{"metadata": {"vulnerability": "cve-2025-53770", "count": 812, "kinds": {"milestone": 14, "sighting": 734, "kev": 24, "other": 40}}, "data": [{"timestamp": "2025-06-05T14:45:00Z", "date_only": false, "value": "2025-06-05T14:45:00Z", "kind": "other", "label": "Document generated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0233", "record": "NCSC-2025-0233", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-08T07:00:00Z", "date_only": false, "value": "2025-07-08T07:00:00.000Z", "kind": "milestone", "label": "Published", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-07-09T13:25:25.500Z", "date_only": false, "value": "2025-07-09T13:25:25.500Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2025-53770", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-07-18T00:00:00Z", "date_only": true, "value": "2025-07-18", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0611", "record": "CERTFR-2025-AVI-0611", "field": "vendor_advisories.2.published_at"}, {"timestamp": "2025-07-19T00:00:00Z", "date_only": true, "value": "2025-07-19", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-07-19T00:00:00Z", "date_only": true, "value": "2025-07-19", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0611", "record": "CERTFR-2025-AVI-0611", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-07-19T05:00:00Z", "date_only": false, "value": "2025-07-19T05:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2a9ec475-9d16-41f1-b1ff-644d951c1162", "url": "https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/"}, {"timestamp": "2025-07-19T07:00:00Z", "date_only": false, "value": "2025-07-19T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-07-19T07:00:00Z", "date_only": false, "value": "2025-07-19T07:00:00.000Z", "kind": "other", "label": "Date", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2025-07-19T07:00:00Z", "date_only": false, "value": "2025-07-19T07:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / microsoft", "record": "cve-2025-53770", "field": "containers.cna.datePublic"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-53770", "field": "timestamps.asserted_at", "uuid": "160f3cbc-a649-483b-9380-4fed2056bb10", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": true, "value": "2025-07-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-53770", "field": "containers.adp.0.metrics.0.other.content.dateAdded"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": true, "value": "2025-07-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-53770", "field": "evidence.0.details.date_added", "uuid": "160f3cbc-a649-483b-9380-4fed2056bb10", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-53770", "field": "timestamps.first_seen_at", "uuid": "160f3cbc-a649-483b-9380-4fed2056bb10", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": true, "value": "2025-07-20", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "vendor_advisories.1.published_at"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": true, "value": "2025-07-20", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0611", "record": "CERTFR-2025-AVI-0611", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-53770", "field": "containers.adp.0.metrics.1.other.content.timestamp"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-53770", "record": "FKIE_CVE-2025-53770", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-53770", "field": "status.status_updated_at", "uuid": "160f3cbc-a649-483b-9380-4fed2056bb10", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-20T00:00:00Z", "date_only": false, "value": "2025-07-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-53770", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2025-07-20T01:06:33.607Z", "date_only": false, "value": "2025-07-20T01:06:33.607Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2025-53770", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-07-20T01:13:23.764Z", "date_only": false, "value": "2025-07-20T01:13:23.764873Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3lueccfxt5s2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d7331cf8-f1a9-4cc4-9192-560337d8b63b", "url": "https://bsky.app/profile/threatintel.microsoft.com/post/3lueccfxt5s2j"}, {"timestamp": "2025-07-20T01:13:24.392Z", "date_only": false, "value": "2025-07-20T01:13:24.392692Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3lueccfy3x22j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a9a35f15-6166-4253-bbe0-bf28d27b53ab", "url": "https://bsky.app/profile/threatintel.microsoft.com/post/3lueccfy3x22j"}, {"timestamp": "2025-07-20T01:15:30Z", "date_only": false, "value": "2025-07-20T01:15:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-XCRC-8VQV-VC8R", "record": "GHSA-XCRC-8VQV-VC8R", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-07-20T01:15:30.777Z", "date_only": false, "value": "2025-07-20T01:15:30.777", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-53770", "record": "FKIE_CVE-2025-53770", "field": "published"}, {"timestamp": "2025-07-20T01:16:21.940Z", "date_only": false, "value": "2025-07-20T01:16:21.940459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3luechpqihv22", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "49f8d816-faea-43be-95f0-3ba424c6de5e", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3luechpqihv22"}, {"timestamp": "2025-07-20T01:22:06.331Z", "date_only": false, "value": "2025-07-20T01:22:06.331466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ajohnsocyber.bsky.social/post/3luecrvcjss2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "41855e1a-629c-4276-9a4e-32ce63d35bc3", "url": "https://bsky.app/profile/ajohnsocyber.bsky.social/post/3luecrvcjss2r"}, {"timestamp": "2025-07-20T01:48:39.577Z", "date_only": false, "value": "2025-07-20T01:48:39.577037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lueebh5w4o2x", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3aea32d0-a877-40ad-a925-da4dc08091ad", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lueebh5w4o2x"}, {"timestamp": "2025-07-20T03:06:06.441Z", "date_only": false, "value": "2025-07-20T03:06:06.441094Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lueiltgqwh2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1acaf092-8bfb-44da-998e-318118be93bc", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3lueiltgqwh2j"}, {"timestamp": "2025-07-20T03:30:19Z", "date_only": false, "value": "2025-07-20T03:30:19Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-XCRC-8VQV-VC8R", "record": "GHSA-XCRC-8VQV-VC8R", "field": "published"}, {"timestamp": "2025-07-20T04:55:59.308Z", "date_only": false, "value": "2025-07-20T04:55:59.308237Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lueoqfve4k2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6e10064d-39a6-4b30-8581-0620b728b6ac", "url": "https://bsky.app/profile/nihonmatsu.bsky.social/post/3lueoqfve4k2o"}, {"timestamp": "2025-07-20T05:39:31.955Z", "date_only": false, "value": "2025-07-20T05:39:31.955485Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3luer6cbswf2v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "58859f3d-5b56-4c90-9b3c-fa94f86df083", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3luer6cbswf2v"}, {"timestamp": "2025-07-20T06:03:24.883Z", "date_only": false, "value": "2025-07-20T06:03:24.883901Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/bundle/7eb6b389-20dd-404f-90c4-314ed370fcc5", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6a360c77-1687-4dfc-ab5d-2d08ba33cc4e", "url": "https://vulnerability.circl.lu/bundle/7eb6b389-20dd-404f-90c4-314ed370fcc5"}, {"timestamp": "2025-07-20T06:04:56.852Z", "date_only": false, "value": "2025-07-20T06:04:56.852835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3lueslodvcgj2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8974004b-e628-4903-9f50-57947cfca82d", "url": "https://bsky.app/profile/adulau.infosec.exchange.ap.brid.gy/post/3lueslodvcgj2"}, {"timestamp": "2025-07-20T06:34:22Z", "date_only": false, "value": "2025-07-20T06:34:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ff4f9626-c48f-4268-be56-9251e3e6a726", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233"}, {"timestamp": "2025-07-20T06:44:03.205Z", "date_only": false, "value": "2025-07-20T06:44:03.205134Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3lueurgddwer2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "4602e54b-6ab0-4451-97f4-7dd4f823739c", "url": "https://bsky.app/profile/timb-machine.infosec.exchange.ap.brid.gy/post/3lueurgddwer2"}, {"timestamp": "2025-07-20T06:58:10.723Z", "date_only": false, "value": "2025-07-20T06:58:10.723596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3luevkwozga2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5f3eb013-bd79-4b50-877a-530fb30e5511", "url": "https://bsky.app/profile/undercode.bsky.social/post/3luevkwozga2p"}, {"timestamp": "2025-07-20T07:00:00Z", "date_only": false, "value": "2025-07-20T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-07-20T07:52:00Z", "date_only": false, "value": "2025-07-20T07:52:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/07/critical-microsoft-sharepoint-flaw.html", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "59cadcd0-64f6-4011-9316-96a08d06bab4", "url": "https://thehackernews.com/2025/07/critical-microsoft-sharepoint-flaw.html"}, {"timestamp": "2025-07-20T08:34:22.645Z", "date_only": false, "value": "2025-07-20T08:34:22.645952Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0233", "record": "NCSC-2025-0233", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-07-20T08:34:22.645Z", "date_only": false, "value": "2025-07-20T08:34:22.645952Z", "kind": "milestone", "label": "Published", "source": "csaf_ncscnl \u00b7 NCSC-2025-0233", "record": "NCSC-2025-0233", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-07-20T08:51:26.903Z", "date_only": false, "value": "2025-07-20T08:51:26.903487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rcinghio.bsky.social/post/3luf3vqhcp223", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ed6fde55-cbd8-45cc-a45d-7d26f51a7514", "url": "https://bsky.app/profile/rcinghio.bsky.social/post/3luf3vqhcp223"}, {"timestamp": "2025-07-20T10:06:57Z", "date_only": false, "value": "2025-07-20T10:06:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/V5m5VvmhFlcDUuyYLA11ufy3MNAHYn3-nPR1xTxCESZAew", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "417f37f0-307e-405f-8482-c85895638227"}, {"timestamp": "2025-07-20T10:10:33Z", "date_only": false, "value": "2025-07-20T10:10:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7187", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cfacebf0-81a0-4e09-be05-216d4884e955", "content": "\u26a0\ufe0f A critical UNPATCHED zero-day in Microsoft SharePoint (CVE-2025-53770) is being massively exploited right now.\n\nAt least 75 orgs breached\u2014including major companies and governments.\n\nHere\u2019s what you need to know \u2193 https://thehackernews.com/2025/07/critical-microsoft-sharepoint-flaw.html", "url": "https://t.me/thehackernews/7187"}, {"timestamp": "2025-07-20T10:22:00.945Z", "date_only": false, "value": "2025-07-20T10:22:00.945407Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lufaxfvj4x2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2e990fb6-3e5c-4049-bb15-9bfcd967a645", "url": "https://bsky.app/profile/nimblenerd.social/post/3lufaxfvj4x2t"}, {"timestamp": "2025-07-20T11:52:16.797Z", "date_only": false, "value": "2025-07-20T11:52:16.797447Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3luffypztj226", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8523ca91-21f2-45cc-ab2c-653cda17962d", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3luffypztj226"}, {"timestamp": "2025-07-20T11:52:17.339Z", "date_only": false, "value": "2025-07-20T11:52:17.339100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3luffyseswc26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b2b70629-2b4a-4c50-a0be-77d5dbe23902", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3luffyseswc26"}, {"timestamp": "2025-07-20T12:20:09.626Z", "date_only": false, "value": "2025-07-20T12:20:09.626606Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lufhkogvgq24", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "98a4e1b7-f4b9-4d41-adc1-06d20486cbf8", "url": "https://bsky.app/profile/cyberhub.blog/post/3lufhkogvgq24"}, {"timestamp": "2025-07-20T13:44:31.005Z", "date_only": false, "value": "2025-07-20T13:44:31.005028Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lufmbjiaza2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b293b42c-6fc2-49be-9107-3d84403aa43a", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lufmbjiaza2q"}, {"timestamp": "2025-07-20T13:59:20.476Z", "date_only": false, "value": "2025-07-20T13:59:20.476003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lufn3zkzki2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9ce88cba-507a-4b16-888d-a15e76550f26", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lufn3zkzki2q"}, {"timestamp": "2025-07-20T14:11:36Z", "date_only": false, "value": "2025-07-20T14:11:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/information_security_channel/53874", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8b7a629a-7bdf-4c39-88e3-4b318606e5a1", "content": "SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild \u2013 No Patch Available\nhttps://www.securityweek.com/sharepoint-under-attack-microsoft-warns-of-zero-day-exploited-in-the-wild-no-patch-available/\n\nEnterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately.\nThe post SharePoint Under Attack: Microsoft Warns of Zero-Day Exploited in the Wild \u2013 No Patch Available (https://www.securityweek.com/sharepoint-under-attack-microsoft-warns-of-zero-day-exploited-in-the-wild-no-patch-available/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/53874"}, {"timestamp": "2025-07-20T14:56:19.694Z", "date_only": false, "value": "2025-07-20T14:56:19.694138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lufqa5dfltn2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5849ebc2-88ca-402b-bcf4-3870f0d14ca7", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lufqa5dfltn2"}, {"timestamp": "2025-07-20T15:09:18.193Z", "date_only": false, "value": "2025-07-20T15:09:18.193142Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.bsky.social/post/3lufqz5fkx22m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "01514179-6833-4f91-a269-c819ee4c5633", "url": "https://bsky.app/profile/newstecnicas.bsky.social/post/3lufqz5fkx22m"}, {"timestamp": "2025-07-20T15:19:52.901Z", "date_only": false, "value": "2025-07-20T15:19:52.901913Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/campuscodi.risky.biz/post/3lufrlzwpuk2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cd30cc2c-dbb3-42bb-bf8c-3f12b25805dc", "url": "https://bsky.app/profile/campuscodi.risky.biz/post/3lufrlzwpuk2z"}, {"timestamp": "2025-07-20T15:40:29.683Z", "date_only": false, "value": "2025-07-20T15:40:29.683516Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3lufsqv67og2l", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b7fb1925-6509-4b03-a7f3-e0c4908723cb", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3lufsqv67og2l"}, {"timestamp": "2025-07-20T15:42:29.867Z", "date_only": false, "value": "2025-07-20T15:42:29.867318Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3lufsuij5y62h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bcfef14f-693c-4fc7-bf04-05b1496ed739", "url": "https://bsky.app/profile/cybersecurity.page/post/3lufsuij5y62h"}, {"timestamp": "2025-07-20T15:43:43.289Z", "date_only": false, "value": "2025-07-20T15:43:43.289426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/harpcoin.co/post/3lufswo265w25", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9debaab0-b9c9-4ac0-ac58-2972162564ae", "url": "https://bsky.app/profile/harpcoin.co/post/3lufswo265w25"}, {"timestamp": "2025-07-20T15:47:37.092Z", "date_only": false, "value": "2025-07-20T15:47:37.092482Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/reynardsec.bsky.social/post/3luft5kks322n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3977bde9-5b50-4369-aece-31c90db36f33", "url": "https://bsky.app/profile/reynardsec.bsky.social/post/3luft5kks322n"}, {"timestamp": "2025-07-20T15:51:51Z", "date_only": false, "value": "2025-07-20T15:51:51.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/22570", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9b4d40e1-d0f4-465b-b3ae-c22e3bfebf6e", "content": "\u200aMicrosoft SharePoint zero-day exploited in RCE attacks, no patch available\n\nA critical zero-day vulnerability in Microsoft SharePoint, tracked as CVE-2025-53770, has been actively exploited since at least July 18th, with no patch available and at least 85 servers already compromised worldwide. [...]\n\nhttps://www.bleepingcomputer.com/news/microsoft/microsoft-sharepoint-zero-day-exploited-in-rce-attacks-no-patch-available/", "url": "https://t.me/BleepingComputer/22570"}, {"timestamp": "2025-07-20T15:58:13.271Z", "date_only": false, "value": "2025-07-20T15:58:13.271214Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technology-news.bsky.social/post/3luftqldpeg2v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "05890683-cbaa-46b1-8619-936fafaf8304", "url": "https://bsky.app/profile/technology-news.bsky.social/post/3luftqldpeg2v"}, {"timestamp": "2025-07-20T16:02:03.647Z", "date_only": false, "value": "2025-07-20T16:02:03.647519Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3luftxhdo3o2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b80a36ed-fca7-4a86-a9aa-5da18ad73f5c", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3luftxhdo3o2m"}, {"timestamp": "2025-07-20T16:11:20.795Z", "date_only": false, "value": "2025-07-20T16:11:20.795827Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andregironda.bsky.social/post/3lufui2tmwc2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dbe0e2b1-9130-412e-a5cf-b3e6ee9f7171", "url": "https://bsky.app/profile/andregironda.bsky.social/post/3lufui2tmwc2n"}, {"timestamp": "2025-07-20T16:23:04.283Z", "date_only": false, "value": "2025-07-20T16:23:04.283619Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lufv4yoncq2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8a6de603-b00d-458e-8a45-050b8e954b55", "url": "https://bsky.app/profile/nimblenerd.social/post/3lufv4yoncq2y"}, {"timestamp": "2025-07-20T16:28:27.969Z", "date_only": false, "value": "2025-07-20T16:28:27.969101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3lufvgonaq62s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ad895856-1e15-492f-b055-bb8c460a965b", "url": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3lufvgonaq62s"}, {"timestamp": "2025-07-20T16:38:17Z", "date_only": false, "value": "2025-07-20T16:38:17.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/zVTUDprwjLpVe5eb4pJLQHBQr7ZffpT1ahcfizSUbcUyGA", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5fce42a1-7928-4279-b0a1-9dbe067be8bf"}, {"timestamp": "2025-07-20T16:39:46.602Z", "date_only": false, "value": "2025-07-20T16:39:46.602647Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/youranonriots.bsky.social/post/3lufw2tltvk2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2abb0342-28b6-4348-8adf-37621a0aff50", "url": "https://bsky.app/profile/youranonriots.bsky.social/post/3lufw2tltvk2t"}, {"timestamp": "2025-07-20T16:41:19.275Z", "date_only": false, "value": "2025-07-20T16:41:19.275656Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lufw5nsteq2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "202618a3-5a24-44c8-a73d-4c1f57dc5f2b", "url": "https://bsky.app/profile/nimblenerd.social/post/3lufw5nsteq2b"}, {"timestamp": "2025-07-20T17:01:48.681Z", "date_only": false, "value": "2025-07-20T17:01:48.681474Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsnexttech.bsky.social/post/3lufxccmy3i2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "08ee561c-6e40-4325-90bb-cd9c096b51eb", "url": "https://bsky.app/profile/newsnexttech.bsky.social/post/3lufxccmy3i2i"}, {"timestamp": "2025-07-20T17:15:23.693Z", "date_only": false, "value": "2025-07-20T17:15:23.693965Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lufy254c75c2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "e455216f-7bf5-4d28-bb58-8cd32e67472c", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lufy254c75c2"}, {"timestamp": "2025-07-20T17:21:26.419Z", "date_only": false, "value": "2025-07-20T17:21:26.419888Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lufyd5olxu62", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "45dcff97-b8fb-4ff3-9b07-3217cbde3a16", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lufyd5olxu62"}, {"timestamp": "2025-07-20T17:35:31.998Z", "date_only": false, "value": "2025-07-20T17:35:31.998202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lufz6mggj32y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "17d021a0-d1a5-4cb9-a414-bc7f00caeb60", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3lufz6mggj32y"}, {"timestamp": "2025-07-20T17:54:47.801Z", "date_only": false, "value": "2025-07-20T17:54:47.801016Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lug2azwk4h2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a20f37fb-e7c1-4468-8e71-b06769ef8aee", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lug2azwk4h2a"}, {"timestamp": "2025-07-20T18:06:09.522Z", "date_only": false, "value": "2025-07-20T18:06:09.522489Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bromiley.io/post/3lug2vea7jc2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dc018818-afd2-4ad6-80d8-f20428cc1f5d", "url": "https://bsky.app/profile/bromiley.io/post/3lug2vea7jc2p"}, {"timestamp": "2025-07-20T18:16:49.868Z", "date_only": false, "value": "2025-07-20T18:16:49.868744Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lug3ihbj3m2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b49a71a8-ba58-47eb-88c0-ce424f80b762", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lug3ihbj3m2z"}, {"timestamp": "2025-07-20T18:26:40.339Z", "date_only": false, "value": "2025-07-20T18:26:40.339338Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lug3zz67aib2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1af27fae-d438-44b3-a4c0-21d0c01e78b4", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lug3zz67aib2"}, {"timestamp": "2025-07-20T19:01:36Z", "date_only": false, "value": "2025-07-20T19:01:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberSecurityIL/73373", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9fd7a282-fcd0-47b1-939b-f809ec841c7b", "content": "\u05e9\u05d9\u05de\u05d5 \u05dc\u05d1 \u05dc\u05d7\u05d5\u05dc\u05e9\u05d4 \u05e7\u05e8\u05d9\u05d8\u05d9\u05ea Zero-Day \u05d1-Microsoft SharePoint \u05d4\u05de\u05e0\u05d5\u05e6\u05dc\u05ea \u05d1\u05e4\u05d5\u05e2\u05dc \u05e2\u05dc \u05d9\u05d3\u05d9 \u05ea\u05d5\u05e7\u05e4\u05d9\u05dd \u05de\u05e1\u05d1\u05d9\u05d1 \u05dc\u05e2\u05d5\u05dc\u05dd (CVE-2025-53770)\n\nhttps://t.me/CyberSecurityIL/7422", "url": "https://t.me/CyberSecurityIL/73373"}, {"timestamp": "2025-07-20T19:15:12.897Z", "date_only": false, "value": "2025-07-20T19:15:12.897743Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lug6qtph5723", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "509c5daa-48a1-4ae8-a3b3-be7d178839e5", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lug6qtph5723"}, {"timestamp": "2025-07-20T19:29:03.785Z", "date_only": false, "value": "2025-07-20T19:29:03.785191Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3lug7jllib52z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a9d9582c-6258-4e56-9c38-33f59726c32c", "url": "https://bsky.app/profile/cyfi-alerts.bsky.social/post/3lug7jllib52z"}, {"timestamp": "2025-07-20T20:00:00Z", "date_only": false, "value": "2025-07-20T20:00:00+00:00", "kind": "kev", "label": "First