We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 899e275 commit a817104Copy full SHA for a817104
modules/exploits/windows/http/sharepoint_toolpane_rce.rb
@@ -36,6 +36,8 @@ def initialize(info = {})
36
['CVE', '2025-53770'],
37
# Patch bypass for CVE-2025-49706, exploited in-the-wild as a zero-day.
38
['CVE', '2025-53771'],
39
+ # Technical analysis of CVE-2025-49704 and CVE-2025-49706 by the original finder, Dinh Ho Anh Khoa (Viettel Cyber Security).
40
+ ['URL', 'https://blog.viettelcybersecurity.com/sharepoint-toolshell/'],
41
# ZDI advisories for CVE-2025-49704 and CVE-2025-49706, discovered by Viettel Cyber Security.
42
['URL', 'https://www.zerodayinitiative.com/advisories/ZDI-25-580/'],
43
['URL', 'https://www.zerodayinitiative.com/advisories/ZDI-25-581/'],
0 commit comments