[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![TrendMicroRSRCH Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::11927342.png) Trend Micro Research [@TrendMicroRSRCH](/creator/twitter/TrendMicroRSRCH) on x 51.9K followers
Created: 2025-07-21 21:28:05 UTC

3/4 Attackers targeting on-premise Microsoft SharePoint servers exploit these flaws by abusing the  /layouts/15/ToolPane.aspx endpoint to bypass authentication. 

This allows them to upload a malicious file that extracts sensitive cryptographic data from the server.

We detailed how the exploit unfolds here:


XXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1947408264003526930/c:line.svg)

**Related Topics**
[$4704t](/topic/$4704t)
[microsoft](/topic/microsoft)
[stocks technology](/topic/stocks-technology)

[Post Link](https://x.com/TrendMicroRSRCH/status/1947408264003526930)