seen", "source": "1a89b78e-f703-45f3-bb86-59eb712668bd", "record": "CVE-2025-53770", "field": "timestamps.first_seen_at", "uuid": "9d0b5efa-7369-4c7b-a448-529e4a837f2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-20T20:03:05.192Z", "date_only": false, "value": "2025-07-20T20:03:05.192220Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lugbghe6mg26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d92973f9-dcfe-4207-93dc-1da8446584f8", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lugbghe6mg26"}, {"timestamp": "2025-07-20T20:07:15.982Z", "date_only": false, "value": "2025-07-20T20:07:15.982568Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/avmiv.net/post/3lugbnwoj622a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e11d1a89-243a-421a-8a30-f30b34296ac7", "url": "https://bsky.app/profile/avmiv.net/post/3lugbnwoj622a"}, {"timestamp": "2025-07-20T20:21:35.358Z", "date_only": false, "value": "2025-07-20T20:21:35.358611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lugchjpq2b2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5fee18bc-a7be-4ad6-b585-71d4400fdbe1", "url": "https://bsky.app/profile/nimblenerd.social/post/3lugchjpq2b2k"}, {"timestamp": "2025-07-20T20:25:42.282Z", "date_only": false, "value": "2025-07-20T20:25:42.282333Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lugcns5gsrc2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "5d31d32d-0cb6-4499-a1fb-f9b4c629e4c1", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lugcns5gsrc2"}, {"timestamp": "2025-07-20T20:35:54.833Z", "date_only": false, "value": "2025-07-20T20:35:54.833564Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lugdaitn47e2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "9d884f52-83d1-413e-b381-e72042f41420", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lugdaitn47e2"}, {"timestamp": "2025-07-20T21:10:52.072Z", "date_only": false, "value": "2025-07-20T21:10:52.072522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lugf6qiimic2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "8f2594ba-dca1-4d9b-8c01-066b12e1cb58", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lugf6qiimic2"}, {"timestamp": "2025-07-20T21:49:30.131Z", "date_only": false, "value": "2025-07-20T21:49:30.131426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/todb2.hugesuccess.org/post/3lugheg4xy2n2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bfac8edf-677d-405e-a34b-620d6ff8567e", "url": "https://bsky.app/profile/todb2.hugesuccess.org/post/3lugheg4xy2n2"}, {"timestamp": "2025-07-20T21:59:28.627Z", "date_only": false, "value": "2025-07-20T21:59:28.627502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3lughwkxzrc2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "678329bf-3ef3-4e38-8ba2-ef30d16408ab", "url": "https://bsky.app/profile/technofeed.bsky.social/post/3lughwkxzrc2e"}, {"timestamp": "2025-07-20T22:00:00Z", "date_only": false, "value": "2025-07-20T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1598", "record": "WID-SEC-W-2025-1598", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2025-07-20T22:00:00Z", "date_only": false, "value": "2025-07-20T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1598", "record": "WID-SEC-W-2025-1598", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-07-20T22:00:00Z", "date_only": false, "value": "2025-07-20T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1598", "record": "WID-SEC-W-2025-1598", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2025-07-20T22:12:07.569Z", "date_only": false, "value": "2025-07-20T22:12:07.569705Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cxiao.net/post/3lugin6dwzk2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "70568b41-6ba5-4dde-85ce-57ee3210d244", "url": "https://bsky.app/profile/cxiao.net/post/3lugin6dwzk2j"}, {"timestamp": "2025-07-20T22:16:33.310Z", "date_only": false, "value": "2025-07-20T22:16:33.310913Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cxiao.net/post/3lugiv46jus2l", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3b809ce7-5652-494c-b1cf-2eb71cdb1a58", "url": "https://bsky.app/profile/cxiao.net/post/3lugiv46jus2l"}, {"timestamp": "2025-07-20T22:30:57.559Z", "date_only": false, "value": "2025-07-20T22:30:57.559439Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lugjotxxtp22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "62c5ef66-62c9-40ad-b52b-26108c21b7e8", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lugjotxxtp22"}, {"timestamp": "2025-07-20T22:48:32.481Z", "date_only": false, "value": "2025-07-20T22:48:32.481496Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lugkocotyo2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "67ecb624-727b-4f9e-909a-4316aac5a305", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lugkocotyo2d"}, {"timestamp": "2025-07-20T23:01:33Z", "date_only": false, "value": "2025-07-20T23:01:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44761", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "473579c4-1581-4b5e-8789-de99871cd1d8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-53770\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44761"}, {"timestamp": "2025-07-20T23:11:42.413Z", "date_only": false, "value": "2025-07-20T23:11:42.413274Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dogliwilberforce.bsky.social/post/3luglxjqjak2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "851adda1-77a4-432a-8264-e14b586ede6a", "url": "https://bsky.app/profile/dogliwilberforce.bsky.social/post/3luglxjqjak2o"}, {"timestamp": "2025-07-20T23:37:12.647Z", "date_only": false, "value": "2025-07-20T23:37:12.647003Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xchatter.techmeme.com/post/3lugnfdle262l", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0a5ff3c2-b02d-43f2-bbc1-01a39980eae0", "url": "https://bsky.app/profile/xchatter.techmeme.com/post/3lugnfdle262l"}, {"timestamp": "2025-07-20T23:42:10.279Z", "date_only": false, "value": "2025-07-20T23:42:10.279086Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lugno7g4rb2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cbd61ab1-7382-4d85-873c-bb4f3f443158", "url": "https://bsky.app/profile/cyberhub.blog/post/3lugno7g4rb2m"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": true, "value": "2025-07-21", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-53770", "field": "evidence.0.details.due_date", "uuid": "160f3cbc-a649-483b-9380-4fed2056bb10", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "initial_release_date"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0611", "record": "CERTFR-2025-AVI-0611", "field": "initial_release_date"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "revisions.0.revision_date"}, {"timestamp": "2025-07-21T00:00:00Z", "date_only": false, "value": "2025-07-21T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0611", "record": "CERTFR-2025-AVI-0611", "field": "revisions.0.revision_date"}, {"timestamp": "2025-07-21T00:41:56.950Z", "date_only": false, "value": "2025-07-21T00:41:56.950206Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lugqz3sarh27", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b237b6c6-30a9-4355-979c-0f95829c1371", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lugqz3sarh27"}, {"timestamp": "2025-07-21T00:55:44.127Z", "date_only": false, "value": "2025-07-21T00:55:44.127082Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lugrrq7gbd2g", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1ee7a610-ce29-482b-946e-3779e56d6f17", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lugrrq7gbd2g"}, {"timestamp": "2025-07-21T00:59:01.943Z", "date_only": false, "value": "2025-07-21T00:59:01.943460Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/schnoll.bsky.social/post/3lugrxn6fvk2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c67b3d4a-5d35-4879-85e3-7e71da98fb01", "url": "https://bsky.app/profile/schnoll.bsky.social/post/3lugrxn6fvk2e"}, {"timestamp": "2025-07-21T01:08:12.637Z", "date_only": false, "value": "2025-07-21T01:08:12.637594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/informapirata.bsky.social/post/3lugsi2sozx27", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "80aa60da-e4c2-4085-92a4-82fcc1699c80", "url": "https://bsky.app/profile/informapirata.bsky.social/post/3lugsi2sozx27"}, {"timestamp": "2025-07-21T01:08:13.276Z", "date_only": false, "value": "2025-07-21T01:08:13.276297Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/informapirata.bsky.social/post/3lugsi2vs242j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "63ec4207-2873-4286-b7d9-ac13fb45b5d0", "url": "https://bsky.app/profile/informapirata.bsky.social/post/3lugsi2vs242j"}, {"timestamp": "2025-07-21T01:08:13.849Z", "date_only": false, "value": "2025-07-21T01:08:13.849601Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/informapirata.bsky.social/post/3lugsi2yogx27", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b541ae38-4d95-4f9b-b42d-1e581fa1d4c2", "url": "https://bsky.app/profile/informapirata.bsky.social/post/3lugsi2yogx27"}, {"timestamp": "2025-07-21T01:21:31.131Z", "date_only": false, "value": "2025-07-21T01:21:31.131506Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3lugt7tvx3k2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8510169f-e286-43aa-add5-e4ab6540bd0f", "url": "https://bsky.app/profile/threatintel.microsoft.com/post/3lugt7tvx3k2j"}, {"timestamp": "2025-07-21T01:21:31.668Z", "date_only": false, "value": "2025-07-21T01:21:31.668369Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3lugt7twbtc2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "808cb0ea-e117-4afd-bd2c-7a65707aa509", "url": "https://bsky.app/profile/threatintel.microsoft.com/post/3lugt7twbtc2j"}, {"timestamp": "2025-07-21T01:29:10.937Z", "date_only": false, "value": "2025-07-21T01:29:10.937009Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/winobs.com/post/3lugtnkqglm2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "628effc5-d63e-4b27-8709-b315aa74ec17", "url": "https://bsky.app/profile/winobs.com/post/3lugtnkqglm2r"}, {"timestamp": "2025-07-21T02:16:35.077Z", "date_only": false, "value": "2025-07-21T02:16:35.077471Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3lugwccoukc2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1dd01330-8b53-4d59-b139-7e7dbbf821d5", "url": "https://bsky.app/profile/threatintel.microsoft.com/post/3lugwccoukc2q"}, {"timestamp": "2025-07-21T02:22:58.034Z", "date_only": false, "value": "2025-07-21T02:22:58.034155Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/novasc0tia.bsky.social/post/3lugwnm7a2c2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5334ef74-f8f7-45cc-b3ab-24e210d64c46", "url": "https://bsky.app/profile/novasc0tia.bsky.social/post/3lugwnm7a2c2y"}, {"timestamp": "2025-07-21T02:27:38.582Z", "date_only": false, "value": "2025-07-21T02:27:38.582125Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lugww3vwf22u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b03c3c23-7d81-45a4-86af-892ac703de30", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lugww3vwf22u"}, {"timestamp": "2025-07-21T03:00:05Z", "date_only": false, "value": "2025-07-21T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Kk1IKe0ml159jHrnkfkSxjpm7ugerPZpBAlPxAq2Cxp1A60", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "34a93026-3321-4370-8613-b7cfc5586214"}, {"timestamp": "2025-07-21T03:45:23Z", "date_only": false, "value": "2025-07-21T03:45:23.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7189", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c1b959a5-a57c-475a-b69e-e89ad42b7418", "content": "\ud83d\udd25 ALERT \u279f Microsoft issues urgent security patches for critical SharePoint RCE flaw (CVE-2025-53770), now under active exploitation worldwide.\n\nHackers are bypassing MFA, stealing keys, and targeting banks, government agencies, hospitals & more.\n\nDetails \u2192 https://thehackernews.com/2025/07/microsoft-releases-urgent-patch-for.html\n\nIf your SharePoint is on-prem and internet-facing\u2014assume compromise. Patching alone won\u2019t evict the threat.\n\n\ud83d\udee1\ufe0f Urgent steps: Patch, rotate machine keys, restart IIS.", "url": "https://t.me/thehackernews/7189"}, {"timestamp": "2025-07-21T03:46:36.333Z", "date_only": false, "value": "2025-07-21T03:46:36.333272Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rpayne.dev/post/3luh3dcf7g22f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a2c2e1fe-78f0-4264-b115-4ee22bbf1ceb", "url": "https://bsky.app/profile/rpayne.dev/post/3luh3dcf7g22f"}, {"timestamp": "2025-07-21T03:52:37.612Z", "date_only": false, "value": "2025-07-21T03:52:37.612136Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/steffenkoerner.com/post/3luh3nygjg22e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d50eef6d-37d7-4366-9343-d1ef6e5863e7", "url": "https://bsky.app/profile/steffenkoerner.com/post/3luh3nygjg22e"}, {"timestamp": "2025-07-21T03:52:38.167Z", "date_only": false, "value": "2025-07-21T03:52:38.167254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/steffenkoerner.com/post/3luh3nzzr2s2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "87eb7352-58d7-4683-9f87-c9e406c18690", "url": "https://bsky.app/profile/steffenkoerner.com/post/3luh3nzzr2s2e"}, {"timestamp": "2025-07-21T03:52:38.730Z", "date_only": false, "value": "2025-07-21T03:52:38.730724Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/steffenkoerner.com/post/3luh3nzzszc2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d75debfb-1e28-4709-b706-b5f77006c0f1", "url": "https://bsky.app/profile/steffenkoerner.com/post/3luh3nzzszc2e"}, {"timestamp": "2025-07-21T04:00:56.492Z", "date_only": false, "value": "2025-07-21T04:00:56.492233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3luh44whbnx22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2bb20d67-c5ce-4f35-ad77-8323b4f05ddf", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3luh44whbnx22"}, {"timestamp": "2025-07-21T04:02:37.984Z", "date_only": false, "value": "2025-07-21T04:02:37.984785Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3luh47wyidz2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "67aa83b5-f6d5-443c-a04f-2954e6e16961", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3luh47wyidz2q"}, {"timestamp": "2025-07-21T04:39:59.614Z", "date_only": false, "value": "2025-07-21T04:39:59.614173Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3luh6cqoahc2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8715bfe9-e165-4eae-9ce1-eb2d59ec13ab", "url": "https://bsky.app/profile/opsmatters.com/post/3luh6cqoahc2m"}, {"timestamp": "2025-07-21T04:42:06.485Z", "date_only": false, "value": "2025-07-21T04:42:06.485527Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3luh6gjng4w2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2044a45f-d169-4617-b814-ebb837083d3b", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3luh6gjng4w2d"}, {"timestamp": "2025-07-21T04:43:08.090Z", "date_only": false, "value": "2025-07-21T04:43:08.090100Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buhane.com.tr/post/3luh6iedcxf2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "08348e5c-e5ef-4af2-9660-0dc4f15ea7ed", "url": "https://bsky.app/profile/buhane.com.tr/post/3luh6iedcxf2n"}, {"timestamp": "2025-07-21T04:44:10.893Z", "date_only": false, "value": "2025-07-21T04:44:10.893773Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/neowin.net/post/3luh6karhga24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b8796d27-84af-44c4-87e5-c3a18fc36702", "url": "https://bsky.app/profile/neowin.net/post/3luh6karhga24"}, {"timestamp": "2025-07-21T04:47:05Z", "date_only": false, "value": "2025-07-21T04:47:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/44790", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7474f66a-cd31-42cc-9fc1-47a95019550e", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-48384 PoC\nURL\uff1ahttps://github.com/RukshanaAlikhan/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44790"}, {"timestamp": "2025-07-21T04:52:37.306Z", "date_only": false, "value": "2025-07-21T04:52:37.306504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/some-news.bsky.social/post/3luh6zcxqvu2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7b2bdac1-f9c2-487e-b985-2d0a91d39e47", "url": "https://bsky.app/profile/some-news.bsky.social/post/3luh6zcxqvu2z"}, {"timestamp": "2025-07-21T05:23:12Z", "date_only": false, "value": "2025-07-21T05:23:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/22571", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7a172494-e0b2-45b7-bc0c-e436acb3f14c", "content": "\u200aMicrosoft releases emergency patches for SharePoint RCE flaws exploited in attacks\n\nMicrosoft has released emergency SharePoint security updates for two zero-day vulnerabilities tracked as CVE-2025-53770\u00a0and CVE-2025-53771 that have compromised services worldwide in \"ToolShell\" attacks. [...]\n\nhttps://www.bleepingcomputer.com/news/microsoft/microsoft-releases-emergency-patches-for-sharepoint-rce-flaws-exploited-in-attacks/", "url": "https://t.me/BleepingComputer/22571"}, {"timestamp": "2025-07-21T05:40:43.111Z", "date_only": false, "value": "2025-07-21T05:40:43.111466Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3luhbpdkmkz2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1bba8f73-bd73-44c0-9393-1543e800a32f", "url": "https://bsky.app/profile/technofeed.bsky.social/post/3luhbpdkmkz2t"}, {"timestamp": "2025-07-21T05:54:43.833Z", "date_only": false, "value": "2025-07-21T05:54:43.833898Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3luhcieychv2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c1abc88d-4561-410a-9dcf-851c9f2ab3e6", "url": "https://bsky.app/profile/undercode.bsky.social/post/3luhcieychv2y"}, {"timestamp": "2025-07-21T06:08:54.840Z", "date_only": false, "value": "2025-07-21T06:08:54.840185Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/skuebeck.graz.social.ap.brid.gy/post/3luhd4oc2drf2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "962ac0a9-52e1-4f3a-9840-b849dc6bfd41", "url": "https://bsky.app/profile/skuebeck.graz.social.ap.brid.gy/post/3luhd4oc2drf2"}, {"timestamp": "2025-07-21T06:16:37.362Z", "date_only": false, "value": "2025-07-21T06:16:37.362933Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/helpnetsecurity.com/post/3luhdpg35322e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0da5f06d-f5de-4fd9-bcf5-944a832c138e", "url": "https://bsky.app/profile/helpnetsecurity.com/post/3luhdpg35322e"}, {"timestamp": "2025-07-21T06:21:36.349Z", "date_only": false, "value": "2025-07-21T06:21:36.349530Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3luhdyatxl22w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7cebd417-05ae-4073-93ed-5a5a876b8251", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3luhdyatxl22w"}, {"timestamp": "2025-07-21T06:29:30.772Z", "date_only": false, "value": "2025-07-21T06:29:30.772625Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/reynardsec.bsky.social/post/3luhegjheys2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d40b4b9e-cc68-4167-acc7-93e74b267758", "url": "https://bsky.app/profile/reynardsec.bsky.social/post/3luhegjheys2a"}, {"timestamp": "2025-07-21T06:32:35Z", "date_only": false, "value": "2025-07-21T06:32:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44799", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6695743d-5f43-4e91-9577-e6201993945a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aThis PowerShell script detects indicators of compromise for CVE-2025-53770 \u2014 a critical RCE vulnerability in Microsoft SharePoint.  Created by @n1chr0x and @BlackRazer67\nURL\uff1ahttps://github.com/n1chr0x/Zeropoint\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44799"}, {"timestamp": "2025-07-21T06:37:08.652Z", "date_only": false, "value": "2025-07-21T06:37:08.652443Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3luheu7impo2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "77a35e57-66f1-4a92-963d-13aa861c1da9", "url": "https://bsky.app/profile/matricedigitale.bsky.social/post/3luheu7impo2e"}, {"timestamp": "2025-07-21T06:37:28Z", "date_only": false, "value": "2025-07-21T06:37:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/kasperskyb2b/1827", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "60ebcb7a-aa89-460a-98d3-39091036e3b2", "content": "\u2757\ufe0f \u0414\u0432\u0430 0day \u0432 SharePoint \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438\n\n\u0412\u0435\u0447\u0435\u0440\u043e\u043c \u0432 \u043f\u044f\u0442\u043d\u0438\u0446\u0443 \u0441\u0442\u0430\u043b\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 on-prem \u0432\u0435\u0440\u0441\u0438\u044f\u0445 SharePoint 2016, 2019 \u0438 Subscription edition. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u044f\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u044f \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Referer \u0432 \u0437\u0430\u043f\u0440\u043e\u0441\u0430\u0445  \"/_layouts/SignOut.aspx\", \u0430 \u0437\u0430\u0442\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u043f\u0440\u043e\u0441 \u043a \"/_layouts/15/ToolPane.aspx\", \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e _VIEWSTATE.  \u042d\u0442\u0430 \u0430\u0442\u0430\u043a\u0430 \u0431\u044b\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0430 ToolShell.\n\n\u0421\u0443\u0434\u044f \u043f\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f\u043c \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0445 \u0441\u0435\u0439\u0447\u0430\u0441 \u0430\u0442\u0430\u043a, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u043e\u0439 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0431\u0430\u043d\u0430\u043b\u044c\u043d\u044b\u0445 \u0432\u0435\u0431\u0448\u0435\u043b\u043b\u043e\u0432, \u0430 \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0442 \u0438\u0437 \u043d\u0435\u0433\u043e \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043c \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u0432 \u0441\u0435\u0442\u044c \u0441 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u043c\u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u0443\u0434\u0435\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430, \u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0448\u0435\u043b\u043b \u0443\u043d\u0438\u0447\u0442\u043e\u0436\u0435\u043d. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0439.\n\nMicrosoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443, \u0430 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f SharePoint \u043f\u043e\u0437\u0434\u043d\u043e \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043d\u043e\u043c\u0435\u0440\u0430 CVE-2025-53770 \u0438 -53771 (CVSS3.1 9.8 \u0438 6.3). \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0434\u043b\u044f 2019 \u0438 Subscription Edition, \u0430 SharePoint 2016 \u043d\u0435 \u0438\u043c\u0435\u0435\u0442 \u043f\u0430\u0442\u0447\u0430.  \n\u0422\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u043c\u0438 \u0444\u0438\u043a\u0441\u0430\u043c\u0438 \u0434\u043b\u044f \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0437\u0433\u043b\u0430\u0448\u0451\u043d\u043d\u044b\u0445 \u0438 \u044f\u043a\u043e\u0431\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 (CVE-2025-53770 \u044d\u0442\u043e \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043a\u0441\u0430 \u0434\u043b\u044f CVE-2025-49704, CVE-2025-53771 \u044d\u0442\u043e \u043e\u0431\u0445\u043e\u0434 \u0444\u0438\u043a\u0441\u0430 \u0434\u043b\u044f CVE-2025-49706).\n\n\u26a1\ufe0f\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n1\ufe0f\u20e3\u0412 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u2014 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0438\u044e\u043b\u044c\u0441\u043a\u0438\u0435 (KB5002741, KB5002744), \u0430 \u043f\u043e\u0442\u043e\u043c \u0432\u043d\u0435\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0435.\n2\ufe0f\u20e3\u0412 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c  machine keys \u0432 ASP.NET, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c IIS \u0438 SharePoint.\n3\ufe0f\u20e3\u0417\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u043d\u0430 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n4\ufe0f\u20e3\u041f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043f\u043e\u0438\u0441\u043a \u0443\u0433\u0440\u043e\u0437 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0441\u0432\u043e\u0438\u0445 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u043c \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c \u0442\u0435\u043a\u0443\u0449\u0438\u0445 \u0430\u0442\u0430\u043a \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 spinstall0.aspx, \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 IOC \u0437\u0434\u0435\u0441\u044c.\n5\ufe0f\u20e3\u0418\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b. \n6\ufe0f\u20e3\u0417\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441\u0432\u043e\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b \u0432 \u043f\u043e\u043b\u043d\u043e\u0439 \u043c\u0435\u0440\u0435 \u0438\u043b\u0438 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c\u0441\u044f \u043a \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0444\u0438\u0440\u043c\u0435 \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\nP.S. Microsoft \u043d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442, \u0447\u0442\u043e \u0441 2023 \u0433\u043e\u0434\u0430 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0439 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u043e\u0439 SharePoint \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u043a\u043b\u044e\u0447\u0451\u043d\u043d\u044b\u0439 AMSI \u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e \u0437\u0430\u0449\u0438\u0442\u043d\u043e\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u0435.\n\n#Microsoft #\u0443\u0433\u0440\u043e\u0437\u044b @\u041f2\u0422", "url": "https://t.me/kasperskyb2b/1827"}, {"timestamp": "2025-07-21T06:39:32.284Z", "date_only": false, "value": "2025-07-21T06:39:32.284547Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3luheyiuq5b2x", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "62441218-5825-44d4-95b5-9ff77f47011a", "url": "https://bsky.app/profile/undercode.bsky.social/post/3luheyiuq5b2x"}, {"timestamp": "2025-07-21T07:00:00Z", "date_only": false, "value": "2025-07-21T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2025-07-21T07:20:12.402Z", "date_only": false, "value": "2025-07-21T07:20:12.402611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ca-nb.bsky.social/post/3luhhb7o2ki22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5bd73c94-8e4e-4c82-9d74-da09b0ce425e", "url": "https://bsky.app/profile/ca-nb.bsky.social/post/3luhhb7o2ki22"}, {"timestamp": "2025-07-21T07:46:59Z", "date_only": false, "value": "2025-07-21T07:46:59.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7cb49dec-8fc4-4cb5-9ea0-6847a84a8807", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233"}, {"timestamp": "2025-07-21T08:01:26.161Z", "date_only": false, "value": "2025-07-21T08:01:26.161576Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/b00010111.bsky.social/post/3luhjkwet6i2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8ee41311-885a-41b8-a521-828439788d26", "url": "https://bsky.app/profile/b00010111.bsky.social/post/3luhjkwet6i2q"}, {"timestamp": "2025-07-21T08:09:47Z", "date_only": false, "value": "2025-07-21T08:09:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cert.at/de/warnungen/2025/7/kritische-sicherheitslucke-in-microsoft-sharepoint-aktiv-ausgenutzt-updates-verfugbar", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "167d0a05-152f-4a13-b8cf-6d0788de0ef1", "url": "https://www.cert.at/de/warnungen/2025/7/kritische-sicherheitslucke-in-microsoft-sharepoint-aktiv-ausgenutzt-updates-verfugbar"}, {"timestamp": "2025-07-21T08:17:21.713Z", "date_only": false, "value": "2025-07-21T08:17:21.713388Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3luhkhgti2s2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4a3f0466-2369-41cc-b6c8-c02f0930aae0", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3luhkhgti2s2r"}, {"timestamp": "2025-07-21T08:21:56.658Z", "date_only": false, "value": "2025-07-21T08:21:56.658070Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ransomnews.online/post/3luhkphscwc2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3e3d7674-f34f-4823-880f-260f5332144f", "url": "https://bsky.app/profile/ransomnews.online/post/3luhkphscwc2y"}, {"timestamp": "2025-07-21T08:27:04.198Z", "date_only": false, "value": "2025-07-21T08:27:04.198054Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvynckier.bsky.social/post/3luhkyri53s2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d66729d7-3ce8-46c1-a540-f6442eb48d53", "url": "https://bsky.app/profile/pvynckier.bsky.social/post/3luhkyri53s2r"}, {"timestamp": "2025-07-21T08:29:26.057Z", "date_only": false, "value": "2025-07-21T08:29:26.057593Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pitrh.mastodon.social.ap.brid.gy/post/3luhl4r7f46b2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "51a27cc3-1c92-4681-b03a-9ee7b5707b2d", "url": "https://bsky.app/profile/pitrh.mastodon.social.ap.brid.gy/post/3luhl4r7f46b2"}, {"timestamp": "2025-07-21T08:33:50Z", "date_only": false, "value": "2025-07-21T08:33:50.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/RedPillDealer4833/210905", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2f1a26a4-66bf-441b-9480-69f61d2a65ff", "content": "https://x.com/The_Hunt_x/status/1947185963807236380\n\nCVE-2025-53770 - CRITICAL\n\nmassive vulnerability just announced which is actively being exploited in the wild with over 75 companies already breached.\n\nFor a while, if you use SharePoint, don't.