1. SharePoint Unknown CVE Unveiled: RCE via WebPart Properties Deserialization blog.viettelcybersecurity.com | 漏洞 | 2025-07-16 09:42 | 原文 ↗ | #rce | #deserialization | #sharepoint | #webpart 后经分配为 CVE-2024-38018 的 SharePoint 漏洞:SPSerializationBinder 允许通过 WebPart 附加属性对 SafeControls 类进行二进制反序列化,配合改造的 ysoserial 载荷可实现 RCE。