CVE-2025-53770 – Vulnerability Research & Exploitation# CVE-2025-53770 – Vulnerability Research & Exploitation
This repository contains research, detection tools, and exploitation methods for **CVE-2025-53770**, a critical security vulnerability disclosed in 2025. The goal of this project is to provide a comprehensive technical resource for understanding and demonstrating the vulnerability in a controlled and ethical manner.
> ⚠️ **Legal Disclaimer**: This repository is intended for **educational and authorized security testing** only. Unauthorized access or testing of systems is illegal. Use responsibly.
---
## 📖 About CVE-2025-53770
**CVE-2025-53770** is a critical vulnerability in **Microsoft SharePoint Server (on-premises)** caused by the **deserialization of untrusted data**. It allows **unauthorized, remote attackers** to execute arbitrary code over the network **without authentication**. This vulnerability has been **actively exploited in the wild**.
- **Type**: Deserialization of Untrusted Data
- **Impact**: Remote Code Execution (RCE)
- **Attack Vector**: Network (Remote)
- **Authentication Required**: None
- **User Interaction Required**: None
- **Affected Product**: Microsoft SharePoint Server (on-premises)
- **Exploitation Status**: Known exploit exists in the wild
- **Patch Status**: Microsoft is preparing a comprehensive update; temporary mitigations are available and **should be applied immediately**
#### 🔐 CVSS v3.1 Base Score
- **Score**: 9.8 (**Critical**)
- **Vector**: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
---
## 📁 Repository Structure
### 🔍 [Scan](./Scan)
Contains tools and scripts to **detect the presence** of CVE-2025-53770 in vulnerable systems.
### 💥 [Exploit](./Exploit)
Includes **proof-of-concept (PoC) code** to demonstrate how CVE-2025-53770 can be exploited under specific conditions.
---
## 🙌 Credits
* https://github.com/soltanali0/CVE-2025-53770-Exploit
* https://github.com/ZephrFish/CVE-2025-53770-Scanner 登录后查看神龙缓存的 POC 文件快照
登录查看