\n\nAnnounced one hour ago from this time stamp 00;54 PDT", "url": "https://t.me/RedPillDealer4833/210905"}, {"timestamp": "2025-07-21T08:34:48.688Z", "date_only": false, "value": "2025-07-21T08:34:48.688102Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/samilaiho.com/post/3luhlgn7xms2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "eaf0027d-ac27-4f4a-b436-85c8e94244d3", "url": "https://bsky.app/profile/samilaiho.com/post/3luhlgn7xms2z"}, {"timestamp": "2025-07-21T08:35:05Z", "date_only": false, "value": "2025-07-21T08:35:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/rNZXhWUIWvlbY-Depe_BrMQomz_lW6MIpAt6n-ZnYqp97qZ0", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e6c8ef5b-eefb-45e0-96cd-229cf17a7669"}, {"timestamp": "2025-07-21T08:38:07Z", "date_only": false, "value": "2025-07-21T08:38:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/17841", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "494b8b36-79c7-4347-acc8-ebccaffed236", "content": "Microsoft \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447: 0-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 RCE-\u0430\u0442\u0430\u043a\u0430\u0445\n\n\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e, \u0447\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 Microsoft SharePoint (CVE-2025-53770 \u0438 CVE-2025-53771) \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442\u0441\u044f \u0441 \u043a\u043e\u043d\u0446\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0438, \u0438 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443 \u0431\u044b\u043b\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0435 \u043c\u0435\u043d\u0435\u0435 85 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\nhttps://xakep.ru/2025/07/21/sharepoint-0days/", "url": "https://t.me/xakep_ru/17841"}, {"timestamp": "2025-07-21T08:41:10.528Z", "date_only": false, "value": "2025-07-21T08:41:10.528667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3luhlrzag3p2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7a1675c3-ee7e-49cd-ba0c-a1771ff4b78b", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3luhlrzag3p2y"}, {"timestamp": "2025-07-21T08:52:04.906Z", "date_only": false, "value": "2025-07-21T08:52:04.906984Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3luhmfj2bjx2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "37e380f8-6ac0-47ac-ba2b-7d0e710b5bcf", "url": "https://bsky.app/profile/nimblenerd.social/post/3luhmfj2bjx2h"}, {"timestamp": "2025-07-21T08:52:16.722Z", "date_only": false, "value": "2025-07-21T08:52:16.722818Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3luhmfud7d32b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "223e3390-bbda-4cc7-b438-b1d5d535baec", "url": "https://bsky.app/profile/nimblenerd.social/post/3luhmfud7d32b"}, {"timestamp": "2025-07-21T09:00:05Z", "date_only": false, "value": "2025-07-21T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/pRBoiiDCv7j0v1z4LMeThAEILnqKOjLaOnbsktOhBgY6EJM", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "398e2297-d97b-49d8-a7a3-581484b6e59e"}, {"timestamp": "2025-07-21T09:07:00.479Z", "date_only": false, "value": "2025-07-21T09:07:00.479092Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xchatter.techmeme.com/post/3luhna7t5qf27", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "369607a1-0b31-42d5-a1ea-7e17edf69241", "url": "https://bsky.app/profile/xchatter.techmeme.com/post/3luhna7t5qf27"}, {"timestamp": "2025-07-21T09:17:57.076Z", "date_only": false, "value": "2025-07-21T09:17:57.076010Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/j91321.bsky.social/post/3luhntspngs2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "99e0dc91-5d30-493c-a9d7-31bcd831466c", "url": "https://bsky.app/profile/j91321.bsky.social/post/3luhntspngs2o"}, {"timestamp": "2025-07-21T09:46:59.357Z", "date_only": false, "value": "2025-07-21T09:46:59.357124Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0233", "record": "NCSC-2025-0233", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-07-21T09:48:33.774Z", "date_only": false, "value": "2025-07-21T09:48:33.774064Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/withsecure.bsky.social/post/3luhpkgsjf22c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6c483e2d-b6d7-4464-9fab-b83fd1009875", "url": "https://bsky.app/profile/withsecure.bsky.social/post/3luhpkgsjf22c"}, {"timestamp": "2025-07-21T09:52:12.547Z", "date_only": false, "value": "2025-07-21T09:52:12.547201Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/withsecure.bsky.social/post/3luhpqy5x7s2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d8bd7776-a684-429e-b6d0-1c4b64ab3abf", "url": "https://bsky.app/profile/withsecure.bsky.social/post/3luhpqy5x7s2p"}, {"timestamp": "2025-07-21T09:58:39Z", "date_only": false, "value": "2025-07-21T09:58:39.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/53876", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e033b438-45dd-41c2-99ee-2b9f644787e2", "content": "Microsoft Patches \u2018ToolShell\u2019 Zero-Days Exploited to Hack SharePoint Servers\nhttps://www.securityweek.com/microsoft-patches-toolshell-zero-days-exploited-to-hack-sharepoint-servers/\n\nMicrosoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771.\nThe post Microsoft Patches \u2018ToolShell\u2019 Zero-Days Exploited to Hack SharePoint Servers (https://www.securityweek.com/microsoft-patches-toolshell-zero-days-exploited-to-hack-sharepoint-servers/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/53876"}, {"timestamp": "2025-07-21T10:25:19.210Z", "date_only": false, "value": "2025-07-21T10:25:19.210703Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/channelpartner.bsky.social/post/3luhrm55gb22h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2993cd77-85aa-4865-adec-e9be4b3ac2c4", "url": "https://bsky.app/profile/channelpartner.bsky.social/post/3luhrm55gb22h"}, {"timestamp": "2025-07-21T10:26:52Z", "date_only": false, "value": "2025-07-21T10:26:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/21/critical-microsoft-sharepoint-zerodays-exploited.html", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9ad9c04d-23e5-44c0-b259-84a2c79b1ec4", "url": "https://threatintel.cc/2025/07/21/critical-microsoft-sharepoint-zerodays-exploited.html"}, {"timestamp": "2025-07-21T10:35:01.617Z", "date_only": false, "value": "2025-07-21T10:35:01.617690Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intruder-io.bsky.social/post/3luhs5jvbok2x", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "449e6088-32b1-4859-b17f-af17c0e1866e", "url": "https://bsky.app/profile/intruder-io.bsky.social/post/3luhs5jvbok2x"}, {"timestamp": "2025-07-21T10:48:22Z", "date_only": false, "value": "2025-07-21T10:48:22.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d9da16a2-8444-45cb-8bb4-d27abf23a261", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "beec9081-f799-4cca-a7c6-f72b42816a5e"}, {"timestamp": "2025-07-21T10:49:42.171Z", "date_only": false, "value": "2025-07-21T10:49:42.171374Z", "kind": "sighting", "label": "Confirmed", "source": "https://research.eye.security/sharepoint-under-siege/", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "35459111-af0b-485c-bfda-8c0647311efd", "url": "https://research.eye.security/sharepoint-under-siege/"}, {"timestamp": "2025-07-21T11:07:10.364Z", "date_only": false, "value": "2025-07-21T11:07:10.364728Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114890898573717866", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4fa28b84-53d8-4550-b003-c8dc9dbec83b", "url": "https://infosec.exchange/users/dragonjar/statuses/114890898573717866"}, {"timestamp": "2025-07-21T11:12:35.620Z", "date_only": false, "value": "2025-07-21T11:12:35.620107Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rodtrent.com/post/3luhuarsus42o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ef167b51-05af-46c0-809e-b54a91440d23", "url": "https://bsky.app/profile/rodtrent.com/post/3luhuarsus42o"}, {"timestamp": "2025-07-21T11:20:26Z", "date_only": false, "value": "2025-07-21T11:20:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44826", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1f42ff37-db7f-4c6c-84dc-7ca957ec3f4c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDetects unauthenticated POST requests to ToolPane.aspx with a SignOut.aspx referer,   observed in exploitation of CVE-2025-53770 against SharePoint\nURL\uff1ahttps://github.com/aazamil/SharePoint-ToolShell-Detection\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44826"}, {"timestamp": "2025-07-21T11:23:18.041Z", "date_only": false, "value": "2025-07-21T11:23:18.041146Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3luhutwggzp26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c884243c-ff11-4b6c-800d-3ab2cad15db5", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3luhutwggzp26"}, {"timestamp": "2025-07-21T11:52:55.543Z", "date_only": false, "value": "2025-07-21T11:52:55.543268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/matricedigitale.bsky.social/post/3luhwiuytbo2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "107ddadc-3858-4753-b1d3-3a789e98303b", "url": "https://bsky.app/profile/matricedigitale.bsky.social/post/3luhwiuytbo2n"}, {"timestamp": "2025-07-21T11:55:39.990Z", "date_only": false, "value": "2025-07-21T11:55:39.990622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3luhwns2cpq2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "89b42b42-38fb-4580-a5d3-26e409e5cf68", "url": "https://bsky.app/profile/nimblenerd.social/post/3luhwns2cpq2t"}, {"timestamp": "2025-07-21T12:25:05.015Z", "date_only": false, "value": "2025-07-21T12:25:05.015697Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ransomwaresommelier.com/post/3luhycdnrs22v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ff7b617c-65e6-4ecd-a4e4-faf937908de1", "url": "https://bsky.app/profile/ransomwaresommelier.com/post/3luhycdnrs22v"}, {"timestamp": "2025-07-21T12:37:24Z", "date_only": false, "value": "2025-07-21T12:37:24.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.darkreading.com/remote-workforce/microsoft-rushes-emergency-fix-exploited-sharepoint-toolshell-flaw", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4cd42185-6550-4dbf-807a-37754a0a5d1b", "url": "https://www.darkreading.com/remote-workforce/microsoft-rushes-emergency-fix-exploited-sharepoint-toolshell-flaw"}, {"timestamp": "2025-07-21T12:43:11.400Z", "date_only": false, "value": "2025-07-21T12:43:11.400414Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vxundergroundre.bsky.social/post/3luhzcrqhtk2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cace0ed5-bda0-4992-ad3d-a537b6ed332b", "url": "https://bsky.app/profile/vxundergroundre.bsky.social/post/3luhzcrqhtk2c"}, {"timestamp": "2025-07-21T12:44:53.524Z", "date_only": false, "value": "2025-07-21T12:44:53.524540Z", "kind": "sighting", "label": "Seen", "source": "https://www.circl.lu/pub/tr-95/", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f3ef74d1-75ca-41e4-bff5-734138ceda06", "url": "https://www.circl.lu/pub/tr-95/"}, {"timestamp": "2025-07-21T12:45:46Z", "date_only": false, "value": "2025-07-21T12:45:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://krebsonsecurity.com/2025/07/microsoft-fix-targets-attacks-on-sharepoint-zero-day/", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d0e4a198-aadc-42d5-99bd-60c2ce037ee2", "url": "https://krebsonsecurity.com/2025/07/microsoft-fix-targets-attacks-on-sharepoint-zero-day/"}, {"timestamp": "2025-07-21T12:52:48.397Z", "date_only": false, "value": "2025-07-21T12:52:48.397681Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3luhztx6q5g2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9b9a551e-a20f-4e59-955e-a35a7219e68a", "url": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3luhztx6q5g2z"}, {"timestamp": "2025-07-21T12:54:20Z", "date_only": false, "value": "2025-07-21T12:54:20.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44836", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a0b6809a-6de6-4234-a11b-370fa114297d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA comprehensive security monitoring solution for SharePoint Server with specific protection against CVE-2025-53770 and other threats\nURL\uff1ahttps://github.com/paolokappa/SharePointSecurityMonitor\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44836"}, {"timestamp": "2025-07-21T12:59:27.759Z", "date_only": false, "value": "2025-07-21T12:59:27.759734Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rapid7.com/post/3lui27rzr6c2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f62ee647-07b9-422c-8468-dd4b42624fb4", "url": "https://bsky.app/profile/rapid7.com/post/3lui27rzr6c2h"}, {"timestamp": "2025-07-21T13:04:06.752Z", "date_only": false, "value": "2025-07-21T13:04:06.752116Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technijian.bsky.social/post/3lui2hvcl7s2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "938006e2-bb4d-4e62-8d8a-0acde08917fd", "url": "https://bsky.app/profile/technijian.bsky.social/post/3lui2hvcl7s2s"}, {"timestamp": "2025-07-21T13:14:57.765Z", "date_only": false, "value": "2025-07-21T13:14:57.765859Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shawnbrink.bsky.social/post/3lui33lfacc2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f341510f-952e-468d-8c47-54e34dae9efd", "url": "https://bsky.app/profile/shawnbrink.bsky.social/post/3lui33lfacc2r"}, {"timestamp": "2025-07-21T13:44:48.366Z", "date_only": false, "value": "2025-07-21T13:44:48.366703Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jaebea.bsky.social/post/3lui4qvro3s2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "267a8b5e-5a9a-415c-8b52-0570a8aea6de", "url": "https://bsky.app/profile/jaebea.bsky.social/post/3lui4qvro3s2f"}, {"timestamp": "2025-07-21T13:52:31.193Z", "date_only": false, "value": "2025-07-21T13:52:31.193695Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/threatcodex/statuses/114891551593489087", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "24f70b99-1614-4295-b156-21e2212ef2a7", "url": "https://infosec.exchange/users/threatcodex/statuses/114891551593489087"}, {"timestamp": "2025-07-21T14:01:17.734Z", "date_only": false, "value": "2025-07-21T14:01:17.734902Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/momsmysteries.bsky.social/post/3lui5ogmloc2v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2166a676-dda8-4bac-866c-6886e08ba006", "url": "https://bsky.app/profile/momsmysteries.bsky.social/post/3lui5ogmloc2v"}, {"timestamp": "2025-07-21T14:01:22.761Z", "date_only": false, "value": "2025-07-21T14:01:22.761514Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lui5olphvg23", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d50042f8-67c1-44e1-8c2f-7a0d8c2c76e8", "url": "https://bsky.app/profile/socprime.com/post/3lui5olphvg23"}, {"timestamp": "2025-07-21T14:02:15.446Z", "date_only": false, "value": "2025-07-21T14:02:15.446232Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lui5pyj3ks2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f3dfd7b2-8571-447c-a334-145a13748082", "url": "https://bsky.app/profile/socprime.com/post/3lui5pyj3ks2q"}, {"timestamp": "2025-07-21T14:02:36Z", "date_only": false, "value": "2025-07-21T14:02:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7251", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7fcf699f-c053-4a30-9c95-9da819f77995", "content": "Microsoft \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432 SharePoint Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-53770 \u0438 CVE-2025-53771.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 Eye Security, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-53770 \u0438 CVE-2025-53771, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 ToolShell, \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 18 \u0438\u044e\u043b\u044f.\n\n\u041d\u0430 \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u0432 \u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0437\u0434\u043d\u043e \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint Subscription Edition \u0438 SharePoint 2019. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f SharePoint 2016 - \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435.\n\nCVE-2025-53770 \u0438 CVE-2025-53771 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 Eye Security \u0438 Google, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0438 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u00a0\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u043b\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0438\u043c  \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Eye Security \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 SharePoint, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e ToolShell.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ShadowServer \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 9000\u00a0\u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 SharePoint, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435, \u043d\u043e \u043f\u043e\u043a\u0430 \u0431\u0435\u0437 \u043c\u0430\u0440\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Palo Alto Networks \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2025-49704 \u0438 CVE-2025-49706 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCVE-2025-53770 \u0438 CVE-2025-53771 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 CVE-2025-49706 \u0438 CVE-2025-49704, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Viettel \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u0442\u0443\u0440\u043d\u0438\u0440\u0435 Pwn2Own \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435, \u043e \u0447\u0435\u043c \u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438.\n\nMicrosoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-49706 \u0438 CVE-2025-49704 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0437\u0430 \u0438\u044e\u043b\u044c 2025 \u0433\u043e\u0434\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Code White \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 ToolShell, \u043f\u043e\u043a\u0430\u0437\u0430\u0432, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0435\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0438\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0434\u043b\u044f CVE-2025-49706 \u0438 CVE-2025-49704 \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint.\n\n\u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 CVE: CVE-2025-53770 \u0438 CVE-2025-53771, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442, \u043a\u0430\u043a \u0443\u0432\u0435\u0440\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u0431\u043e\u043b\u0435\u0435 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0435\u0436\u0435\u043b\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 CVE-2025-49704 \u0438 CVE-2025-49706.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Microsoft \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-53771 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043c\u0438\u043a\u0440\u043e\u043c\u044f\u0433\u043a\u0438\u0435, \u043a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430, \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u0435\u043f\u0435\u0440\u0442\u0443\u0430\u0440\u0435.", "url": "https://t.me/true_secator/7251"}, {"timestamp": "2025-07-21T14:03:02.976Z", "date_only": false, "value": "2025-07-21T14:03:02.976544Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/socprime.com/post/3lui5rgqlcs2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fcc3d790-0255-42a7-9374-4572d7da8386", "url": "https://bsky.app/profile/socprime.com/post/3lui5rgqlcs2q"}, {"timestamp": "2025-07-21T14:11:08.086Z", "date_only": false, "value": "2025-07-21T14:11:08.086832Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lui67zr4vk2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0bd4ed61-90dd-4a6a-9b63-5fc83fd46a0c", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lui67zr4vk2a"}, {"timestamp": "2025-07-21T14:25:31Z", "date_only": false, "value": "2025-07-21T14:25:31.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44844", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6868aef4-8d88-41f5-aca3-fa582ebae067", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aScanner for the SharePoint CVE-2025-53770 zero day vulnerability.\nURL\uff1ahttps://github.com/hazcod/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44844"}, {"timestamp": "2025-07-21T14:32:50.301Z", "date_only": false, "value": "2025-07-21T14:32:50.301118Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114891710077158230", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7bf01323-bc2b-438f-b128-bf8edb3110ad", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114891710077158230"}, {"timestamp": "2025-07-21T14:56:48.115Z", "date_only": false, "value": "2025-07-21T14:56:48.115653Z", "kind": "sighting", "label": "Seen", "source": "https://chaos.social/users/christopherkunz/statuses/114891804314572685", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7312f330-50db-4817-8e91-9b248b5a02e2", "url": "https://chaos.social/users/christopherkunz/statuses/114891804314572685"}, {"timestamp": "2025-07-21T15:00:06Z", "date_only": false, "value": "2025-07-21T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OfnIDPmAFs0rAOlHw_eXR0j7Vkoel5eBSFNWkjtXQVWONMM", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "626c251f-020c-422c-9c6e-4e33ed2348e2"}, {"timestamp": "2025-07-21T15:03:34.376Z", "date_only": false, "value": "2025-07-21T15:03:34.376425Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techpresso.bsky.social/post/3luib5snps727", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ec6d8bcb-8fb2-4338-ae06-f995f9ae77db", "url": "https://bsky.app/profile/techpresso.bsky.social/post/3luib5snps727"}, {"timestamp": "2025-07-21T15:24:12.685Z", "date_only": false, "value": "2025-07-21T15:24:12.685596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luicckkaak2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d044ec3b-9c8b-47f0-8403-1c31519888e1", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3luicckkaak2s"}, {"timestamp": "2025-07-21T15:30:09Z", "date_only": false, "value": "2025-07-21T15:30:09.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/5774", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "67f4abe8-63b3-4136-95d9-5301f79be434", "content": "Microsoft \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432 SharePoint Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-53770 \u0438 CVE-2025-53771.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 Eye Security, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-53770 \u0438 CVE-2025-53771, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 ToolShell, \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 18 \u0438\u044e\u043b\u044f.\n\n\u041d\u0430 \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u0432 \u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0437\u0434\u043d\u043e \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint Subscription Edition \u0438 SharePoint 2019. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f SharePoint 2016 - \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435.\n\nCVE-2025-53770 \u0438 CVE-2025-53771 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 Eye Security \u0438 Google, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0438 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u00a0\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u043b\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0438\u043c  \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Eye Security \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 SharePoint, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e ToolShell.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ShadowServer \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 9000\u00a0\u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 SharePoint, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435, \u043d\u043e \u043f\u043e\u043a\u0430 \u0431\u0435\u0437 \u043c\u0430\u0440\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Palo Alto Networks \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2025-49704 \u0438 CVE-2025-49706 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCVE-2025-53770 \u0438 CVE-2025-53771 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 CVE-2025-49706 \u0438 CVE-2025-49704, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Viettel \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u0442\u0443\u0440\u043d\u0438\u0440\u0435 Pwn2Own \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435, \u043e \u0447\u0435\u043c \u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438.\n\nMicrosoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-49706 \u0438 CVE-2025-49704 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0437\u0430 \u0438\u044e\u043b\u044c 2025 \u0433\u043e\u0434\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Code White \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 ToolShell, \u043f\u043e\u043a\u0430\u0437\u0430\u0432, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0435\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0438\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0434\u043b\u044f CVE-2025-49706 \u0438 CVE-2025-49704 \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint.\n\n\u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 CVE: CVE-2025-53770 \u0438 CVE-2025-53771, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442, \u043a\u0430\u043a \u0443\u0432\u0435\u0440\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u0431\u043e\u043b\u0435\u0435 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0435\u0436\u0435\u043b\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 CVE-2025-49704 \u0438 CVE-2025-49706.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Microsoft \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-53771 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043c\u0438\u043a\u0440\u043e\u043c\u044f\u0433\u043a\u0438\u0435, \u043a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430, \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u0435\u043f\u0435\u0440\u0442\u0443\u0430\u0440\u0435.", "url": "https://t.me/S_E_Reborn/5774"}, {"timestamp": "2025-07-21T15:32:16.732Z", "date_only": false, "value": "2025-07-21T15:32:16.732878Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luicp54viwj2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fb1ad9ed-bfef-4744-a81a-893ae218d588", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luicp54viwj2"}, {"timestamp": "2025-07-21T15:41:05.668Z", "date_only": false, "value": "2025-07-21T15:41:05.668847Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luidartbcs2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3556d37a-e57c-40a0-a7ac-fb70a19928d4", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3luidartbcs2s"}, {"timestamp": "2025-07-21T15:47:24Z", "date_only": false, "value": "2025-07-21T15:47:24.