CVE-2025-53770 – Vulnerability Research & Exploitation# CVE-2025-53770 – Vulnerability Research & Exploitation
This repository contains research, detection tools, and exploitation methods for **CVE-2025-53770**, a critical security vulnerability disclosed in 2025. The goal of this project is to provide a comprehensive technical resource for understanding and demonstrating the vulnerability in a controlled and ethical manner.
> ⚠️ **Legal Disclaimer**: This repository is intended for **educational and authorized security testing** only. Unauthorized access or testing of systems is illegal. Use responsibly.
---
## 📖 About CVE-2025-53770
**CVE-2025-53770** is a critical vulnerability in **Microsoft SharePoint Server (on-premises)** caused by the **deserialization of untrusted data**. It allows **unauthorized, remote attackers** to execute arbitrary code over the network **without authentication**. This vulnerability has been **actively exploited in the wild**.
- **Type**: Deserialization of Untrusted Data
- **Impact**: Remote Code Execution (RCE)
- **Attack Vector**: Network (Remote)
- **Authentication Required**: None
- **User Interaction Required**: None
- **Affected Product**: Microsoft SharePoint Server (on-premises)
- **Exploitation Status**: Known exploit exists in the wild
- **Patch Status**: Microsoft is preparing a comprehensive update; temporary mitigations are available and **should be applied immediately**
#### 🔐 CVSS v3.1 Base Score
- **Score**: 9.8 (**Critical**)
- **Vector**: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`
---
## 📁 Repository Structure
### 🔍 [Scan](./Scan)
Contains tools and scripts to **detect the presence** of CVE-2025-53770 in vulnerable systems.
### 💥 [Exploit](./Exploit)
Includes **proof-of-concept (PoC) code** to demonstrate how CVE-2025-53770 can be exploited under specific conditions.
---
## 🙌 Credits
* https://github.com/soltanali0/CVE-2025-53770-Exploit
* https://github.com/ZephrFish/CVE-2025-53770-Scanner
[4.0K] /data/pocs/d6043fa75b2475cbe76590a27e53a8856fade539
├── [4.0K] Exploit
│ ├── [4.5K] exploit.py
│ ├── [3.2K] README.md
│ └── [ 112] requirements.txt
├── [2.0K] README.md
└── [4.0K] Scanner
├── [4.7K] config.json
├── [ 16K] README.md
├── [ 53] requirements.txt
└── [ 42K] scanner.py
2 directories, 8 files