CVE-2025-53770

Potential SharePoint ToolShell CVE-2025-53770 Exploitation - File Create

Jul 28, 2025 · attack.initial-access attack.t1190 cve.2025-53770 detection.emerging-threats ·

Detects the creation of file such as spinstall0.aspx which may indicate successful exploitation of CVE-2025-53770. CVE-2025-53770 is a zero-day vulnerability in SharePoint that allows remote code execution.

Potential SharePoint ToolShell CVE-2025-53770 Exploitation Indicators

Jul 21, 2025 · attack.initial-access attack.t1190 cve.2025-53770 detection.emerging-threats ·

Share on:

Detects potential exploitation of CVE-2025-53770 by identifying indicators such as suspicious command lines discovered in Post-Exploitation activities. CVE-2025-53770 is a zero-day vulnerability in SharePoint that allows remote code execution.

SharePoint ToolShell CVE-2025-53770 Exploitation - Web IIS

Jul 21, 2025 · attack.initial-access attack.t1190 cve.2025-53770 detection.emerging-threats ·

Share on:

Detects access to vulnerable SharePoint components potentially being exploited in CVE-2025-53770 through IIS web server logs. CVE-2025-53770 is a zero-day vulnerability in SharePoint that allows remote code execution.