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/alexmakus/5475", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "431d041c-466a-49e3-b92f-f86e5b41152d", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u043d\u0430\u0448\u043b\u0438 \u0438 \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Microsoft SharePoint Server \u2014 \u043c\u043e\u0436\u043d\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043a\u043e\u0434, \u043a\u0440\u0430\u0441\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043b\u043e\u0433\u0438\u043d\u044b, \u0430 \u043f\u043e\u0442\u043e\u043c \u0447\u0435\u0440\u0435\u0437 \u044d\u0442\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u0430\u0442\u044c \u0432 Outlook, Teams, OneDrive \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u0435\u0440\u0432\u0438\u0441\u044b.\nhttps://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/\n\n\u041f\u0435\u0440\u0432\u044b\u043c\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c 18 \u0438\u044e\u043b\u044f \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0432 Eye Security https://research.eye.security/sharepoint-under-siege/  \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 ID CVE-2025-53770 \u0438 \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445.\n\n\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442:\n \u2022 \u041f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u043b\u0438 \u0433\u043e\u0441\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b, \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u044b, \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0430 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u0432\u0430\u0436\u043d\u044b\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n \u2022 \u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0435\u0441\u0442\u044c \u0434\u043b\u044f SharePoint Server 2019\nhttps://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/ \n \u2022 \u0414\u043b\u044f SharePoint 2016 \u2014 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0435\u0449\u0451 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435.\nhttps://twitter.com/msftsecresponse/status/1947115278644473939\n\n\u0427\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c:\n \u2022 \u0415\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 SharePoint \u043d\u0430 \u0441\u0432\u043e\u0451\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u2014 \u0441\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435\u0441\u044c.\n \u2022 \u041f\u043e\u043a\u0430 \u043d\u0435\u0442 \u043f\u0430\u0442\u0447\u0430 \u2014 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u0435 \u0441\u0435\u0440\u0432\u0435\u0440 \u043e\u0442 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438 \u043f\u043e\u043c\u0435\u043d\u044f\u0439\u0442\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438 \u043f\u0430\u0440\u043e\u043b\u0438, \u0447\u0442\u043e\u0431\u044b \u0438\u0437\u0431\u0435\u0436\u0430\u0442\u044c \u043f\u043e\u0432\u0442\u043e\u0440\u043d\u043e\u0433\u043e \u0432\u0437\u043b\u043e\u043c\u0430.", "url": "https://t.me/alexmakus/5475"}, {"timestamp": "2025-07-21T15:52:05.150Z", "date_only": false, "value": "2025-07-21T15:52:05.150260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3luidukfdx62x", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9564084a-da3d-4de5-ad71-1e1f4cf69943", "url": "https://bsky.app/profile/undercode.bsky.social/post/3luidukfdx62x"}, {"timestamp": "2025-07-21T15:55:51.594Z", "date_only": false, "value": "2025-07-21T15:55:51.594657Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luie35kso22t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7ec73e83-b4d4-4901-aa55-0502eeeff4ec", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3luie35kso22t"}, {"timestamp": "2025-07-21T16:00:11.790Z", "date_only": false, "value": "2025-07-21T16:00:11.790031Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3luiecqfrks2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6fbd5de5-0a55-4160-8b23-de803e9c4c71", "url": "https://bsky.app/profile/technadu.com/post/3luiecqfrks2c"}, {"timestamp": "2025-07-21T16:01:09.961Z", "date_only": false, "value": "2025-07-21T16:01:09.961535Z", "kind": "sighting", "label": "Seen", "source": "https://vulnerability.circl.lu/comment/6e5a8ab6-af04-4d85-aea9-87780f1fd8f8", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1ef60c5b-c615-4d98-885f-7270526e6fe3", "url": "https://vulnerability.circl.lu/comment/6e5a8ab6-af04-4d85-aea9-87780f1fd8f8"}, {"timestamp": "2025-07-21T16:03:19.660Z", "date_only": false, "value": "2025-07-21T16:03:19.660615Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3luieinppta2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a6d33bb8-7478-490b-8bbe-50ec951661c5", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3luieinppta2t"}, {"timestamp": "2025-07-21T16:15:41.073Z", "date_only": false, "value": "2025-07-21T16:15:41.073461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3luif6m2mds2g", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "adf0193a-a403-45a8-b13c-f3ebcc705c1a", "url": "https://bsky.app/profile/leekthehack.bsky.social/post/3luif6m2mds2g"}, {"timestamp": "2025-07-21T16:21:14.733Z", "date_only": false, "value": "2025-07-21T16:21:14.733944Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lancetay.bsky.social/post/3luifil7vk224", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a82d9515-9e65-4380-a2a4-313b8e94180d", "url": "https://bsky.app/profile/lancetay.bsky.social/post/3luifil7vk224"}, {"timestamp": "2025-07-21T16:27:31.089Z", "date_only": false, "value": "2025-07-21T16:27:31.089503Z", "kind": "sighting", "label": "Seen", "source": "https://social.tchncs.de/users/gborn/statuses/114892161037093670", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "e9ada9fc-53a2-422b-a913-02e1c19001e2", "url": "https://social.tchncs.de/users/gborn/statuses/114892161037093670"}, {"timestamp": "2025-07-21T16:42:09.971Z", "date_only": false, "value": "2025-07-21T16:42:09.971671Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luigo47suv2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4d4b8488-7a49-47ee-af03-cfca3e64d3cc", "url": "https://bsky.app/profile/cyberhub.blog/post/3luigo47suv2d"}, {"timestamp": "2025-07-21T16:54:31.686Z", "date_only": false, "value": "2025-07-21T16:54:31.686346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3luihe7kie32f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f245a725-f245-4c35-8495-6b6767586355", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3luihe7kie32f"}, {"timestamp": "2025-07-21T16:54:54.774Z", "date_only": false, "value": "2025-07-21T16:54:54.774137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bajiri.bsky.social/post/3luiheuymhc2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e41831b4-56a1-4694-add6-20d30ccf4f68", "url": "https://bsky.app/profile/bajiri.bsky.social/post/3luiheuymhc2b"}, {"timestamp": "2025-07-21T17:15:55.158Z", "date_only": false, "value": "2025-07-21T17:15:55.158322Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3luiikhmxi22a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "391f6a1e-5456-44ac-870f-209e7cff1ee6", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3luiikhmxi22a"}, {"timestamp": "2025-07-21T17:36:36Z", "date_only": false, "value": "2025-07-21T17:36:36.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/oNsXLgOgJecWQgo5XxKlFIrMAmEhLqxX4RPdypA6Oj237y4", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f6e817cf-3121-4369-8409-cc2f298f29fa"}, {"timestamp": "2025-07-21T17:40:55.441Z", "date_only": false, "value": "2025-07-21T17:40:55.441226Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luijx2l4m5f2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "8c001a96-a0d9-476c-a566-1c00599e77bb", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luijx2l4m5f2"}, {"timestamp": "2025-07-21T17:41:23.861Z", "date_only": false, "value": "2025-07-21T17:41:23.861386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mcborroughvcxo.bsky.social/post/3luijxymcoj2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ed715298-46e7-4e66-b94d-470d9bac96ac", "url": "https://bsky.app/profile/mcborroughvcxo.bsky.social/post/3luijxymcoj2b"}, {"timestamp": "2025-07-21T17:42:10.904Z", "date_only": false, "value": "2025-07-21T17:42:10.904880Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luijzg4qnl26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6d319b0a-4be3-46b8-a482-64c7c17af9aa", "url": "https://bsky.app/profile/cyberhub.blog/post/3luijzg4qnl26"}, {"timestamp": "2025-07-21T17:44:53Z", "date_only": false, "value": "2025-07-21T17:44:53.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44863", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "aacd5226-4285-4c4f-a01c-5261899de97c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aToolShell scanner - CVE-2025-53770\nURL\uff1ahttps://github.com/ZephrFish/CVE-2025-53770-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44863"}, {"timestamp": "2025-07-21T17:49:28.528Z", "date_only": false, "value": "2025-07-21T17:49:28.528502Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgegztk2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "aafd9df4-2b0a-4fa9-a8ce-c2e259a89833", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgegztk2m"}, {"timestamp": "2025-07-21T17:49:29.613Z", "date_only": false, "value": "2025-07-21T17:49:29.613197Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbqdc2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3eece686-579e-4c40-a1e9-ce95c9895d9a", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbqdc2m"}, {"timestamp": "2025-07-21T17:49:30.713Z", "date_only": false, "value": "2025-07-21T17:49:30.713767Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrck2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c69ae88b-ea0f-4415-b715-9fb85062c8ae", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrck2m"}, {"timestamp": "2025-07-21T17:49:31.754Z", "date_only": false, "value": "2025-07-21T17:49:31.754624Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrcl2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fd1f156b-d5ed-4472-9d9e-7892eba4fa57", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrcl2m"}, {"timestamp": "2025-07-21T17:49:32.821Z", "date_only": false, "value": "2025-07-21T17:49:32.821390Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrcm2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8118e2f2-d371-4bc8-b02b-3cfe7ee95aad", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrcm2m"}, {"timestamp": "2025-07-21T17:49:33.912Z", "date_only": false, "value": "2025-07-21T17:49:33.912540Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrcn2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "880c870e-752c-41d1-9772-0356e2cc5d36", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbrcn2m"}, {"timestamp": "2025-07-21T17:49:34.963Z", "date_only": false, "value": "2025-07-21T17:49:34.963854Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbsbv2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "634c464f-55ad-4f7d-ab88-df5ab158d711", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbsbv2m"}, {"timestamp": "2025-07-21T17:49:36.054Z", "date_only": false, "value": "2025-07-21T17:49:36.054137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbsbw2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e4dc8b3c-39ce-4565-8320-bc7d791e26ce", "url": "https://bsky.app/profile/knightsbridge.ltd/post/3luikgfbsbw2m"}, {"timestamp": "2025-07-21T17:51:26.168Z", "date_only": false, "value": "2025-07-21T17:51:26.168958Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dragstersystems.bsky.social/post/3luikjte2722w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1f1cd595-e80d-4834-ba23-2dbebbb02bb3", "url": "https://bsky.app/profile/dragstersystems.bsky.social/post/3luikjte2722w"}, {"timestamp": "2025-07-21T18:16:54.468Z", "date_only": false, "value": "2025-07-21T18:16:54.468716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3luilxiz2jk2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "faaca67c-c051-433d-9f1a-f897fa7f5a74", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3luilxiz2jk2a"}, {"timestamp": "2025-07-21T18:20:14.594Z", "date_only": false, "value": "2025-07-21T18:20:14.594458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aaltaf88.bsky.social/post/3luim5dvw7s2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "aba739fe-6d19-4a33-953b-0bcb807b7356", "url": "https://bsky.app/profile/aaltaf88.bsky.social/post/3luim5dvw7s2p"}, {"timestamp": "2025-07-21T18:24:32.046Z", "date_only": false, "value": "2025-07-21T18:24:32.046004Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3luimf5nbe22u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "73f8fb6f-4f73-4a22-9309-fa479a650131", "url": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3luimf5nbe22u"}, {"timestamp": "2025-07-21T18:35:26.237Z", "date_only": false, "value": "2025-07-21T18:35:26.237195Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114892664048056071", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "5d02d36a-de84-4350-a9ad-66ac33ffef73", "url": "https://infosec.exchange/users/cR0w/statuses/114892664048056071"}, {"timestamp": "2025-07-21T18:42:11.582Z", "date_only": false, "value": "2025-07-21T18:42:11.582164Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luinepkxnp2v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "945f2570-d52d-445f-ac8f-3d6f54d37293", "url": "https://bsky.app/profile/cyberhub.blog/post/3luinepkxnp2v"}, {"timestamp": "2025-07-21T18:45:23Z", "date_only": false, "value": "2025-07-21T18:45:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44870", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "34ebbbf5-48b5-48f9-a20d-9a3dfd20b1b2", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aComprueba si un servidor SharePoint on-premises es vulnerable a CVE-2025-53770\nURL\uff1ahttps://github.com/grupooruss/CVE-2025-53770-Checker\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44870"}, {"timestamp": "2025-07-21T18:52:44.349Z", "date_only": false, "value": "2025-07-21T18:52:44.349216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/xchatter.techmeme.com/post/3luinxlmcu225", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f0f1dd0a-06ba-453e-be7e-2a3c2ffead2a", "url": "https://bsky.app/profile/xchatter.techmeme.com/post/3luinxlmcu225"}, {"timestamp": "2025-07-21T19:20:02.442Z", "date_only": false, "value": "2025-07-21T19:20:02.442710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/silascutler.bsky.social/post/3luipif2xhe2d", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "cc288fda-eb71-46fb-bf43-82d537b4383d", "url": "https://bsky.app/profile/silascutler.bsky.social/post/3luipif2xhe2d"}, {"timestamp": "2025-07-21T19:42:10.274Z", "date_only": false, "value": "2025-07-21T19:42:10.274543Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luiqpxsfnr2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d176cb53-e1e9-46d3-9945-ac1d7aa40055", "url": "https://bsky.app/profile/cyberhub.blog/post/3luiqpxsfnr2o"}, {"timestamp": "2025-07-21T19:54:46.612Z", "date_only": false, "value": "2025-07-21T19:54:46.612029Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hack4career.com/post/3luirgiuelz2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4bb177de-648a-4aae-afa1-d541a18cd52f", "url": "https://bsky.app/profile/hack4career.com/post/3luirgiuelz2t"}, {"timestamp": "2025-07-21T20:20:10.669Z", "date_only": false, "value": "2025-07-21T20:20:10.669232Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luistwmhz62b", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "ad284489-cf26-4d8d-b83a-dcac52616fc4", "url": "https://bsky.app/profile/cyberhub.blog/post/3luistwmhz62b"}, {"timestamp": "2025-07-21T20:55:46.967Z", "date_only": false, "value": "2025-07-21T20:55:46.967567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luiutawxktf2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "3241d4e9-ed17-4507-bc54-7f9526652be8", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3luiutawxktf2"}, {"timestamp": "2025-07-21T21:02:21.574Z", "date_only": false, "value": "2025-07-21T21:02:21.574654Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luiv7cxih32x", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "77f33ea2-128b-4e95-9b8b-b54b7a6814dc", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luiv7cxih32x"}, {"timestamp": "2025-07-21T21:05:09Z", "date_only": false, "value": "2025-07-21T21:05:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/RalfHackerChannel/1633", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1fbe49c4-0c59-45be-b362-734d07da7c6a", "content": "CVE-2025-53770: SharePoint RCE (ToolShell) \n\nExploit: https://github.com/soltanali0/CVE-2025-53770-Exploit\n\nPatched: July 20, 2025\n\n#rce #pentest #redteam #ad #sharepoint #cve", "url": "https://t.me/RalfHackerChannel/1633"}, {"timestamp": "2025-07-21T21:05:31.493Z", "date_only": false, "value": "2025-07-21T21:05:31.493362Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/brianhaddock.bsky.social/post/3luiveyzmd62f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a35fc334-aec3-43f7-8cf6-918133e999be", "url": "https://bsky.app/profile/brianhaddock.bsky.social/post/3luiveyzmd62f"}, {"timestamp": "2025-07-21T21:07:04.756Z", "date_only": false, "value": "2025-07-21T21:07:04.756342Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luivfmg7ggw2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d1d36588-1e30-4aa1-ae74-49eeea56670a", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luivfmg7ggw2"}, {"timestamp": "2025-07-21T21:29:51.398Z", "date_only": false, "value": "2025-07-21T21:29:51.398415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3luiwqjpni52c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "790eb585-9d74-409a-9b91-b00137f4db91", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3luiwqjpni52c"}, {"timestamp": "2025-07-21T21:31:56.505Z", "date_only": false, "value": "2025-07-21T21:31:56.505400Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3luiwubbl4q2m", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "a6a1459b-c185-4d95-839e-71fd6846f66a", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3luiwubbl4q2m"}, {"timestamp": "2025-07-21T21:33:14.161Z", "date_only": false, "value": "2025-07-21T21:33:14.161975Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luiwwfckvc2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "657cfec4-e1ad-416c-bd0e-eba4edc48b09", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luiwwfckvc2y"}, {"timestamp": "2025-07-21T21:35:12.366Z", "date_only": false, "value": "2025-07-21T21:35:12.366492Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luix22qlq22y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "909c80f0-3d8c-433f-b2dd-767499709170", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luix22qlq22y"}, {"timestamp": "2025-07-21T21:35:28.758Z", "date_only": false, "value": "2025-07-21T21:35:28.758478Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3luix2lmadj22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "73b9c7aa-3cda-4ce6-ba95-b00a280d67ae", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3luix2lmadj22"}, {"timestamp": "2025-07-21T21:36:30.607Z", "date_only": false, "value": "2025-07-21T21:36:30.607707Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luix4fpaks2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6b80c77a-fec4-465b-9e55-c9319ea061d1", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luix4fpaks2y"}, {"timestamp": "2025-07-21T21:39:33.317Z", "date_only": false, "value": "2025-07-21T21:39:33.317849Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luixbqqttk2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dee85332-57ab-41fa-9a95-16f022a0c4d3", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luixbqqttk2y"}, {"timestamp": "2025-07-21T22:00:00Z", "date_only": false, "value": "2025-07-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1598", "record": "WID-SEC-W-2025-1598", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2025-07-21T22:00:00Z", "date_only": false, "value": "2025-07-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1598", "record": "WID-SEC-W-2025-1598", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-21T22:04:05.462Z", "date_only": false, "value": "2025-07-21T22:04:05.462060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3luiynqszoe2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c0c31f4a-584e-4b60-917e-9ed79406182e", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3luiynqszoe2a"}, {"timestamp": "2025-07-21T22:05:19.245Z", "date_only": false, "value": "2025-07-21T22:05:19.245408Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3luiypx7gt42a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e1b10f24-2698-43cc-b7e8-6948c64201ec", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3luiypx7gt42a"}, {"timestamp": "2025-07-21T22:07:20.337Z", "date_only": false, "value": "2025-07-21T22:07:20.337459Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3luiytk2ca32j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0da64696-7484-449a-970a-cd74f18ca114", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3luiytk2ca32j"}, {"timestamp": "2025-07-21T22:22:53.167Z", "date_only": false, "value": "2025-07-21T22:22:53.167876Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3luizpdip5y22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "931f321d-75b0-4365-8d5b-df25e893b6ef", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3luizpdip5y22"}, {"timestamp": "2025-07-21T22:37:02.551Z", "date_only": false, "value": "2025-07-21T22:37:02.551186Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pylos.co/post/3luj2io4ad22d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "aef18f3e-68ff-4107-b830-4459bb2a40fd", "url": "https://bsky.app/profile/pylos.co/post/3luj2io4ad22d"}, {"timestamp": "2025-07-21T22:42:30.645Z", "date_only": false, "value": "2025-07-21T22:42:30.645330Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3luj2shbarw22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8e9116a9-e7fa-42f8-b9eb-852072f8ee5b", "url": "https://bsky.app/profile/cybersecurity.page/post/3luj2shbarw22"}, {"timestamp": "2025-07-21T23:03:15.437Z", "date_only": false, "value": "2025-07-21T23:03:15.437022Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/threatintel.microsoft.com/post/3luj3xk4zpk24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3279530d-1507-4070-90c4-a5f862d75f3e", "url": "https://bsky.app/profile/threatintel.microsoft.com/post/3luj3xk4zpk24"}, {"timestamp": "2025-07-21T23:17:13.231Z", "date_only": false, "value": "2025-07-21T23:17:13.231241Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3luj4qiwnti23", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "1ee9c8c6-0954-406b-92e1-19afc1f2808e", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3luj4qiwnti23"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0611", "record": "CERTFR-2025-AVI-0611", "field": "last_revision_date"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "revisions.1.revision_date"}, {"timestamp": "2025-07-22T00:00:00Z", "date_only": false, "value": "2025-07-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2025-AVI-0611", "record": "CERTFR-2025-AVI-0611", "field": "revisions.1.revision_date"}, {"timestamp": "2025-07-22T00:01:14.794Z", "date_only": false, "value": "2025-07-22T00:01:14.794766Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3luj773b6ak2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5aee603d-6590-443e-a4f2-99ba3b4f894d", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3luj773b6ak2z"}, {"timestamp": "2025-07-22T00:33:28.999Z", "date_only": false, "value": "2025-07-22T00:33:28.999710Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lujayuve442a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "31b45696-4235-48e3-a4aa-1c879d66f680", "url": "https://bsky.app/profile/opsmatters.com/post/3lujayuve442a"}, {"timestamp": "2025-07-22T01:01:32.789Z", "date_only": false, "value": "2025-07-22T01:01:32.789212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lujcl2nlms2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "37466a30-cd6c-45e6-9617-be06187dc897", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lujcl2nlms2a"}, {"timestamp": "2025-07-22T01:32:10.938Z", "date_only": false, "value": "2025-07-22T01:32:10.938952Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3lujebtufyt25", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c3ebcf03-42c2-4b9b-b020-59f31dac19f5", "url": "https://bsky.app/profile/solidot.bsky.social/post/3lujebtufyt25"}, {"timestamp": "2025-07-22T01:57:10.443Z", "date_only": false, "value": "2025-07-22T01:57:10.443891Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/diarynz.bsky.social/post/3lujfojf2g32e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2f555df1-379d-4651-ad84-2a3c7d085bba", "url": "https://bsky.app/profile/diarynz.bsky.social/post/3lujfojf2g32e"}, {"timestamp": "2025-07-22T02:03:46.144Z", "date_only": false, "value": "2025-07-22T02:03:46.144841Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3lujg2d7oyw2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "45595db2-39b8-471a-a46f-f4bce5d93752", "url": "https://bsky.app/profile/technofeed.bsky.social/post/3lujg2d7oyw2t"}, {"timestamp": "2025-07-22T02:05:07.323Z", "date_only": false, "value": "2025-07-22T02:05:07.323993Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lujg4qkwj72e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7677cd18-bdf5-487a-8c7e-b090a2505cd7", "url": "https://bsky.app/profile/opsmatters.com/post/3lujg4qkwj72e"}, {"timestamp": "2025-07-22T02:26:06.689Z", "date_only": false, "value": "2025-07-22T02:26:06.689931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lujhcbgp2g2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4453a7f3-dd84-4e8c-96e3-022b9385282e", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lujhcbgp2g2o"}, {"timestamp": "2025-07-22T02:42:13.883Z", "date_only": false, "value": "2025-07-22T02:42:13.883323Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luji73e6jk2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "108e3870-b9d2-4cc6-8ec6-779cfc8cf51a", "url": "https://bsky.app/profile/cyberhub.blog/post/3luji73e6jk2n"}, {"timestamp": "2025-07-22T02:51:48.226Z", "date_only": false, "value": "2025-07-22T02:51:48.226Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2025-53770", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-07-22T02:55:39.790Z", "date_only": false, "value": "2025-07-22T02:55:39.790453Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lujix4adjk2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1ff6b53f-9699-4dac-a804-5946d75a0ad6", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lujix4adjk2a"}, {"timestamp": "2025-07-22T03:00:09Z", "date_only": false, "value": "2025-07-22T03:00:09.