CISA has published a malware analysis report with compromise indicators and Sigma rules for "ToolShell" attacks targeting specific Microsoft SharePoint Server versions. "Cyber threat actors have ...

On July 18, 2025, Eye Security identified large-scale exploitation of a zero-day SharePoint vulnerability chain that enables unauthenticated remote code execution (RCE). Within hours, attackers were ...

Attackers are currently exploiting two unpatched vulnerabilities to remotely compromise on-premises Microsoft Exchange servers. Microsoft confirmed the flaws late last week and published mitigation ...

1. a webshell must always execute some kind of payload (in $payload*). the payload is either: -- direct php function like exec, file write, sql, ... -- indirect via ...

Notifications You must be signed in to change notification settings And many more. I created this repo to have an overview over my starred repos. I was not able to filter in categories before. Feel ...