SharePoint vulnerability CVE-2023-29357 allows for remote code execution and privilege escalation

Researchers have recently released a report warning about a significant threat posed by criminals who are actively spreading robbers viruses. These criminals have obtained a worker who is now under their control.

The specific type of exploits used in this activity are typically categorized based on the vulnerability they exploit, whether they are local or remote, and the desired outcome of the exploit. For instance, some examples include EOP (escalation of privilege), DoS (denial of service), and Spulping. Among the schemes observed, one notable exploit method is known as Exploit-A-A-Service.

/Reports, release notes, official announcements.