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/CGY_W_WBv1WD_ctgMgmuSfpsl0l_gu0_XG6uG3rhQ9566rg", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8708eb89-8537-40de-82a3-90996a0fb322"}, {"timestamp": "2025-07-22T03:27:36Z", "date_only": false, "value": "2025-07-22T03:27:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/P0x3k_1N73LL1G3NC3/139", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cab56889-585c-42ea-a938-05614ec11646", "content": "CVE-2025-53770: SharePoint RCE (ToolShell) \n\nExploit: https://github.com/soltanali0/CVE-2025-53770-Exploit\n\nPatched: July 20, 2025\n\n#rce #pentest #redteam #ad #sharepoint #cve", "url": "https://t.me/P0x3k_1N73LL1G3NC3/139"}, {"timestamp": "2025-07-22T03:42:02.239Z", "date_only": false, "value": "2025-07-22T03:42:02.239086Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/fetchfeeds.bsky.social/post/3lujlk27h3u2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6247058d-02a6-4616-abeb-a61c31f34293", "url": "https://bsky.app/profile/fetchfeeds.bsky.social/post/3lujlk27h3u2f"}, {"timestamp": "2025-07-22T03:54:23Z", "date_only": false, "value": "2025-07-22T03:54:23.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b75a139c-d602-4f8e-9d8d-be26a45c5439"}, {"timestamp": "2025-07-22T04:00:00Z", "date_only": false, "value": "2025-07-22T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1596", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "34a64e56-8ef1-4f31-b35f-ab7c7ed84957", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1596"}, {"timestamp": "2025-07-22T04:03:23.103Z", "date_only": false, "value": "2025-07-22T04:03:23.103629Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lujmq7jyt52n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8bead248-f638-49e0-a60c-e64d6e979c9a", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lujmq7jyt52n"}, {"timestamp": "2025-07-22T04:07:50.298Z", "date_only": false, "value": "2025-07-22T04:07:50.298729Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lujmy62bnu27", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8ee78ae5-aa9a-4f8b-b1bd-edef020b6cfa", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lujmy62bnu27"}, {"timestamp": "2025-07-22T04:49:12.298Z", "date_only": false, "value": "2025-07-22T04:49:12.298705Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bontchev.infosec.exchange.ap.brid.gy/post/3lujpbpnmolp2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "08f69998-cce9-41da-b1c5-7adc2aa7643c", "url": "https://bsky.app/profile/bontchev.infosec.exchange.ap.brid.gy/post/3lujpbpnmolp2"}, {"timestamp": "2025-07-22T04:50:21.354Z", "date_only": false, "value": "2025-07-22T04:50:21.354583Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/brody-n77.bsky.social/post/3lujpe4kg7s2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d2d471d9-67ac-46b8-9394-4f8293d83b57", "url": "https://bsky.app/profile/brody-n77.bsky.social/post/3lujpe4kg7s2m"}, {"timestamp": "2025-07-22T05:16:53.056Z", "date_only": false, "value": "2025-07-22T05:16:53.056+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2025-1598", "record": "WID-SEC-W-2025-1598", "field": "document.tracking.generator.date"}, {"timestamp": "2025-07-22T05:24:46Z", "date_only": false, "value": "2025-07-22T05:24:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ece3c74a-df4b-44c2-a57f-eb0d2d39482c", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233"}, {"timestamp": "2025-07-22T05:56:22.326Z", "date_only": false, "value": "2025-07-22T05:56:22.326194Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lujt2allxi24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6f79b861-92b9-4576-8ef1-b5c36f7d6a68", "url": "https://bsky.app/profile/potato.software/post/3lujt2allxi24"}, {"timestamp": "2025-07-22T06:44:10.439Z", "date_only": false, "value": "2025-07-22T06:44:10.439980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/top10vpn.bsky.social/post/3lujvppbs7i27", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8618db7d-a796-4f00-8d28-d1d52c929c1d", "url": "https://bsky.app/profile/top10vpn.bsky.social/post/3lujvppbs7i27"}, {"timestamp": "2025-07-22T06:59:57Z", "date_only": false, "value": "2025-07-22T06:59:57.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Russian_OSINT/5856", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "40503fec-10bc-4db5-b76a-3b2bf6f3f5fd", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u2014 @true_secator \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435:\n\nMicrosoft \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432 SharePoint Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-53770 \u0438 CVE-2025-53771.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0435\u0439 \u0430\u0442\u0430\u043a\u0438 Eye Security, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-53770 \u0438 CVE-2025-53771, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u0443\u0441\u043b\u043e\u0432\u043d\u043e\u0435 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 ToolShell, \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 18 \u0438\u044e\u043b\u044f.\n\n\u041d\u0430 \u0443\u0434\u0438\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0430\u0441\u044c \u043c\u0435\u0440\u0430\u043c\u0438 \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e, \u043e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u0432 \u043a \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439.\n\n\u041f\u043e\u0437\u0434\u043d\u043e \u0432\u0435\u0447\u0435\u0440\u043e\u043c \u0432 \u0432\u043e\u0441\u043a\u0440\u0435\u0441\u0435\u043d\u044c\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e\u0431 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint Subscription Edition \u0438 SharePoint 2019. \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f SharePoint 2016 - \u043f\u043e\u0447\u0442\u0438 \u043d\u0430 \u0432\u044b\u0445\u043e\u0434\u0435.\n\nCVE-2025-53770 \u0438 CVE-2025-53771 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 RCE \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0430\u0442\u0430\u043a, \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 Eye Security \u0438 Google, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u043b\u0438 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u00a0\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u043b\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0441\u0435\u043a\u0440\u0435\u0442\u044b, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u0438\u043c  \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u043c \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Eye Security \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u0438 \u0432\u044b\u044f\u0432\u0438\u0442\u044c \u0434\u0435\u0441\u044f\u0442\u043a\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 SharePoint, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e ToolShell.\n\n\u0412 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, ShadowServer \u0437\u0430\u044f\u0432\u0438\u043b\u0430 \u043e \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 9000\u00a0\u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u0430\u0445 SharePoint, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0445 \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442, \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442\u0441\u044f \u0432 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0435 \u0438 \u0415\u0432\u0440\u043e\u043f\u0435, \u043d\u043e \u043f\u043e\u043a\u0430 \u0431\u0435\u0437 \u043c\u0430\u0440\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0438\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u043e\u0431\u043b\u0435\u043c.\n\n\u041d\u0430 \u0432\u044b\u0445\u043e\u0434\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Palo Alto Networks \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u0434\u0435\u0442\u0435\u043a\u0442\u0438\u043b\u0430 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0435 CVE-2025-49704 \u0438 CVE-2025-49706 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e\u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443.\n\nCVE-2025-53770 \u0438 CVE-2025-53771 \u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u0430\u043c\u0438 CVE-2025-49706 \u0438 CVE-2025-49704, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u044b Viettel \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u0435\u0449\u0435 \u0432 \u043c\u0430\u0435 \u043d\u0430 \u0445\u0430\u043a\u0435\u0440\u0441\u043a\u043e\u043c \u0442\u0443\u0440\u043d\u0438\u0440\u0435 Pwn2Own \u0432 \u0411\u0435\u0440\u043b\u0438\u043d\u0435, \u043e \u0447\u0435\u043c \u043c\u044b \u0442\u0430\u043a\u0436\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438.\n\nMicrosoft \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-49706 \u0438 CVE-2025-49704 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 PatchTuesday \u0437\u0430 \u0438\u044e\u043b\u044c 2025 \u0433\u043e\u0434\u0430.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u0441\u043f\u0443\u0441\u0442\u044f \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Code White \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u043b\u0438 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043e\u043d\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 ToolShell, \u043f\u043e\u043a\u0430\u0437\u0430\u0432, \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0435\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u0432\u0441\u0435\u0433\u043e \u043b\u0438\u0448\u044c \u043e\u0434\u043d\u0438\u043c \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430.\n\n\u0422\u0430\u043a \u0447\u0442\u043e \u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft \u0434\u043b\u044f CVE-2025-49706 \u0438 CVE-2025-49704 \u0434\u043b\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint.\n\n\u0421\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e Microsoft \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u0438\u0441\u0432\u043e\u0438\u043b\u0430 \u043d\u043e\u0432\u044b\u0435 CVE: CVE-2025-53770 \u0438 CVE-2025-53771, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u0442, \u043a\u0430\u043a \u0443\u0432\u0435\u0440\u044f\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438, \u0431\u043e\u043b\u0435\u0435 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0435\u0436\u0435\u043b\u0438 \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 CVE-2025-49704 \u0438 CVE-2025-49706.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c, \u0432 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445 Microsoft \u043f\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-53771 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043d\u0435 \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u043c\u0438\u043a\u0440\u043e\u043c\u044f\u0433\u043a\u0438\u0435, \u043a\u0430\u043a \u0432\u0441\u0435\u0433\u0434\u0430, \u0432 \u0441\u0432\u043e\u0435\u043c \u0440\u0435\u043f\u0435\u0440\u0442\u0443\u0430\u0440\u0435.", "url": "https://t.me/Russian_OSINT/5856"}, {"timestamp": "2025-07-22T07:04:35.104Z", "date_only": false, "value": "2025-07-22T07:04:35.104259Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lujwu7lym22a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "504c7adf-93b6-4996-826d-27c1042d13a0", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lujwu7lym22a"}, {"timestamp": "2025-07-22T07:24:46.541Z", "date_only": false, "value": "2025-07-22T07:24:46.541418Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0233", "record": "NCSC-2025-0233", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2025-07-22T07:41:47Z", "date_only": false, "value": "2025-07-22T07:41:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/85872", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "92f0edf5-6c8d-4448-aa3d-0c52a69e8b3a", "content": "\ud83e\udd85 Australian Cyber Security Centre Warns of an Active Exploit Taking Advantage of Microsoft SharePoint Vulnerability CVE-2025-53770 \ud83e\udd85\n\nCVE202553770 Vulnerability \" dataimagecaption\"\" datamediumfile\"httpscyble.comwpcontentuploads202507CVE202553770Vulnerability300x150.webp\" datalargefile\"httpscyble.comwpcontentuploads202507CVE202553770Vulnerability.webp\" title\"Australian Cyber Security Centre Warns of an Active Exploit Taking Advantage of Microsoft SharePoint Vulnerability CVE202553770\u00a0 1\"  The Australian Signals Directorates Australian Cyber Security Centre ASDs ACSC has issued a new security alert to Australian organizations and government IT teams regarding an actively exploited vulnerability in Microsoft SharePoint Server. Tracked as CVE202553770, the flaw presents a cyber threat to organizations running onpremises SharePoint installations.\u00a0   The vulnerability, CVE202553770, involves the deserialization of untrusted...\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"CYBLE\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/85872"}, {"timestamp": "2025-07-22T07:50:43.513Z", "date_only": false, "value": "2025-07-22T07:50:43.513659Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/users/nopatience/statuses/114895790819680601", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "662ec47f-840d-49d7-8e59-d4bdb2544903", "url": "https://swecyb.com/users/nopatience/statuses/114895790819680601"}, {"timestamp": "2025-07-22T07:51:21.500Z", "date_only": false, "value": "2025-07-22T07:51:21.500650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cstromblad.com/post/3lujzgxkyw732", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "0a2d123e-425b-498c-93d9-a7e4940c440a", "url": "https://bsky.app/profile/cstromblad.com/post/3lujzgxkyw732"}, {"timestamp": "2025-07-22T07:59:35Z", "date_only": false, "value": "2025-07-22T07:59:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Netzwerksicherheit/318", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "453fb278-a3b5-4b0e-a4cb-af3dd860f85f", "content": "https://msrc.microsoft.com/blog/2025/07/customer-guidance-for-sharepoint-vulnerability-cve-2025-53770/", "url": "https://t.me/Netzwerksicherheit/318"}, {"timestamp": "2025-07-22T08:00:14Z", "date_only": false, "value": "2025-07-22T08:00:14.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/7198", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "87ab30a9-2d91-4218-8d1b-c8396092441b", "content": "\ud83d\udea8 SharePoint zero-day (CVE-2025-53770) exploited since July 7 \u2014 now hitting gov, telecom & tech sectors.\n\nHackers are stealing cryptographic keys to forge access even after patches are applied.\n\nOne group is linked to China.\n\nThe threat is real. Act fast \u2192 https://thehackernews.com/2025/07/hackers-exploit-sharepoint-zero-day.html", "url": "https://t.me/thehackernews/7198"}, {"timestamp": "2025-07-22T08:05:14.681Z", "date_only": false, "value": "2025-07-22T08:05:14.681477Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gscafo.bsky.social/post/3luk2aojgq72a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "76223763-36a1-49dc-b4dc-b151f123e1b3", "url": "https://bsky.app/profile/gscafo.bsky.social/post/3luk2aojgq72a"}, {"timestamp": "2025-07-22T08:45:05Z", "date_only": false, "value": "2025-07-22T08:45:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/bizone_channel/1993", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b6300f63-7b51-4f20-b38f-79cb1bddaeda", "content": "\ud83d\udd3a \u0421\u043e\u043e\u0431\u0449\u0430\u0435\u043c \u043e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 \u0432 Microsoft SharePoint\n\nCVE-2025-53770 \u0438 CVE-2025-53771 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 9,8 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS \u0438 \u0443\u0436\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438. \u041f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u043d\u0430\u0445\u043e\u0434\u044f\u0442\u0441\u044f: SharePoint Server 2016, SharePoint Server 2019, SharePoint Server Subscription Edition.\n\n\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f:\n\n1\u20e3 \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043f\u0430\u0442\u0447\u0438:\n\u2014 SharePoint Server 2016: KB5002744;\n\u2014 SharePoint Server 2019: KB5002754;\n\u2014 SharePoint Server Subscription Edition: KB5002768.\n\n2\u20e3 \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f \u043a SharePoint \u0438\u0437 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0430 \u0438\u043b\u0438 \u0442\u043e\u0447\u0435\u0447\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043a \u043f\u0443\u0442\u0438 /_layouts/15/toolpane.aspx \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c MSOTlPn_DWP.\n\n3\u20e3 \u0412\u043a\u043b\u044e\u0447\u0438\u0442\u0435 AMSI-\u0437\u0430\u0449\u0438\u0442\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n4\u20e3 \u041f\u043e\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435 \u0431\u043b\u043e\u0433 Microsoft \u043f\u043e \u0434\u0430\u043d\u043d\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u043e \u043d\u0430\u0448\u0435\u0439 \u043e\u0446\u0435\u043d\u043a\u0435, \u044d\u0442\u0438\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043e \u0434\u043e 10% \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0445 enterprise-\u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0439 \u2014 \u043a\u0430\u0436\u0434\u0430\u044f \u0434\u0435\u0441\u044f\u0442\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0432 \u0437\u043e\u043d\u0435 \u0440\u0438\u0441\u043a\u0430.\n\n\u0414\u043b\u044f \u0432\u0441\u0435\u0445 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 BI.ZONE WAF \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u044d\u0442\u043e\u0439 \u0430\u0442\u0430\u043a\u0438, \u0430 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u044f BI.ZONE CPT \u0438 BI.ZONE Threat Intelligence \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u044f\u0442\u044c \u043d\u043e\u0432\u044b\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438 \u043f\u0440\u0438\u043d\u044f\u0442\u044c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u043c\u0435\u0440\u044b \u0435\u0449\u0435 \u0434\u043e \u043d\u0430\u0447\u0430\u043b\u0430 \u0430\u0442\u0430\u043a.", "url": "https://t.me/bizone_channel/1993"}, {"timestamp": "2025-07-22T09:28:04.786Z", "date_only": false, "value": "2025-07-22T09:28:04.786067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3luk6us4zfd2l", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "eaf83e37-8d2a-4086-a894-095f02980736", "url": "https://bsky.app/profile/nimblenerd.social/post/3luk6us4zfd2l"}, {"timestamp": "2025-07-22T09:34:25Z", "date_only": false, "value": "2025-07-22T09:34:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/GithubRedTeam/44941", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5846343a-e90f-4328-ac1f-2aa79fa3d52f", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA critical zero-auth RCE vulnerability in SharePoint (CVE-2025-53770), now exploited in the wild, building directly on the spoofing flaw CVE-2025-49706.\nURL\uff1ahttps://github.com/AdityaBhatt3010/CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44941"}, {"timestamp": "2025-07-22T10:21:23Z", "date_only": false, "value": "2025-07-22T10:21:23+00:00", "kind": "kev", "label": "Asserted", "source": "shadowserver", "record": "CVE-2025-53770", "field": "timestamps.asserted_at", "uuid": "18149507-1873-4ce2-b7ff-3f50dd853e33", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-22T10:21:23Z", "date_only": false, "value": "2025-07-22T10:21:23+00:00", "kind": "kev", "label": "First seen", "source": "shadowserver", "record": "CVE-2025-53770", "field": "timestamps.first_seen_at", "uuid": "18149507-1873-4ce2-b7ff-3f50dd853e33", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-07-22T11:11:58.527Z", "date_only": false, "value": "2025-07-22T11:11:58.527252Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/dragonjar/statuses/114896582558470374", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "876f8f6c-6042-453e-ac07-0f6a3cd6442f", "url": "https://infosec.exchange/users/dragonjar/statuses/114896582558470374"}, {"timestamp": "2025-07-22T11:46:00.729Z", "date_only": false, "value": "2025-07-22T11:46:00.729577Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/reflectionsworld5.bsky.social/post/3lukglhdo662s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bd97c83b-8433-4084-9887-e482a79e74e1", "url": "https://bsky.app/profile/reflectionsworld5.bsky.social/post/3lukglhdo662s"}, {"timestamp": "2025-07-22T12:04:23Z", "date_only": false, "value": "2025-07-22T12:04:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/14828", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "223087c0-b49f-49e2-a890-95b34491e91a", "content": "New Scanner Launched to Detect CVE-2025-53770 in SharePoint Servers \u2013 gbhackers.com\n\nTue, 22 Jul 2025 19:36:09", "url": "https://t.me/MalaysiaHacktivistz/14828"}, {"timestamp": "2025-07-22T12:04:23Z", "date_only": false, "value": "2025-07-22T12:04:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/MalaysiaHacktivistz/5782", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d14d4647-6c41-495a-89a7-815f35e4ccc6", "content": "New Scanner Launched to Detect CVE-2025-53770 in SharePoint Servers \u2013 gbhackers.com\n\nTue, 22 Jul 2025 19:36:09", "url": "https://t.me/MalaysiaHacktivistz/5782"}, {"timestamp": "2025-07-22T12:04:23Z", "date_only": false, "value": "2025-07-22T12:04:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/33148", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "49b60209-63f5-469a-ab4c-5aa345205df5", "content": "New Scanner Launched to Detect CVE-2025-53770 in SharePoint Servers \u2013 gbhackers.com\n\nTue, 22 Jul 2025 19:36:09", "url": "https://t.me/TengkorakCyberCrewzz/33148"}, {"timestamp": "2025-07-22T12:04:23Z", "date_only": false, "value": "2025-07-22T12:04:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/TengkorakCyberCrewzz/3945", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "857e237d-eddf-4029-8435-48a387cbfda9", "content": "New Scanner Launched to Detect CVE-2025-53770 in SharePoint Servers \u2013 gbhackers.com\n\nTue, 22 Jul 2025 19:36:09", "url": "https://t.me/TengkorakCyberCrewzz/3945"}, {"timestamp": "2025-07-22T12:06:54.021Z", "date_only": false, "value": "2025-07-22T12:06:54.021144Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/giovanni-popolizio.bsky.social/post/3lukhqqrbi22x", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c74a0b6c-39df-4ca6-85b9-795980068163", "url": "https://bsky.app/profile/giovanni-popolizio.bsky.social/post/3lukhqqrbi22x"}, {"timestamp": "2025-07-22T12:08:07.634Z", "date_only": false, "value": "2025-07-22T12:08:07.634486Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lukhso5cnpv2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "70a6ac69-251e-4d2d-8892-5e252fd01939", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lukhso5cnpv2"}, {"timestamp": "2025-07-22T12:21:05.915Z", "date_only": false, "value": "2025-07-22T12:21:05.915665Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3lukik4pnys2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5cb02093-9642-49f7-9a02-6d92ed045097", "url": "https://bsky.app/profile/allaboutsecurity.bsky.social/post/3lukik4pnys2t"}, {"timestamp": "2025-07-22T12:21:25.586Z", "date_only": false, "value": "2025-07-22T12:21:25.586184Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lukik6xvlfv2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8d7f86c8-d661-4b49-af9c-f6a5936cf3ac", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lukik6xvlfv2"}, {"timestamp": "2025-07-22T12:24:05Z", "date_only": false, "value": "2025-07-22T12:24:05.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/YAH_Channel/968", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4d0dbf50-f8a1-4036-9f8c-5838b1ed200b", "content": "Zero-day \u0432 SharePoint: CVE-2025-53770\n\n\u041f\u0440\u0438\u0432\u0435\u0442! \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435, \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u043e \u043b\u0438 \u0432\u0430\u0441. \u041d\u0438\u0436\u0435 \u00ab\u043a\u0440\u0430\u0442\u043a\u0430\u044f \u0438\u0441\u0442\u043e\u0440\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u043f\u0440\u0430\u0432\u043a\u0430\u00bb \u0438 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0442\u044c.\n\nMicrosoft \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0434\u0438\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u0443\u044e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 on-prem SharePoint CVE-2025-53770. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c web-shell \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 (RCE) \u0447\u0435\u0440\u0435\u0437 \u043f\u043e\u0434\u0434\u0435\u043b\u043a\u0443 ViewState-\u0442\u043e\u043a\u0435\u043d\u043e\u0432.\n\n\u042d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 POST-\u0437\u0430\u043f\u0440\u043e\u0441 \u043a /layouts/15/ToolPane.aspx \u0441 Referer=/layouts/SignOut.aspx, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0435 spinstall0.aspx \u2014 \u0434\u0430\u043c\u043f\u0435\u0440\u0430, \u0438\u0437\u0432\u043b\u0435\u043a\u0430\u044e\u0449\u0435\u0433\u043e ValidationKey. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0430\u043b\u0438\u0434\u043d\u044b\u0439 \u0442\u043e\u043a\u0435\u043d ViewState \u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c RCE \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0432\u0440\u043e\u0434\u0435 ysoserial.\n\u041f\u0435\u0440\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u0431\u044b\u043b\u0430 18 \u0438\u044e\u043b\u044f \u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442\u0441\u044f \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \n\n\u041f\u0430\u0442\u0447 \u043e\u0442 Microsoft \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d: \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0442 MSRC, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0435 \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435.