Zero-click, wormable, cross-platform remote code execution in Microsoft Teams

Re:Zero-click, wormable, cross-platform remote code executio... by Wistar on Tuesday December 08, 2020 @01:48AM (#25342608)

There is a reason it is called "Scarepoint," even internally.

[ Parent | on HN ]

Re:Zero-click, wormable, cross-platform remote code executio... by byecomputer on Tuesday December 08, 2020 @06:03AM (#25343852)

I remember the first time I was shown a SharePoint

"This is what we use to keep track all purchase orders! It's GRRREEEAT!"

Neat, so it's a big Excel spreadsheet we all use at the same time? I can get into—hang on, some of this stuff doesn't have a da—should I worry about—are 'Michel' and 'Michell' the same—what about 'Msh', and why are her rows purple?

"Old, all old. If someone from lab needs something, they will tell you."

But I still gotta—

"Everything in the SharePoint."

[ Parent | on HN ]