Skip to content

Commit f16f7bf

Browse files
committed
add in reference to teh LeakIX blog, which shows CVE-2025-53771
1 parent ae95d3d commit f16f7bf

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

modules/exploits/windows/http/sharepoint_toolpane_rce.rb

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,8 @@ def initialize(info = {})
3838
['CVE', '2025-53771'],
3939
# Technical analysis of CVE-2025-49704 and CVE-2025-49706 by the original finder, Dinh Ho Anh Khoa (Viettel Cyber Security).
4040
['URL', 'https://blog.viettelcybersecurity.com/sharepoint-toolshell/'],
41+
# LeakIX blog which captured the malicious request for the in-the-wild exploit.
42+
['URL', 'https://blog.leakix.net/2025/07/using-their-own-weapons-for-defense-a-sharepoint-story/'],
4143
# ZDI advisories for CVE-2025-49704 and CVE-2025-49706, discovered by Viettel Cyber Security.
4244
['URL', 'https://www.zerodayinitiative.com/advisories/ZDI-25-580/'],
4345
['URL', 'https://www.zerodayinitiative.com/advisories/ZDI-25-581/'],

0 commit comments

Comments
 (0)