\n\n\u0427\u0442\u043e \u0435\u0449\u0451 \u0441\u0442\u043e\u0438\u0442 \u0441\u0434\u0435\u043b\u0430\u0442\u044c:\n1. \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 IIS-\u043b\u043e\u0433\u0438 \u043d\u0430:\nPOST /layouts/15/ToolPane.aspx?DisplayMode\nReferer /layouts/SignOut.aspx\nGET /layouts/15/spinstall0.aspx\n\n2. \u041f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u0435\u0442 \u0444\u0430\u0439\u043b spinstall0.aspx \u0432 \u043f\u0430\u043f\u043a\u0438 SharePoint, \u043f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0443 \u0441\u0435\u0431\u044f \u0435\u0433\u043e \u043d\u0430\u043b\u0438\u0447\u0438\u0435. \u041f\u043e\u043b\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u0432\u044b\u0433\u043b\u044f\u0434\u0438\u0442 \u0442\u0430\u043a: $destinationFile = \"C:\\PROGRA~1\\COMMON~1\\MICROS~1\\WEBSER~1\\16\\TEMPLATE\\LAYOUTS\\spinstall0.aspx\"\n\n\u0421\u043e\u0431\u0440\u0430\u043b\u0438 \u0434\u043b\u044f \u0432\u0430\u0441 YARA-\u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0438 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043f\u0440\u0438\u043b\u043e\u0436\u0443 \u0441\u044e\u0434\u0430", "url": "https://t.me/YAH_Channel/968"}, {"timestamp": "2025-07-22T12:48:23.582Z", "date_only": false, "value": "2025-07-22T12:48:23.582667Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aleksandrdotnet.bsky.social/post/3lukk2scvfk2u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ebf68c68-1d0a-4b92-84f1-ed0b379b4d57", "url": "https://bsky.app/profile/aleksandrdotnet.bsky.social/post/3lukk2scvfk2u"}, {"timestamp": "2025-07-22T13:03:51Z", "date_only": false, "value": "2025-07-22T13:03:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/nisargsuthar/2d82086d5026915af36c06c548572bf6", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "5c993d50-f01b-4e77-a34a-82ba464a2799", "url": "https://gist.github.com/nisargsuthar/2d82086d5026915af36c06c548572bf6"}, {"timestamp": "2025-07-22T13:18:52Z", "date_only": false, "value": "2025-07-22T13:18:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/brandonwmichael/26cb5a7bdf8449f4b5eea0161eead379", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "f3fe4fe2-d71a-4abc-9bf5-fdb9d9755b68", "url": "https://gist.github.com/brandonwmichael/26cb5a7bdf8449f4b5eea0161eead379"}, {"timestamp": "2025-07-22T13:25:54.967Z", "date_only": false, "value": "2025-07-22T13:25:54.967997Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jcsc.je/post/3lukm63ivv72u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "30a5d501-6d52-45f2-9b6c-f34785128e3e", "url": "https://bsky.app/profile/jcsc.je/post/3lukm63ivv72u"}, {"timestamp": "2025-07-22T13:26:55.740Z", "date_only": false, "value": "2025-07-22T13:26:55.740487Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jcsc.je/post/3lukm7vn75j2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3357f249-7338-4779-9120-d01bf27a8c3e", "url": "https://bsky.app/profile/jcsc.je/post/3lukm7vn75j2t"}, {"timestamp": "2025-07-22T13:27:15.772Z", "date_only": false, "value": "2025-07-22T13:27:15.772080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lukmaio6ny2g", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4cb46be3-0a70-4a19-85e7-c616bdf754a5", "url": "https://bsky.app/profile/nimblenerd.social/post/3lukmaio6ny2g"}, {"timestamp": "2025-07-22T13:32:40Z", "date_only": false, "value": "2025-07-22T13:32:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/four_rays/117", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "49b7c6a6-68db-4918-ba7a-aa65d6bc641d", "content": "\u041a\u0430\u043a \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c\u0441\u044f \u043e\u0442 ToolShell \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 zero-day \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 SharePoint\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2025-53770 \u0438 CVE-2025-53771 \u0432 Microsoft SharePoint.\n\n\u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2025-53770 \u0438 CVE-2025-53771 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \u042d\u0442\u043e \u0441\u0432\u043e\u0435\u0433\u043e \u0440\u043e\u0434\u0430 ProxyLogon 2.0, \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f SharePoint! \u0421\u0435\u0439\u0447\u0430\u0441 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e PoC \u0434\u043b\u044f CVE-2025-53770, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u0434\u043e\u0433\u0440\u0435\u0432\u0430\u0435\u0442\u0441\u044f. \n\n\u0423 \u043d\u0430\u0441 \u0432 \u0431\u043b\u043e\u0433\u0435 \u043c\u044b \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043d\u0435\u0431\u043e\u043b\u044c\u0448\u043e\u0439 \u0440\u0430\u0437\u0431\u043e\u0440 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043a\u043e\u043c\u043f\u0438\u043b\u044f\u0446\u0438\u0435\u0439 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 IOC. \u0427\u0438\u0442\u0430\u0439\u0442\u0435!\n\n\u041d\u043e \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0435\u0441\u0442\u044c \u043b\u0438 \u0432 \u0432\u0430\u0448\u0435\u043c \u043f\u0435\u0440\u0438\u043c\u0435\u0442\u0440\u0435 SharePoint-\u0441\u0435\u0440\u0432\u0435\u0440\u044b. \u0418 \u0435\u0441\u043b\u0438 \u0435\u0441\u0442\u044c \u2014 \u0441\u043b\u0435\u0434\u0443\u0439\u0442\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c.\n\n\ud83d\udc4d \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\n1) \u0423\u0431\u0440\u0430\u0442\u044c SharePoint-\u0441\u0435\u0440\u0432\u0435\u0440\u044b \u0438\u0437 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430 VPN).\n\n2) \u0423\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f:\n\u2014 \u0418\u044e\u043b\u044c\u0441\u043a\u0438\u0435 (CVE-2025-49701, CVE-2025-49703, CVE-2025-49704, CVE-2025-49706):\n\u26ab\ufe0f SharePoint Server 2016 (KB5002744);\n\u26ab\ufe0f SharePoint Server 2019 (KB5002741);\n\u2014 \u042d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u044b\u0435 (CVE-2025-53770 \u0438 CVE-2025-53771):\n\u26ab\ufe0f SharePoint Server 2016 (KB5002759, KB5002760 \u043f\u0430\u0442\u0447\u0438 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0432\u0447\u0435\u0440\u0430 \u0432\u0435\u0447\u0435\u0440\u043e\u043c, 21.07.2025);\n\u26ab\ufe0f SharePoint Server 2019 (KB5002753, KB5002754);\n\u26ab\ufe0f SharePoint Server Subscription Edition (KB5002768).\n\n3) \u0417\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0430\u0448\u0438\u043d\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 SharePoint \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c IIS \u0438\u043b\u0438 \u0441\u0430\u043c \u0441\u0435\u0440\u0432\u0435\u0440 (\u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e \u043f\u0438\u0441\u0430\u043b\u0438 \u0432 \u044d\u0442\u043e\u043c \u043f\u043e\u0441\u0442\u0435).\n\n\ud83d\udc4d \u041a\u0430\u043a \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e CVE-2025-53770? \u0427\u0442\u043e \u0441\u0442\u043e\u0438\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c?\n\n\u2014 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 spinstall0.aspx.\n\n\u0412 \u0432\u043e\u043b\u043d\u0430\u0445 \u0430\u0442\u0430\u043a \u043e\u043d \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u0441\u044f \u043f\u043e \u043f\u0443\u0442\u044f\u043c (\u043e\u0442\u043b\u0438\u0447\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430\u043c\u0438 15 \u0438 16):\nC:\\PROGRA~1\\COMMON~1\\MICROS~1\\WEBSER~1\\15\\TEMPLATE\\LAYOUTS\\spinstall0.aspx\nC:\\PROGRA~1\\COMMON~1\\MICROS~1\\WEBSER~1\\16\\TEMPLATE\\LAYOUTS\\spinstall0.aspx\n\u0421 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0434\u043e\u043b\u0435\u0439 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u0438 \u0431\u0443\u0434\u0443\u0449\u0438\u0435 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b \u0431\u0443\u0434\u0443\u0442 \u0440\u0430\u0441\u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c\u0441\u044f \u0432 \u0434\u0440\u0443\u0433\u0438\u0445 \u043c\u0435\u0441\u0442\u0430\u0445 \u0438 \u043f\u043e\u0434 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0438\u043c\u0435\u043d\u0430\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0432\u0438\u0441\u044f\u0442 \u043e\u0442 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0434\u043b\u044f \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c IIS-\u043b\u043e\u0433\u0438.\n\n\u2014 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 C:\\Program Files\\Common Files\\microsoft shared\\Web Server Extensions\\16\\TEMPLATE\\LAYOUTS\\debug_dev.js.\n\u2014 \u043b\u043e\u0433\u0438 IIS \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435:\nPOST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 /_layouts/15/ToolPane.aspx?DisplayMode=Edit c Referrer /_layouts/SignOut.aspx;\nGET-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 /_layouts/15/spinstall0.aspx;\n\u0414\u0440\u0443\u0433\u0438\u0445 GET-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 aspx-\u0444\u0430\u0439\u043b\u044b.\n\n\ud83d\udc4d \u0414\u043b\u044f \u0434\u0435\u0442\u0435\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0442\u0430\u043a/\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 IDS/WAF \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0431\u043b\u043e\u043a\u0438\u0440\u0443\u0435\u0442 POST \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 URI /_layouts/15/ToolPane.aspx?DisplayMode=Edit c \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u043e\u043c Referrer /_layouts/SignOut.aspx.", "url": "https://t.me/four_rays/117"}, {"timestamp": "2025-07-22T13:33:07.107Z", "date_only": false, "value": "2025-07-22T13:33:07.107331Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/lobst3r.bsky.social/post/3lukmkv2rib27", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "948797a4-9599-49a2-ba2c-c0923684cf67", "url": "https://bsky.app/profile/lobst3r.bsky.social/post/3lukmkv2rib27"}, {"timestamp": "2025-07-22T13:33:40.784Z", "date_only": false, "value": "2025-07-22T13:33:40.784998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/speicherguide.bsky.social/post/3lukmltnufs2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "05a3d1fe-384a-4a01-a64f-1c1ba7d2d8e9", "url": "https://bsky.app/profile/speicherguide.bsky.social/post/3lukmltnufs2n"}, {"timestamp": "2025-07-22T13:42:23.726Z", "date_only": false, "value": "2025-07-22T13:42:23.726360Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lukn3kemst2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "78eeb0a1-acf6-409d-b969-2eaa3d3438a7", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lukn3kemst2h"}, {"timestamp": "2025-07-22T13:57:27.127Z", "date_only": false, "value": "2025-07-22T13:57:27.127453Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luknv2epdme2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3e7cdbf1-2219-45cd-a261-b6c5ee45d787", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luknv2epdme2"}, {"timestamp": "2025-07-22T14:02:08.803Z", "date_only": false, "value": "2025-07-22T14:02:08.803336Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/intruder-io.bsky.social/post/3luko6rsfzs2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c411cb05-35fd-4f30-a36e-3bd04cad0a34", "url": "https://bsky.app/profile/intruder-io.bsky.social/post/3luko6rsfzs2o"}, {"timestamp": "2025-07-22T14:38:24.615Z", "date_only": false, "value": "2025-07-22T14:38:24.615437Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-569a6121-200d91313f851c70", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e7c865b0-01b2-4005-95fa-0e5038edb672", "url": "https://poliverso.org/objects/0477a01e-569a6121-200d91313f851c70"}, {"timestamp": "2025-07-22T15:00:06Z", "date_only": false, "value": "2025-07-22T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/n1xxTDW4DKAqfoFBBrei6KNyXkL9LVReMZ-BWNrHaTz0OZY", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "09e6b8fd-376d-4cae-941e-8154b4d31114"}, {"timestamp": "2025-07-22T15:26:07.889Z", "date_only": false, "value": "2025-07-22T15:26:07.889415Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/114897581871595262", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "366da374-42af-4252-b848-45f3d0117aac", "url": "https://infosec.exchange/users/zeljkazorz/statuses/114897581871595262"}, {"timestamp": "2025-07-22T15:34:28.727Z", "date_only": false, "value": "2025-07-22T15:34:28.727614Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3luktdvkpek2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8c05ffcf-8287-44b8-a8c1-16b9e572cd16", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3luktdvkpek2q"}, {"timestamp": "2025-07-22T15:42:10.965Z", "date_only": false, "value": "2025-07-22T15:42:10.965464Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luktrqdkag2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3777aaf6-0e5b-4313-b5da-9e0cb17075b7", "url": "https://bsky.app/profile/cyberhub.blog/post/3luktrqdkag2o"}, {"timestamp": "2025-07-22T15:58:20.354Z", "date_only": false, "value": "2025-07-22T15:58:20.354169Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lukuonpiyp2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7282cdbc-51e1-4974-bb39-b8abc3b8f109", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lukuonpiyp2n"}, {"timestamp": "2025-07-22T16:13:07.592Z", "date_only": false, "value": "2025-07-22T16:13:07.592648Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lukvixwkcs2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c407024b-0fda-47c0-9347-a67037626918", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lukvixwkcs2e"}, {"timestamp": "2025-07-22T16:22:04.398Z", "date_only": false, "value": "2025-07-22T16:22:04.398910Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lukvybpliky2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "206d2353-e49b-4ca3-8e6b-f5ffc14c7b22", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lukvybpliky2"}, {"timestamp": "2025-07-22T17:25:45.751Z", "date_only": false, "value": "2025-07-22T17:25:45.751076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cloudflare.social/post/3lukzkvuqos2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a7282eff-de5c-465f-8759-553829db3190", "url": "https://bsky.app/profile/cloudflare.social/post/3lukzkvuqos2s"}, {"timestamp": "2025-07-22T17:27:00Z", "date_only": false, "value": "2025-07-22T17:27:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_News/6555", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9ab8fa80-70bf-4155-865a-d25832605c37", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-53770: SharePoint WebPart Injection Exploit Tool\nLink: https://darkwebinformer.com/cve-2025-53770-sharepoint-webpart-injection-exploit-tool/", "url": "https://t.me/DarkWebInformer_News/6555"}, {"timestamp": "2025-07-22T17:27:02.953Z", "date_only": false, "value": "2025-07-22T17:27:02.953720Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114898057457011672", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "52ff0cec-0139-487f-92d7-1bb14e299b9a", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/114898057457011672"}, {"timestamp": "2025-07-22T17:27:11.613Z", "date_only": false, "value": "2025-07-22T17:27:11.613263Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/darkwebinformer.com/post/3lukznffajc2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a5feee62-5323-4dec-b71b-575bd954a5e1", "url": "https://bsky.app/profile/darkwebinformer.com/post/3lukznffajc2z"}, {"timestamp": "2025-07-22T17:36:59.524Z", "date_only": false, "value": "2025-07-22T17:36:59.524810Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lul26u4sxs72", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2de6f080-bb82-4e46-83d3-0c75c3b078e5", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lul26u4sxs72"}, {"timestamp": "2025-07-22T19:05:14.878Z", "date_only": false, "value": "2025-07-22T19:05:14.878340Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4454335", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c091ff3e-041e-4981-ba3f-aa45757c7527", "url": "https://feedsin.space/feed/CISAKevBot/items/4454335"}, {"timestamp": "2025-07-22T19:19:59Z", "date_only": false, "value": "2025-07-22T19:19:59.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44998", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bff4b73c-3e75-4ee7-890c-57220c43f1d6", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aA Python-based reconnaissance scanner for safely identifying potential exposure to SharePoint vulnerability CVE-2025-53770.\nURL\uff1ahttps://github.com/Sec-Dan/CVE-2025-53770-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44998"}, {"timestamp": "2025-07-22T19:57:29.058Z", "date_only": false, "value": "2025-07-22T19:57:29.058192Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3lulc2brwiy2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "93ac984b-34ce-49c9-8c82-caae410db521", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3lulc2brwiy2f"}, {"timestamp": "2025-07-22T20:02:15.722Z", "date_only": false, "value": "2025-07-22T20:02:15.722268Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pvtsakarium.bsky.social/post/3lulcbh65lc2g", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0fc6ed95-a771-4621-a5a4-8453575cd4e6", "url": "https://bsky.app/profile/pvtsakarium.bsky.social/post/3lulcbh65lc2g"}, {"timestamp": "2025-07-22T20:04:05Z", "date_only": false, "value": "2025-07-22T20:04:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/3695", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3f2baa14-f12b-4cc2-a989-e49ad362d596", "content": "\u26a1\ufe0fCritical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Global Organizations.\n\nThe zero-day flaw, tracked as CVE-2025-53770 (CVSS score: 9.8), has been described as a variant of CVE-2025-49706 (CVSS score: 6.3), a spoofing bug in Microsoft SharePoint Server that was addressed by the tech giant as part of its July 2025 Patch Tuesday updates.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3695"}, {"timestamp": "2025-07-22T21:06:49.547Z", "date_only": false, "value": "2025-07-22T21:06:49.547866Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/news-s.bsky.social/post/3lulfwaxszc25", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3c11aa72-9ec9-4fa8-b39b-7db6b1b1906c", "url": "https://bsky.app/profile/news-s.bsky.social/post/3lulfwaxszc25"}, {"timestamp": "2025-07-22T21:08:04.752Z", "date_only": false, "value": "2025-07-22T21:08:04.752589Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lulfyilbwi2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6804712e-224e-4a5e-addc-ab145b667b27", "url": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lulfyilbwi2p"}, {"timestamp": "2025-07-22T21:25:57Z", "date_only": false, "value": "2025-07-22T21:25:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberBulletin/3697", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bd9f392a-8b7f-45bb-84d2-96bed7fad6e0", "content": "\u26a1\ufe0fUpdate: Microsoft has released security updates that fully protect customers using all supported versions of SharePoint affected by CVE-2025-53770 and CVE-2025-53771.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3697"}, {"timestamp": "2025-07-22T22:02:29.716Z", "date_only": false, "value": "2025-07-22T22:02:29.716517Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/Opalsec/statuses/114899134990644269", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "005ff7fb-b2ce-4563-9319-7ba7d4b6b48e", "url": "https://infosec.exchange/users/Opalsec/statuses/114899134990644269"}, {"timestamp": "2025-07-22T22:24:49.745Z", "date_only": false, "value": "2025-07-22T22:24:49.745782Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/verbrecher/statuses/114899228358022374", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "182df847-9e8f-4162-9042-11afe08f1b23", "url": "https://mastodon.social/users/verbrecher/statuses/114899228358022374"}, {"timestamp": "2025-07-22T22:50:58.776Z", "date_only": false, "value": "2025-07-22T22:50:58.776402Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3lullqiy3or2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "88b4a964-1ad2-413a-bc4d-a6b6f11dd8e4", "url": "https://bsky.app/profile/technofeed.bsky.social/post/3lullqiy3or2d"}, {"timestamp": "2025-07-22T23:32:57.887Z", "date_only": false, "value": "2025-07-22T23:32:57.887419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lulo3kpfss2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f4b33de7-8bda-4fa9-902d-64fb44941a83", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lulo3kpfss2h"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": true, "value": "2025-07-23", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2025-16684", "record": "CNVD-2025-16684", "field": "openTime"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "revisions.2.revision_date"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": false, "value": "2025-07-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-23)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2ecaec10-9f43-4dd9-bcc4-50024e41e3e2"}, {"timestamp": "2025-07-23T00:00:00Z", "date_only": true, "value": "2025-07-23", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2025-16684", "record": "CNVD-2025-16684", "field": "submitTime"}, {"timestamp": "2025-07-23T00:28:22.337Z", "date_only": false, "value": "2025-07-23T00:28:22.337775Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3lulr6o5inl2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fc18c8ec-491c-4930-9929-b5751e552c57", "url": "https://bsky.app/profile/technofeed.bsky.social/post/3lulr6o5inl2c"}, {"timestamp": "2025-07-23T01:38:00Z", "date_only": false, "value": "2025-07-23T01:38:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45025", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7d0e0dd1-b8a1-4897-a360-b8f6a0d48919", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExplore the Microsoft SharePoint CVE-2025-53770 proof of concept. Learn about this vulnerability and its implications. \ud83d\udc19\ud83d\udcbb\nURL\uff1ahttps://github.com/Lapesha/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45025"}, {"timestamp": "2025-07-23T02:26:44.186Z", "date_only": false, "value": "2025-07-23T02:26:44.186716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lulxscrhzf2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d2708ea7-9e3f-4584-a37a-fc7fb7096bb6", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lulxscrhzf2f"}, {"timestamp": "2025-07-23T02:39:16.366Z", "date_only": false, "value": "2025-07-23T02:39:16.366583Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lulyipwl2s2u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "48766a1f-7c15-433e-a40e-d8930463e0e5", "url": "https://bsky.app/profile/shiojiri.com/post/3lulyipwl2s2u"}, {"timestamp": "2025-07-23T03:00:06Z", "date_only": false, "value": "2025-07-23T03:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/Vm_C3grssVVNHTasaKMrEWrgVm8hzPtsHGCqWC4-NgSy8rY", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "78f581df-9738-4917-a178-f645424b8908"}, {"timestamp": "2025-07-23T03:37:15Z", "date_only": false, "value": "2025-07-23T03:37:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45035", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "643d2f7b-24db-42aa-991c-47465bb1ee12", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-53770 \u2013 Vulnerability Research & Exploitation\nURL\uff1ahttps://github.com/b33b0y/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45035"}, {"timestamp": "2025-07-23T03:40:03.733Z", "date_only": false, "value": "2025-07-23T03:40:03.733076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum3vfnydc2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ca671a3a-75c2-4b60-8ac0-e5c4d7519011", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum3vfnydc2j"}, {"timestamp": "2025-07-23T03:42:06.461Z", "date_only": false, "value": "2025-07-23T03:42:06.461706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum3yxmujk2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "eddd75d0-5902-45a1-8c0b-df5aebdde053", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum3yxmujk2j"}, {"timestamp": "2025-07-23T03:43:53.258Z", "date_only": false, "value": "2025-07-23T03:43:53.258946Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum447fzuk2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5acbe437-4a1d-42dd-a285-4066d8e08849", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lum447fzuk2j"}, {"timestamp": "2025-07-23T03:59:38Z", "date_only": false, "value": "2025-07-23T03:59:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/JnW9AOarP4rqO_iltGM7Nnqyuf1Dj38y3Lpw_sdr0iyyQ7c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "22d0ab53-208a-40f8-be00-9ee89b8213f5"}, {"timestamp": "2025-07-23T04:02:15.511Z", "date_only": false, "value": "2025-07-23T04:02:15.511490Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lum54yrnps2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "11fc142f-9322-456f-a94f-c5af4fe61570", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3lum54yrnps2n"}, {"timestamp": "2025-07-23T04:51:55.713Z", "date_only": false, "value": "2025-07-23T04:51:55.713702Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lum7vwwuv22a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5d836fb2-0ff7-402f-a328-54ad79827557", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lum7vwwuv22a"}, {"timestamp": "2025-07-23T05:40:07.945Z", "date_only": false, "value": "2025-07-23T05:40:07.945104Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lumcm4zht22p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "08a91a8f-9740-44cc-8c70-1d14804b7563", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lumcm4zht22p"}, {"timestamp": "2025-07-23T06:05:21.070Z", "date_only": false, "value": "2025-07-23T06:05:21.070980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/keiwork35.bsky.social/post/3lumdz76unt2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "51a7c6d0-796d-4da4-8081-6820023fff2b", "url": "https://bsky.app/profile/keiwork35.bsky.social/post/3lumdz76unt2m"}, {"timestamp": "2025-07-23T06:55:04Z", "date_only": false, "value": "2025-07-23T06:55:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/59ed4725-5f2a-4844-8dc4-e6926dbcb5ce", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "03008f4a-c747-4812-8966-9ebe38982821"}, {"timestamp": "2025-07-23T07:00:07.425Z", "date_only": false, "value": "2025-07-23T07:00:07.425392Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rss.y-u-e.workers.dev/post/3lumh35opaf22", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "e01a9d51-ae4c-4ef4-bfab-46aabdc987cc", "url": "https://bsky.app/profile/rss.y-u-e.workers.dev/post/3lumh35opaf22"}, {"timestamp": "2025-07-23T07:44:51.871Z", "date_only": false, "value": "2025-07-23T07:44:51.871355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lumjkz6b7zw2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "77fe6913-0652-4b0d-bad3-f4a7c84f797f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lumjkz6b7zw2"}, {"timestamp": "2025-07-23T08:14:37.560Z", "date_only": false, "value": "2025-07-23T08:14:37.560992Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lumlaerqvk2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1cfc884e-fb63-47a9-8bd2-9c458fab3a18", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lumlaerqvk2a"}, {"timestamp": "2025-07-23T08:15:35.331Z", "date_only": false, "value": "2025-07-23T08:15:35.331194Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/verbrecher/statuses/114901551282361354", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "732814c4-2f02-40ca-b40d-0f9296f048c2", "url": "https://mastodon.social/users/verbrecher/statuses/114901551282361354"}, {"timestamp": "2025-07-23T08:55:12Z", "date_only": false, "value": "2025-07-23T08:55:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/23/china-nationstate-actors-target-sharepoint.html", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5645c629-be7a-41f0-a300-cd307d233206", "url": "https://threatintel.cc/2025/07/23/china-nationstate-actors-target-sharepoint.html"}, {"timestamp": "2025-07-23T08:59:25.621Z", "date_only": false, "value": "2025-07-23T08:59:25.621166Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/olaf.social.secret-wg.org.ap.brid.gy/post/3lumnn3cnfeg2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fd27f48b-ef27-4664-9048-3c1701b0a61b", "url": "https://bsky.app/profile/olaf.social.secret-wg.org.ap.brid.gy/post/3lumnn3cnfeg2"}, {"timestamp": "2025-07-23T09:00:05Z", "date_only": false, "value": "2025-07-23T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/3LPs86CTupV_UsDNSnboCcqxGlpBquJypjihLBnDsn6A9pQ", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f3a016ed-98b1-4f1a-89fb-a357ef6a6a0e"}, {"timestamp": "2025-07-23T09:00:08.256Z", "date_only": false, "value": "2025-07-23T09:00:08.256894Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/guardian360.bsky.social/post/3lumnrqoiab2u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dfb0af81-8b0f-4aa1-97b8-4cfa33bc5640", "url": "https://bsky.app/profile/guardian360.bsky.social/post/3lumnrqoiab2u"}, {"timestamp": "2025-07-23T09:26:22.167Z", "date_only": false, "value": "2025-07-23T09:26:22.167302Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lumpao6rks2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9f54cf90-3cb9-448c-9f12-92993a644b44", "url": "https://bsky.app/profile/infosecfr.skyfleet.blue/post/3lumpao6rks2i"}, {"timestamp": "2025-07-23T09:47:26.247Z", "date_only": false, "value": "2025-07-23T09:47:26.247751Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techfr.skyfleet.blue/post/3lumqgdzgvl2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "562d0b68-3373-4467-9cf9-90377f12bba7", "url": "https://bsky.app/profile/techfr.skyfleet.blue/post/3lumqgdzgvl2b"}, {"timestamp": "2025-07-23T09:56:21.649Z", "date_only": false, "value": "2025-07-23T09:56:21.649074Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/114901947523396213", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f409d957-418f-4078-b3f4-06dc72a98447", "url": "https://infosec.exchange/users/zeljkazorz/statuses/114901947523396213"}, {"timestamp": "2025-07-23T10:37:36.582Z", "date_only": false, "value": "2025-07-23T10:37:36.582294Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lumta2dx2e2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6abd20ba-bb87-416a-8a70-cd3332a73c1d", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lumta2dx2e2o"}, {"timestamp": "2025-07-23T10:55:07.224Z", "date_only": false, "value": "2025-07-23T10:55:07.224238Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/114902178639951273", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7ff14edc-dc25-42ef-99b1-f346872a75be", "url": "https://infosec.exchange/users/edwardk/statuses/114902178639951273"}, {"timestamp": "2025-07-23T11:02:55.169Z", "date_only": false, "value": "2025-07-23T11:02:55.169178Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberfraudcen.bsky.social/post/3lumunceodq2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e51c6f05-2b43-44db-b354-50b7a1a41100", "url": "https://bsky.app/profile/cyberfraudcen.bsky.social/post/3lumunceodq2q"}, {"timestamp": "2025-07-23T12:26:25Z", "date_only": false, "value": "2025-07-23T12:26:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7259", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "91427daf-5abb-4b12-99b5-3f1377116fca", "content": "\u041a\u0435\u0439\u0441 \u0441 0-day (CVE-2025-53770) \u0430\u0442\u0430\u043a\u0430\u043c\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SharePoint, \u043d\u0430\u0437\u0432\u0430\u043d\u043d\u044b\u0435 ShellTool, \u0432\u044b\u0437\u0432\u0430\u043b \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441, \u0432 \u0432\u0438\u0434\u0443 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0432\u044b\u0448\u043b\u043e \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u0447\u0438\u0441\u043b\u043e \u043e\u0442\u0447\u0435\u0442\u043e\u0432 \u0441 \u043e\u0442\u0440\u0430\u0436\u0435\u043d\u0438\u0435\u043c \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e \u0447\u0438\u0441\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0435\u0439.\n\n\u0414\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0437\u0432\u0438\u0442\u0438\u044f \u0432\u0441\u0435\u0439 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u0440\u0435\u0448\u0438\u043b\u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u0442\u044c\u0441\u044f \u043d\u0430 \u0445\u0440\u043e\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u043e\u0441\u043d\u043e\u0432\u043d\u044b\u0445 \u0441\u043e\u0431\u044b\u0442\u0438\u0439, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0442\u0440\u0430\u0437\u0438\u0442\u044c \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0435 \u043c\u043e\u043c\u0435\u043d\u0442\u044b:\n\n- \u0421\u0430\u043c\u0430 0-day \u0438 \u0430\u0442\u0430\u043a\u0438 \u0431\u044b\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0432 \u0441\u0443\u0431\u0431\u043e\u0442\u0443, 19 \u0438\u044e\u043b\u044f, \u0430 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043f\u0430\u0442\u0447\u0438. \u041e\u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0432\u0430\u0440\u0438\u0430\u043d\u0442 \u0441\u0442\u0430\u0440\u043e\u0439 RCE, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0439 \u043a\u0430\u043a CVE-2025-49704, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435.\n\n- \u041e\u0448\u0438\u0431\u043a\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 MachineKey \u0441\u0435\u0440\u0432\u0435\u0440\u0430 SharePoint, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0442\u0435\u043c \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0441 \u0446\u0435\u043b\u044c\u044e RCE.\n\n- \u0420\u0430\u043d\u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u044b\u0442\u0430\u043b\u0438\u0441\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c CVE-2025-49704 \u0438 CVE-2025-49706, \u043f\u0440\u0435\u0436\u0434\u0435 \u0447\u0435\u043c \u043f\u0435\u0440\u0435\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043d\u0430 CVE-2025-53770. \u041e\u0431\u0435 \u043e\u043d\u0438 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043d\u0430 Pwn2Own Berlin \u0432 \u043c\u0430\u0435 \u044d\u0442\u043e\u0433\u043e \u0433\u043e\u0434\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c\u00a0ShellTool.\n\n- Microsoft \u0442\u0430\u043a\u0436\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0447\u0435\u0442\u0432\u0435\u0440\u0442\u0443\u044e \u043e\u0448\u0438\u0431\u043a\u0443, CVE-2025-53771, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0448\u0438\u0431\u043a\u0443 \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0443\u0442\u0438, \u044f\u0432\u043b\u044f\u044e\u0449\u0443\u044e\u0441\u044f \u0440\u0430\u0437\u043d\u043e\u0432\u0438\u0434\u043d\u043e\u0441\u0442\u044c\u044e CVE-2025-49706 \u0438, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0443\u044e\u0441\u044f \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n- 0-day \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b SharePoint \u0432\u0435\u0440\u0441\u0438\u0439 2016 \u0438 2019. \u0421\u0435\u0440\u0432\u0435\u0440\u044b SharePoint 2010 \u0438 2013 \u0442\u0430\u043a\u0436\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b, \u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u043b\u044f \u043d\u0438\u0445 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043e. \u041e\u0431\u043b\u0430\u0447\u043d\u044b\u0435 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Microsoft SharePoint \u043d\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b.\n\n- \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 0-day \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u043e\u0432 \u043d\u0430 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445. Microsoft \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0442\u0440\u0435\u043c\u044f \u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u043c\u0438 APT: Linen Typhoon, Violet Typhoon \u0438 Storm-2603.\n\n- \u041f\u0435\u0440\u0432\u044b\u0435 \u0434\u0432\u0435 \u0433\u0440\u0443\u043f\u043f\u044b \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u0441 2012 \u0438 2015 \u0433\u043e\u0434\u043e\u0432 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c\u0438 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044f\u043c\u0438. \u0422\u0440\u0435\u0442\u044c\u044f \u0431\u043e\u043b\u0435\u0435 \u043d\u043e\u0432\u0430\u044f: \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u043b\u0438\u0441\u044c \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 Warlock \u0438 Lockbit.\n\n- SentinelOne \u0442\u0430\u043a\u0436\u0435 \u0441\u0432\u044f\u0437\u0430\u043b\u0430 \u0430\u0442\u0430\u043a\u0438 \u0441 \u0442\u0440\u0435\u043c\u044f \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430\u043c\u0438, \u043d\u043e \u043d\u0435 \u043d\u0430\u0437\u0432\u0430\u043b\u0430 \u043d\u0438 \u0438\u043c\u0435\u043d, \u043d\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430 \u0430\u0442\u0430\u043a.\n\n- Microsoft \u0438 SentinelOne \u0441\u043e\u043e\u0431\u0449\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043d\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u0432, \u0442\u0430\u043a\u0436\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0449\u0438\u0445 0-day, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0440\u0443\u0433\u0438\u0435 APT.\n\n- \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Tenable, \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0439 PoC \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0448\u0438\u0440\u043e\u043a\u043e\u00a0\u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d.\n\n- \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Censys, \u043a \u0418\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0443 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0431\u043e\u043b\u0435\u0435 9700 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 SharePoint 2016 \u0438 2019 \u0438, \u043a\u0430\u043a \u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442 NextGov, \u0431\u043e\u043b\u0435\u0435 1100 \u0438\u0437 \u043d\u0438\u0445 \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440\u043e\u043c.\n\n- \u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043c\u043d\u043e\u0433\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432, \u043d\u0430 \u0441\u043e\u0442\u043d\u044f\u0445 \u0438\u0437 \u043d\u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u044b \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u044b, \u0445\u043e\u0442\u044f \u043d\u0435\u044f\u0441\u043d\u043e, \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u043b\u0438 \u044d\u0442\u043e \u0441 ShellTool. \n\n- \u0422\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044f Eye Security \u0438 SentinelOne \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 17 \u0438\u044e\u043b\u044f. \u041f\u043e\u0441\u043b\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043b\u0438 \u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n- \u041f\u043e\u00a0\u0434\u0430\u043d\u043d\u044b\u043c WaPo, \u0440\u044f\u0434 \u0433\u043e\u0441\u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u043b\u0438\u0441\u044c \u0432\u0437\u043b\u043e\u043c\u0443.\n\n- \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 SentinelOne \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u044b\u0435 \u0446\u0435\u043b\u0438 \u0441\u0432\u0438\u0434\u0435\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0443\u044e\u0442 \u043e \u0442\u043e\u043c, \u0447\u0442\u043e \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u0434\u0435\u044f\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u0442\u0449\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0442\u0430\u0440\u0433\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439. \u041f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0430\u0442\u0430\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043d\u043e\u0441\u0438\u0442\u044c \u0441\u0438\u0442\u0443\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440.\n\n- \u0412 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u0442\u0447\u0435\u0442\u0430\u0445 \u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0442\u0430\u043a\u0436\u0435 \u0431\u044b\u043b\u0430 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430 CVE-2025-53771, \u043d\u043e Microsoft \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442.\n\n- \u041f\u043e\u043c\u0438\u043c\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043e\u043a, \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u0441\u043b\u0435\u0434\u0443\u0435\u0442 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0440\u043e\u0442\u0430\u0446\u0438\u044e \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 MachineKey \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u043e\u0432. \u0423\u043a\u0440\u0430\u0434\u0435\u043d\u043d\u044b\u0435 MachineKeys \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0442 \u0432 \u0431\u0443\u0434\u0443\u0449\u0435\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0447\u0435\u0440\u0435\u0437 \u0431\u044d\u043a\u0434\u043e\u0440, \u0434\u0430\u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c.\n\n- \u0422\u0435\u043f\u0435\u0440\u044c \u0442\u0430\u043a\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d\u00a0\u0441\u043a\u0430\u043d\u0435\u0440, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e IOC \u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u043e\u0442\u0447\u0435\u0442\u0430\u0445: Broadcom Symantec, CISA, Cisco Talos, Censys, Check Point, CrowdStrike, Eye Security, Logpoint, Microsoft, Orange, Palo Alto Networks, Qualys, SentinelOne, Tenable, Trend Micro \u0438 Varonis.", "url": "https://t.me/true_secator/7259"}, {"timestamp": "2025-07-23T12:29:30.106Z", "date_only": false, "value": "2025-07-23T12:29:30.106254Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bobbysbytes.bsky.social/post/3lumzi4ygfc2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b81230e0-12d9-4c03-a337-b034223762be", "url": "https://bsky.app/profile/bobbysbytes.bsky.social/post/3lumzi4ygfc2b"}, {"timestamp": "2025-07-23T12:39:16.373Z", "date_only": false, "value": "2025-07-23T12:39:16.373244Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114902588173031462", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e1b1e1c2-4b51-4d96-945f-24f431a8b008", "url": "https://infosec.exchange/users/cR0w/statuses/114902588173031462"}, {"timestamp": "2025-07-23T12:58:40.802Z", "date_only": false, "value": "2025-07-23T12:58:40.802827Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3lun34ct4eb2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cd5bb742-6cc8-4ae7-9001-3aea54f56189", "url": "https://bsky.app/profile/technofeed.bsky.social/post/3lun34ct4eb2c"}, {"timestamp": "2025-07-23T13:07:30.196Z", "date_only": false, "value": "2025-07-23T13:07:30.196334Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/zeljkazorz/statuses/114902699167179824", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ce7ff021-88c4-454b-9507-f9c2fcbc60cc", "url": "https://infosec.exchange/users/zeljkazorz/statuses/114902699167179824"}, {"timestamp": "2025-07-23T13:18:59.807Z", "date_only": false, "value": "2025-07-23T13:18:59.807279Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stephenfewer.bsky.social/post/3lun4al232c2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "72f8ee8b-0b47-4bd9-9b5e-1e097d57c8c4", "url": "https://bsky.app/profile/stephenfewer.bsky.social/post/3lun4al232c2e"}, {"timestamp": "2025-07-23T13:31:20Z", "date_only": false, "value": "2025-07-23T13:31:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "95e1509a-e51e-4008-9bb4-22ebc262102c", "url": "https://advisories.ncsc.nl/advisory?id=NCSC-2025-0233"}, {"timestamp": "2025-07-23T14:21:10.937Z", "date_only": false, "value": "2025-07-23T14:21:10.937786Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/redmondit.bsky.social/post/3lun7psnnzc2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4db0dce9-c097-4323-81bf-09b0e2e2f06b", "url": "https://bsky.app/profile/redmondit.bsky.social/post/3lun7psnnzc2d"}, {"timestamp": "2025-07-23T14:50:16.119Z", "date_only": false, "value": "2025-07-23T14:50:16.119410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lunbdtqrmp2d", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "340b068a-61c7-44fb-bc59-56b87bdd503d", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lunbdtqrmp2d"}, {"timestamp": "2025-07-23T15:00:06Z", "date_only": false, "value": "2025-07-23T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/9j-Ad_XyFvci-JFaP4-sJIShKWWalZfoinQ91Q3YdjSga9M", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "69b3a6be-6982-470b-891b-3e033d1feaef"}, {"timestamp": "2025-07-23T15:31:20.529Z", "date_only": false, "value": "2025-07-23T15:31:20.529389Z", "kind": "other", "label": "Advisory revision", "source": "csaf_ncscnl \u00b7 NCSC-2025-0233", "record": "NCSC-2025-0233", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-07-23T15:31:20.529Z", "date_only": false, "value": "2025-07-23T15:31:20.529389Z", "kind": "other", "label": "Updated", "source": "csaf_ncscnl \u00b7 NCSC-2025-0233", "record": "NCSC-2025-0233", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-07-23T15:35:07.895Z", "date_only": false, "value": "2025-07-23T15:35:07.895978Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lundtypeac2w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ecf654c9-b046-482d-afa5-f14b79fd8c4c", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lundtypeac2w"}, {"timestamp": "2025-07-23T17:19:15Z", "date_only": false, "value": "2025-07-23T17:19:15.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-53770.yaml", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e6ed80b2-aa99-4ab9-96fe-ac6003c9e363", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-53770.yaml"}, {"timestamp": "2025-07-23T17:31:50.477Z", "date_only": false, "value": "2025-07-23T17:31:50.477398Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/aurmil.dev/post/3lunkepvblk2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7da88184-6910-45bf-b82c-740bbb8beefa", "url": "https://bsky.app/profile/aurmil.dev/post/3lunkepvblk2i"}, {"timestamp": "2025-07-23T18:22:37Z", "date_only": false, "value": "2025-07-23T18:22:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45113", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fca91659-783f-4141-bbdd-c1c7b04b03d8", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aHow CVE-2025-29774 Vulnerabilities and the SIGHASH_SINGLE Bug Threaten Multi-Signature Wallet Operational Methods with Fake RawTX\nURL\uff1ahttps://github.com/Kamal-Hegazi/CVE-2025-53770-SharePoint-RCE\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45113"}, {"timestamp": "2025-07-23T18:32:27.755Z", "date_only": false, "value": "2025-07-23T18:32:27.755235Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/leakix/statuses/114903974771172426", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9b6bc981-990e-47e0-8811-a860a3be55e1", "url": "https://mastodon.social/users/leakix/statuses/114903974771172426"}, {"timestamp": "2025-07-23T18:52:53.048Z", "date_only": false, "value": "2025-07-23T18:52:53.048046Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lunovolfzm2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5b9e0859-de50-4ea6-b7b0-c316461f870c", "url": "https://bsky.app/profile/opsmatters.com/post/3lunovolfzm2r"}, {"timestamp": "2025-07-23T19:01:10.658Z", "date_only": false, "value": "2025-07-23T19:01:10.658707Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lunpejgwig2g", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e6aa68db-f284-4fcf-bbdd-b334e3775b57", "url": "https://bsky.app/profile/opsmatters.com/post/3lunpejgwig2g"}, {"timestamp": "2025-07-23T19:07:25.256Z", "date_only": false, "value": "2025-07-23T19:07:25.256504Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lunppnzlpp2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ff793d24-287f-4a61-9b9f-2857574444a2", "url": "https://bsky.app/profile/opsmatters.com/post/3lunppnzlpp2e"}, {"timestamp": "2025-07-23T19:28:36.160Z", "date_only": false, "value": "2025-07-23T19:28:36.160956Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tenablesecurity.bsky.social/post/3lunqvk25os2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6afff88b-c3c5-4395-bd01-1039f25baa67", "url": "https://bsky.app/profile/tenablesecurity.bsky.social/post/3lunqvk25os2o"}, {"timestamp": "2025-07-23T19:41:22.838Z", "date_only": false, "value": "2025-07-23T19:41:22.838770Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sansisc.bsky.social/post/3lunrmfpa272m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "da458f5a-e953-41e1-b0ee-fd6f572e3d9f", "url": "https://bsky.app/profile/sansisc.bsky.social/post/3lunrmfpa272m"}, {"timestamp": "2025-07-23T19:56:19.553Z", "date_only": false, "value": "2025-07-23T19:56:19.553517Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lunsh4vxuo25", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "91bd050e-d714-4067-8c42-aed0e2116ed1", "url": "https://bsky.app/profile/opsmatters.com/post/3lunsh4vxuo25"}, {"timestamp": "2025-07-23T20:02:08.360Z", "date_only": false, "value": "2025-07-23T20:02:08.360161Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunsrgrx4k2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3832bb87-2ed0-4246-aaa9-7252db1389ad", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunsrgrx4k2e"}, {"timestamp": "2025-07-23T20:04:41.162Z", "date_only": false, "value": "2025-07-23T20:04:41.162728Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114904339588686858", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "7cb6cff6-9e8b-41e4-af59-1ef7313d60be", "url": "https://infosec.exchange/users/cR0w/statuses/114904339588686858"}, {"timestamp": "2025-07-23T20:07:16.192Z", "date_only": false, "value": "2025-07-23T20:07:16.192411Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lunt2pab362u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4ee81a83-2c27-4322-bb65-f3295ae22801", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lunt2pab362u"}, {"timestamp": "2025-07-23T20:09:23.791Z", "date_only": false, "value": "2025-07-23T20:09:23.791921Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunt6gf4ec2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d270b814-8eea-4404-99e5-e8193ca1e5a9", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunt6gf4ec2e"}, {"timestamp": "2025-07-23T20:25:57.854Z", "date_only": false, "value": "2025-07-23T20:25:57.854106Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114904423287293264", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "43184a7f-a578-4833-a0c6-9cae8ecd7525", "url": "https://infosec.exchange/users/cR0w/statuses/114904423287293264"}, {"timestamp": "2025-07-23T20:26:23.993Z", "date_only": false, "value": "2025-07-23T20:26:23.993922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lunu4vokkf2d", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "e9c34261-1361-4328-aecf-c9090b12c486", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lunu4vokkf2d"}, {"timestamp": "2025-07-23T20:43:10.046Z", "date_only": false, "value": "2025-07-23T20:43:10.046089Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunv2r6fbc26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f4a85d61-4297-4bb7-b967-1887581dce98", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunv2r6fbc26"}, {"timestamp": "2025-07-23T20:48:24.227Z", "date_only": false, "value": "2025-07-23T20:48:24.227835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/binarydefense.com/post/3lunve2iocc2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6df40ce5-cda7-438b-b630-2cc1b516dcff", "url": "https://bsky.app/profile/binarydefense.com/post/3lunve2iocc2a"}, {"timestamp": "2025-07-23T20:53:53.711Z", "date_only": false, "value": "2025-07-23T20:53:53.711498Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunvnvtscs26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "13c27e76-771f-41b8-8be8-7c1b2a84d479", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunvnvtscs26"}, {"timestamp": "2025-07-23T21:00:04Z", "date_only": false, "value": "2025-07-23T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/EYkASGxj3Tiuz3kIHRMz13gpRd2GwQ5wKmXB5D8I7ZTChs4", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "58139a56-c373-48d4-8914-1365eb36d2f1"}, {"timestamp": "2025-07-23T21:03:24.109Z", "date_only": false, "value": "2025-07-23T21:03:24.109640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunw6z4ogc26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fc2f68a2-0a66-4d86-a871-25db185ddf3e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lunw6z4ogc26"}, {"timestamp": "2025-07-23T21:03:31.644Z", "date_only": false, "value": "2025-07-23T21:03:31.644202Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lunw7cd54p26", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bfdeae7e-3912-48e8-bf0d-4d4a77887d40", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lunw7cd54p26"}, {"timestamp": "2025-07-23T21:12:33.160Z", "date_only": false, "value": "2025-07-23T21:12:33.160088Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lunwp7y3yk2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5e927cc5-9155-4bd9-a548-dcdf4fe14681", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lunwp7y3yk2c"}, {"timestamp": "2025-07-23T21:17:32.013Z", "date_only": false, "value": "2025-07-23T21:17:32.013868Z", "kind": "sighting", "label": "Seen", "source": "https://swecyb.com/users/nopatience/statuses/114904625337829222", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "4474fd22-8a32-40f1-909c-17b8c0c2d4a2", "url": "https://swecyb.com/users/nopatience/statuses/114904625337829222"}, {"timestamp": "2025-07-23T21:17:39.673Z", "date_only": false, "value": "2025-07-23T21:17:39.673164Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cstromblad.com/post/3lunwyhhqr3x2", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "a85ec4f4-13b1-498a-9512-196cfab69ef2", "url": "https://bsky.app/profile/cstromblad.com/post/3lunwyhhqr3x2"}, {"timestamp": "2025-07-23T21:24:42Z", "date_only": false, "value": "2025-07-23T21:24:42.