Microsoft SharePoint Server Remote Code Execution Vulnerability
CVSS Skor
9.8
EPSS İhtimal
%100.0
Risk Skoru
19.6
Yayın
1 yıl önce
Public Exploits · GitHub ve Metasploit Intelligence
Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.
🚨 Threat intel & incident response research on SharePoint "ToolShell" RCE zero-day (CVE-2025-53770). 🕵️♂️ Covers root-cause deserialization flaws, attack timelines, risk metrics, and defensive EDR validation playbooks. 🛡️
ToolShell scanner - CVE-2025-53770 and detection information
Technical analysis of a SharePoint ToolShell (CVE-2025-53770) exploitation attempt involving RCE, webshell deployment, and MachineKey extraction.
Do you really think SharePoint is safe?
Scanner for the SharePoint CVE-2025-53770 RCE zero day vulnerability (fork from hazcod/CVE-2025-53770)
Scanner for the SharePoint CVE-2025-53770 RCE zero day vulnerability.
Microsoft SharePoint Server 2019 (16.0.10383.20020) - Remote Code Execution (RCE)
Nuclei: Microsoft SharePoint Server - Remote Code Execution (ToolShell)
https://arstechnica.com/security/2025/07/sharepoint-vulnerability-with-9-8-severity-rating-is-under-exploit-across-the-globe/
https://github.com/kaizensecurity/CVE-2025-53770
https://research.eye.security/sharepoint-under-siege/
İlgili Benzer Açıklar
Memory buffer overflow in Microsoft Windows 10 Version 1903 For 32 Bit Systems
Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
Open Management Infrastructure (OMI) Remote Code Execution Vulnerability
Microsoft Outlook Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability
Bu açığı API ile alın
Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2025-53770"