Skip to content

Commit 228a066

Browse files
committed
add a reference to the Kaspersky analysis which covers all 4 CVEs
1 parent 36fff14 commit 228a066

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

modules/exploits/windows/http/sharepoint_toolpane_rce.rb

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,8 @@ def initialize(info = {})
4040
['URL', 'https://blog.viettelcybersecurity.com/sharepoint-toolshell/'],
4141
# LeakIX blog which captured the malicious request for the in-the-wild exploit.
4242
['URL', 'https://blog.leakix.net/2025/07/using-their-own-weapons-for-defense-a-sharepoint-story/'],
43+
# Technical analysis of CVE-2025-49704, CVE-2025-49706, CVE-2025-53770 and CVE-2025-53771 by Kaspersky.
44+
['URL', 'https://securelist.com/toolshell-explained/'],
4345
# ZDI advisories for CVE-2025-49704 and CVE-2025-49706, discovered by Viettel Cyber Security.
4446
['URL', 'https://www.zerodayinitiative.com/advisories/ZDI-25-580/'],
4547
['URL', 'https://www.zerodayinitiative.com/advisories/ZDI-25-581/'],

0 commit comments

Comments
 (0)