazaar. This particular beacon is representative of most PowerShell Cobalt Strike activity I see in the wild during my day job. The beacons often show up as service persistence during incidents or during other post-exploitation activity. If you want to follow along at home, the sample I'm using is here:
| | www.loft.sh
[No title]
18.5 parsecs away

Travel
|