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/45127", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0997cd93-b351-42af-bee5-ebaf17c33ab1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aMezzanine CMS 6.1.0 XSS (CVE-2025-50481)\nURL\uff1ahttps://github.com/exfil0/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45127"}, {"timestamp": "2025-07-23T21:37:51.756Z", "date_only": false, "value": "2025-07-23T21:37:51.756585Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3luny4japqs2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6ab971d1-3f12-479f-8681-9f6824174dc9", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3luny4japqs2c"}, {"timestamp": "2025-07-23T22:18:25.429Z", "date_only": false, "value": "2025-07-23T22:18:25.429495Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/johanvancamp.bsky.ugent.be/post/3luo2f7rf6c2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1e4f091f-6251-4ac6-b528-e2d2a85fb15f", "url": "https://bsky.app/profile/johanvancamp.bsky.ugent.be/post/3luo2f7rf6c2f"}, {"timestamp": "2025-07-23T22:42:11.266Z", "date_only": false, "value": "2025-07-23T22:42:11.266755Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3luo3ppfhku24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e011523c-0188-4b14-8d3b-2512a74797f1", "url": "https://bsky.app/profile/cyberhub.blog/post/3luo3ppfhku24"}, {"timestamp": "2025-07-23T23:03:52.773Z", "date_only": false, "value": "2025-07-23T23:03:52.773275Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3luo4wim4kl2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b78602ed-f57b-4946-95db-4d21a880f89e", "url": "https://bsky.app/profile/opsmatters.com/post/3luo4wim4kl2h"}, {"timestamp": "2025-07-24T00:00:00Z", "date_only": false, "value": "2025-07-24T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-24)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8c70a9bb-8a4e-42ed-ba57-f4ce0c31231f"}, {"timestamp": "2025-07-24T00:00:00Z", "date_only": false, "value": "2025-07-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-24)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "488b8313-c28b-4adc-ab1b-866e0b95e863"}, {"timestamp": "2025-07-24T01:20:39Z", "date_only": false, "value": "2025-07-24T01:20:39.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45146", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7a8868f3-a711-4a95-8347-b02e03586772", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aDetection rules for CVE-2025-53770\nURL\uff1ahttps://github.com/nisargsuthar/suricata-rule-CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45146"}, {"timestamp": "2025-07-24T02:26:09.047Z", "date_only": false, "value": "2025-07-24T02:26:09.047649Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3luoia6w5x22k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "39271305-fdff-40eb-a1e4-341621d6caf2", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3luoia6w5x22k"}, {"timestamp": "2025-07-24T03:00:16Z", "date_only": false, "value": "2025-07-24T03:00:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wODd61W5j1tuTHJwgIPrERYXEehViHv3tBlXAdVX0Rv5XjQ", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6c16837e-bfa2-4d1e-a501-f1a302ac9d74"}, {"timestamp": "2025-07-24T04:27:37Z", "date_only": false, "value": "2025-07-24T04:27:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/akaCipher/be83eb128b71db54304bf64c1723fafe", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "58db426c-7723-4a40-ae7a-6dbbc2c39e10", "url": "https://gist.github.com/akaCipher/be83eb128b71db54304bf64c1723fafe"}, {"timestamp": "2025-07-24T04:27:37Z", "date_only": false, "value": "2025-07-24T04:27:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/ryan-theengineer/be83eb128b71db54304bf64c1723fafe", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "58b6a83b-82e3-47d0-9f96-6edee5545059", "url": "https://gist.github.com/ryan-theengineer/be83eb128b71db54304bf64c1723fafe"}, {"timestamp": "2025-07-24T06:11:48.294Z", "date_only": false, "value": "2025-07-24T06:11:48.294294Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sequretek.bsky.social/post/3luoutnp6dk2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "88022610-231c-4bda-a0b4-3b4c1c568ff3", "url": "https://bsky.app/profile/sequretek.bsky.social/post/3luoutnp6dk2f"}, {"timestamp": "2025-07-24T07:01:54.802Z", "date_only": false, "value": "2025-07-24T07:01:54.802331Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxn7k5f22u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e087359a-59b3-4ef0-8fcd-ebc69c3c7c60", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxn7k5f22u"}, {"timestamp": "2025-07-24T07:01:55.436Z", "date_only": false, "value": "2025-07-24T07:01:55.436016Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxnbll522u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d0c786a3-507c-4838-94ca-024c30a70e35", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxnbll522u"}, {"timestamp": "2025-07-24T07:05:43.812Z", "date_only": false, "value": "2025-07-24T07:05:43.812677Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxu2ajms2u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c64c9bb1-eb93-4a45-809c-50b02c0017ae", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxu2ajms2u"}, {"timestamp": "2025-07-24T07:05:44.485Z", "date_only": false, "value": "2025-07-24T07:05:44.485524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxu43jd22u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c3e7bb47-0712-428e-b534-78ef2c60afd9", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3luoxu43jd22u"}, {"timestamp": "2025-07-24T07:08:38.280Z", "date_only": false, "value": "2025-07-24T07:08:38.280277Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/shadowserver/statuses/114906950312458642", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "465c97de-5b13-4884-8ded-1906057f2fcc", "url": "https://infosec.exchange/users/shadowserver/statuses/114906950312458642"}, {"timestamp": "2025-07-24T07:19:57.703Z", "date_only": false, "value": "2025-07-24T07:19:57.703455Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-1e71ea19-ea51a6de002a1094", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "19148681-4139-410f-98d5-792eca30dcdd", "url": "https://poliverso.org/objects/0477a01e-1e71ea19-ea51a6de002a1094"}, {"timestamp": "2025-07-24T09:00:04Z", "date_only": false, "value": "2025-07-24T09:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/xbCQIci8LNLNZzxa6DrF5sreyIjrFAXTYzYQ7XhdPDb4xnI", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "11ccc59d-b18d-45e9-a518-f09e5e204c1b"}, {"timestamp": "2025-07-24T09:11:03.973Z", "date_only": false, "value": "2025-07-24T09:11:03.973554Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6tvuckc2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "86717dfb-35e3-42bd-8129-cb9fe16f9dc6", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6tvuckc2k"}, {"timestamp": "2025-07-24T09:11:04.639Z", "date_only": false, "value": "2025-07-24T09:11:04.639834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6tvv2xk2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "75feafce-b78b-4e07-93e7-64b131d20cb5", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6tvv2xk2k"}, {"timestamp": "2025-07-24T09:11:05.312Z", "date_only": false, "value": "2025-07-24T09:11:05.312137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6tyhve22k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "273a5a48-76ff-4065-9080-f4b7c6193efe", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6tyhve22k"}, {"timestamp": "2025-07-24T09:11:05.991Z", "date_only": false, "value": "2025-07-24T09:11:05.991574Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6u6jdrs2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "19bca85c-fee4-4fcc-b65b-555bac9af89a", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6u6jdrs2k"}, {"timestamp": "2025-07-24T09:11:06.665Z", "date_only": false, "value": "2025-07-24T09:11:06.665696Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6u6jgpk2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "11043e1e-128e-4d8e-8a13-abb2344fe569", "url": "https://bsky.app/profile/esetresearch.bsky.social/post/3lup6u6jgpk2k"}, {"timestamp": "2025-07-24T09:20:41.855Z", "date_only": false, "value": "2025-07-24T09:20:41.855383Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lup7fgn3ar2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1a354fc4-7e8f-4a8c-a55c-2178c6884c18", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lup7fgn3ar2y"}, {"timestamp": "2025-07-24T09:23:08.397Z", "date_only": false, "value": "2025-07-24T09:23:08.397996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lup7jhrgd22y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f61a5882-ae3c-4931-8de6-abcb8d18c675", "url": "https://bsky.app/profile/pentest-tools.com/post/3lup7jhrgd22y"}, {"timestamp": "2025-07-24T09:23:08.949Z", "date_only": false, "value": "2025-07-24T09:23:08.949933Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lup7jhrm6k2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2e0c7fb2-c136-4a85-aed2-7b471160bba5", "url": "https://bsky.app/profile/pentest-tools.com/post/3lup7jhrm6k2y"}, {"timestamp": "2025-07-24T09:23:09.503Z", "date_only": false, "value": "2025-07-24T09:23:09.503041Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lup7jnxwuc2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "84c1d0e4-ff9d-425f-a5ab-03ce22e92555", "url": "https://bsky.app/profile/pentest-tools.com/post/3lup7jnxwuc2y"}, {"timestamp": "2025-07-24T10:28:57.599Z", "date_only": false, "value": "2025-07-24T10:28:57.599586Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/whb.bsky.social/post/3lupd7icvw22q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0e1c6a14-6271-43c9-bc79-a7e82c1b6008", "url": "https://bsky.app/profile/whb.bsky.social/post/3lupd7icvw22q"}, {"timestamp": "2025-07-24T10:47:19Z", "date_only": false, "value": "2025-07-24T10:47:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/24/toolshell-fallout-chinese-hackers-exploit.html", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "73cd3f54-4f4d-4a57-820e-1973096b8e98", "url": "https://threatintel.cc/2025/07/24/toolshell-fallout-chinese-hackers-exploit.html"}, {"timestamp": "2025-07-24T13:01:16.973Z", "date_only": false, "value": "2025-07-24T13:01:16.973450Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gtbarry.bsky.social/post/3luplpus4nl2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d525ec6f-63d3-4151-8289-8ce74122833e", "url": "https://bsky.app/profile/gtbarry.bsky.social/post/3luplpus4nl2d"}, {"timestamp": "2025-07-24T13:57:39.001Z", "date_only": false, "value": "2025-07-24T13:57:39.001158Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/minxsecurity.bsky.social/post/3lupoulvrks2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0f92f63e-090a-43ca-ad5c-f509602a2470", "url": "https://bsky.app/profile/minxsecurity.bsky.social/post/3lupoulvrks2o"}, {"timestamp": "2025-07-24T15:56:09.210Z", "date_only": false, "value": "2025-07-24T15:56:09.210480Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/arbiteriapetus.bsky.social/post/3lupvihkezs2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "207ab904-db82-4c7d-bec9-49e92df5c117", "url": "https://bsky.app/profile/arbiteriapetus.bsky.social/post/3lupvihkezs2m"}, {"timestamp": "2025-07-24T17:04:45.195Z", "date_only": false, "value": "2025-07-24T17:04:45.195839Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/itsmalware.bsky.social/post/3lupzdb3aub2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f9c09bf2-a47a-4764-91fe-34901ce26fcb", "url": "https://bsky.app/profile/itsmalware.bsky.social/post/3lupzdb3aub2h"}, {"timestamp": "2025-07-24T19:00:26.323Z", "date_only": false, "value": "2025-07-24T19:00:26.323309Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3luq7s3tq7c2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0d8cfc90-0603-4619-b44c-ee241168e72b", "url": "https://bsky.app/profile/cecallihelper.bsky.social/post/3luq7s3tq7c2d"}, {"timestamp": "2025-07-24T19:53:06.775Z", "date_only": false, "value": "2025-07-24T19:53:06.775595Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rhisac.org/post/3luqcqbriu222", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1dc961b7-eca3-46d9-83fd-e5ef56861736", "url": "https://bsky.app/profile/rhisac.org/post/3luqcqbriu222"}, {"timestamp": "2025-07-24T20:13:08.970Z", "date_only": false, "value": "2025-07-24T20:13:08.970157Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3luqdu4bqc22a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3f9c22f7-24da-4e3e-814c-d17039f453dc", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3luqdu4bqc22a"}, {"timestamp": "2025-07-24T20:46:12.954Z", "date_only": false, "value": "2025-07-24T20:46:12.954609Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luqfp7wvss2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0989ccdf-9f55-4760-8b09-460469a37fa6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luqfp7wvss2s"}, {"timestamp": "2025-07-24T21:02:28.263Z", "date_only": false, "value": "2025-07-24T21:02:28.263344Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm5tczi2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ed2814e7-6ee4-4288-8638-81f3e7554bab", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3luqgm5tczi2p"}, {"timestamp": "2025-07-24T22:13:37.470Z", "date_only": false, "value": "2025-07-24T22:13:37.470244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sumologic.bsky.social/post/3luqkljb3gc24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1efaca90-7f77-4fac-a33e-079d79defe73", "url": "https://bsky.app/profile/sumologic.bsky.social/post/3luqkljb3gc24"}, {"timestamp": "2025-07-24T22:13:52.368Z", "date_only": false, "value": "2025-07-24T22:13:52.368716Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pjakobs.mastodon.green.ap.brid.gy/post/3luqkltvbs5b2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a84a5d08-8165-4640-9d56-8464b9f207d6", "url": "https://bsky.app/profile/pjakobs.mastodon.green.ap.brid.gy/post/3luqkltvbs5b2"}, {"timestamp": "2025-07-25T00:00:00Z", "date_only": false, "value": "2025-07-25T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-25)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "73c48ffd-7a64-457f-95b4-cd59d783c4ef"}, {"timestamp": "2025-07-25T01:56:34.133Z", "date_only": false, "value": "2025-07-25T01:56:34.133201Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3luqx26vpkc2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8423a4e1-1219-4503-852e-1b18d95ba07e", "url": "https://bsky.app/profile/shiojiri.com/post/3luqx26vpkc2b"}, {"timestamp": "2025-07-25T02:26:07.055Z", "date_only": false, "value": "2025-07-25T02:26:07.055537Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3luqyp244id2u", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "464367c4-6190-44cb-9ff0-bd07886f70fe", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3luqyp244id2u"}, {"timestamp": "2025-07-25T03:00:00Z", "date_only": false, "value": "2025-07-25T03:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-653/", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "310fe03c-aaed-4221-ad97-5cc4f1456af0", "url": "http://www.zerodayinitiative.com/advisories/ZDI-25-653/"}, {"timestamp": "2025-07-25T07:58:11.479Z", "date_only": false, "value": "2025-07-25T07:58:11.479191Z", "kind": "sighting", "label": "Exploited", "source": "https://github.com/soltanali0/CVE-2025-53770-Exploit/blob/main/exploit.py", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d25bd831-5a2b-44f0-b3a9-000ed0b8a0fd", "url": "https://github.com/soltanali0/CVE-2025-53770-Exploit/blob/main/exploit.py"}, {"timestamp": "2025-07-25T08:48:09Z", "date_only": false, "value": "2025-07-25T08:48:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ics_cert/1253", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a264fbe3-7a09-4454-a073-44dc9847fab6", "content": "\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc: \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0631\u0627\u0647\u0646\u0645\u0627\u06cc\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc SharePoint \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f\n\n\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc (\u06f2\u06f4/\u06f0\u06f7/\u06f2\u06f0\u06f2\u06f5) \u0627\u06cc\u0646 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u0627\u0645\u0644 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0642\u0631\u0627\u0631 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631\u060c \u0648\u0628\u200c\u0634\u0650\u0644\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u062f\u0631\u06af\u06cc\u0631 \u062f\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0648 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u062a\u0634\u062e\u06cc\u0635 \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 \u0627\u0633\u062a.\n\n\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc (\u06f2\u06f2/\u06f0\u06f7/\u06f2\u06f0\u06f2\u06f5): \u0627\u06cc\u0646 \u0647\u0634\u062f\u0627\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a \u062a\u0627 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u0627\u0632\u0647 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0632 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0631\u0627 \u0645\u0646\u0639\u06a9\u0633 \u06a9\u0646\u062f \u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0648 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0631\u0627\u06cc\u062c (CVE) \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0646\u062f \u0631\u0627 \u0627\u0635\u0644\u0627\u062d \u06a9\u0646\u062f\u060c \u06a9\u0647 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 CVE-2025-49706 \u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u0639\u0644 \u0634\u0628\u06a9\u0647\u060c \u0648 CVE-2025-49704 \u060c \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u062a\u0623\u06cc\u06cc\u062f \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n \u0627\u0632 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0641\u0639\u0627\u0644 \u0627\u0632 \u0632\u0646\u062c\u06cc\u0631\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u062c\u0639\u0644 \u0648 \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 (RCE) \u0634\u0627\u0645\u0644 CVE-2025-49706 \u0648 CVE-2025-49704 \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc SharePoint \u062f\u0627\u062e\u0644\u06cc \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f\u060c \u0622\u06af\u0627\u0647 \u0627\u0633\u062a. \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062f\u0627\u0645\u0646\u0647 \u0648 \u062a\u0623\u062b\u06cc\u0631 \u0622\u0646 \u0647\u0645\u0686\u0646\u0627\u0646 \u062f\u0631 \u062d\u0627\u0644 \u0627\u0631\u0632\u06cc\u0627\u0628\u06cc \u0627\u0633\u062a\u060c \u0627\u06cc\u0646 \u0632\u0646\u062c\u06cc\u0631\u0647 \u06a9\u0647 \u0628\u0647 \u0637\u0648\u0631 \u0639\u0645\u0648\u0645\u06cc \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 \"ToolShell\" \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0628\u0647 \u062a\u0631\u062a\u06cc\u0628 \u062f\u0633\u062a\u0631\u0633\u06cc \u063a\u06cc\u0631\u0645\u062c\u0627\u0632 \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u0648 \u062f\u0633\u062a\u0631\u0633\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u0634\u062f\u0647 \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u062c\u0639\u0644 \u0634\u0628\u06a9\u0647 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0628\u0647 \u0639\u0627\u0645\u0644\u0627\u0646 \u0645\u062e\u0631\u0628 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0628\u0647 \u0637\u0648\u0631 \u06a9\u0627\u0645\u0644 \u0628\u0647 \u0645\u062d\u062a\u0648\u0627\u06cc SharePoint\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0641\u0627\u06cc\u0644 \u0648 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc\u200c\u0647\u0627\u06cc \u062f\u0627\u062e\u0644\u06cc\u060c \u062f\u0633\u062a\u0631\u0633\u06cc \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u0647 \u0648 \u06a9\u062f \u0631\u0627 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0634\u0628\u06a9\u0647 \u0627\u062c\u0631\u0627 \u06a9\u0646\u0646\u062f. \u0641\u0631\u0627\u062a\u0631 \u0627\u0632 webshell \u0647\u0627\u06cc \u0645\u0639\u0645\u0648\u0644\u06cc\u060c \u0645\u0627\u0646\u0646\u062f .aspx \u0648 .exe\u060c \u0628\u0627\u0631\u0647\u0627\u06cc \u062f\u0627\u062f\u0647 .dll \u062f\u0631 \u0637\u0648\u0644 \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u062e\u06cc\u0631\u0627\u064b\u060c \u0639\u0627\u0645\u0644\u0627\u0646 \u062a\u0647\u062f\u06cc\u062f \u0646\u06cc\u0632 \u062f\u0631 \u062d\u0627\u0644 \u0631\u0645\u0632\u06af\u0630\u0627\u0631\u06cc \u0641\u0627\u06cc\u0644\u200c\u0647\u0627 \u0648 \u062a\u0648\u0632\u06cc\u0639 \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 Warlock \u062f\u0631 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0645\u0634\u0627\u0647\u062f\u0647 \u0634\u062f\u0647\u200c\u0627\u0646\u062f.\n\n\u0627\u06af\u0631\u0686\u0647 \u0628\u0647\u200c\u0637\u0648\u0631 \u0641\u0639\u0627\u0644 \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a\u060c \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a CVE \u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u0632\u06cc\u0631 \u0631\u0627 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u062e\u0637\u0631 \u0628\u0627\u0644\u0642\u0648\u0647\u200c\u0627\u06cc \u0631\u0627 \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f:\n\nCVE-2025-53771 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0648\u0631 \u0632\u062f\u0646 \u0648\u0635\u0644\u0647 \u0628\u0631\u0627\u06cc CVE-2025-49706 \u0627\u0633\u062a.\nCVE-2025-53770 \u06cc\u06a9 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0648\u0631 \u0632\u062f\u0646 \u0648\u0635\u0644\u0647 \u0628\u0631\u0627\u06cc CVE-2025-49704 \u0627\u0633\u062a.\nCISA \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631\u0627\u062a \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0646\u0641\u0648\u0630 RCE \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f:\n\n\u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0644\u0627\u0632\u0645 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0631\u0627 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u06cc\u062f.\n\u0631\u0627\u0628\u0637 \u0627\u0633\u06a9\u0646 \u0636\u062f\u0628\u062f\u0627\u0641\u0632\u0627\u0631 (AMSI) \u0631\u0627 \u062f\u0631 SharePoint \u0645\u0637\u0627\u0628\u0642 \u0628\u0627 \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644\u200c\u0647\u0627\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u062f \u0648 \u0622\u0646\u062a\u06cc\u200c\u0648\u06cc\u0631\u0648\u0633 Microsoft Defender \u0631\u0627 \u0631\u0648\u06cc \u062a\u0645\u0627\u0645 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc SharePoint \u0645\u0633\u062a\u0642\u0631 \u06a9\u0646\u06cc\u062f.\n\u0627\u06af\u0631 AMSI \u0641\u0639\u0627\u0644 \u0646\u06cc\u0633\u062a\u060c \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u0622\u0633\u06cc\u0628\u200c\u062f\u06cc\u062f\u0647 \u0631\u0627 \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0639\u0645\u0648\u0645 \u0647\u0633\u062a\u0646\u062f\u060c \u062c\u062f\u0627 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0631\u0627\u0647\u200c\u062d\u0644\u200c\u0647\u0627\u06cc \u0631\u0633\u0645\u06cc \u0628\u0631\u0627\u06cc \u06a9\u0627\u0647\u0634 \u062e\u0637\u0631\u0627\u062a \u0627\u0631\u0627\u0626\u0647 \u0634\u0648\u0646\u062f. \u067e\u0633 \u0627\u0632 \u0627\u0631\u0627\u0626\u0647 \u0631\u0627\u0647\u200c\u062d\u0644\u200c\u0647\u0627\u060c \u0622\u0646\u0647\u0627 \u0631\u0627 \u0637\u0628\u0642 \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644\u200c\u0647\u0627\u06cc IACS \u0648 \u0641\u0631\u0648\u0634\u0646\u062f\u0647 \u0627\u0639\u0645\u0627\u0644 \u06a9\u0646\u06cc\u062f.\n\u062f\u0631 \u0635\u0648\u0631\u062a \u0639\u062f\u0645 \u0648\u062c\u0648\u062f \u0631\u0627\u0647\u06a9\u0627\u0631\u0647\u0627\u06cc \u06a9\u0627\u0647\u0634 \u0627\u062b\u0631\u0627\u062a\u060c \u0627\u0632 \u062f\u0633\u062a\u0648\u0631\u0627\u0644\u0639\u0645\u0644\u200c\u0647\u0627\u06cc BOD 22-01 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633\u200c\u0647\u0627\u06cc \u0627\u0628\u0631\u06cc \u067e\u06cc\u0631\u0648\u06cc \u06a9\u0646\u06cc\u062f \u06cc\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0645\u062d\u0635\u0648\u0644 \u0631\u0627 \u0645\u062a\u0648\u0642\u0641 \u06a9\u0646\u06cc\u062f.\n\u0628\u0631\u0627\u06cc \u06a9\u0633\u0628 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062f\u0631 \u0645\u0648\u0631\u062f \u062a\u0634\u062e\u06cc\u0635\u060c \u067e\u06cc\u0634\u06af\u06cc\u0631\u06cc \u0648 \u0627\u0642\u062f\u0627\u0645\u0627\u062a \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 \u0634\u06a9\u0627\u0631 \u062a\u0647\u062f\u06cc\u062f\u060c \u0628\u0647 \u00ab \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0641\u0639\u0627\u0644 \u0627\u0632 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc SharePoint \u062f\u0631 \u0645\u062d\u0644\u00bb \u0648 \u062a\u0648\u0635\u06cc\u0647\u200c\u0646\u0627\u0645\u0647 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u0628\u0631\u0627\u06cc CVE-2025-49706 \u0645\u0631\u0627\u062c\u0639\u0647 \u06a9\u0646\u06cc\u062f. IACS \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0631\u0627 \u062a\u0634\u0648\u06cc\u0642 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u062a\u0645\u0627\u0645 \u0645\u0642\u0627\u0644\u0627\u062a \u0648 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a \u062f\u0631 8 \u0698\u0648\u0626\u06cc\u0647 2025\u060c \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u067e\u0644\u062a\u0641\u0631\u0645 SharePoint \u0645\u0633\u062a\u0642\u0631 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u062e\u0648\u062f \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f.\n\u0641\u0631\u0627\u062a\u0631 \u0627\u0632 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0646\u060c \u0628\u0631\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u200c\u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u0645\u0647\u0645 \u0627\u0633\u062a \u06a9\u0647 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627 \u0631\u0627 \u0628\u0631\u0627\u06cc \u06cc\u0627\u0641\u062a\u0646 \u0646\u0634\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u06cc\u0634\u062a\u0631 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u0646\u062f. \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc .dll \u0645\u0633\u062a\u0642\u0631 \u0645\u06cc\u200c\u0634\u0648\u0646\u062f\u060c \u0628\u0647 \u0648\u06cc\u0698\u0647 \u062f\u0634\u0648\u0627\u0631 \u0627\u0633\u062a \u0648 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0627\u0632 \u0622\u0646\u0647\u0627 \u0628\u0631\u0627\u06cc \u0628\u0647 \u062f\u0633\u062a \u0622\u0648\u0631\u062f\u0646 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f.\n\u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0645\u0627\u0634\u06cc\u0646 ASP.NET \u0631\u0627 \u0628\u0686\u0631\u062e\u0627\u0646\u06cc\u062f\u060c \u0633\u067e\u0633 \u067e\u0633 \u0627\u0632 \u0627\u0639\u0645\u0627\u0644 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u06cc\u06a9\u0631\u0648\u0633\u0627\u0641\u062a\u060c \u062f\u0648\u0628\u0627\u0631\u0647 \u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc \u0645\u0627\u0634\u06cc\u0646 ASP.NET \u0631\u0627 \u0628\u0686\u0631\u062e\u0627\u0646\u06cc\u062f \u0648 \u0648\u0628 \u0633\u0631\u0648\u0631 IIS \u0631\u0627 \u0645\u062c\u062f\u062f\u0627\u064b \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f .\n\u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0639\u0645\u0648\u0645\u06cc SharePoint Server \u06a9\u0647 \u0628\u0647 \u067e\u0627\u06cc\u0627\u0646 \u0639\u0645\u0631 (EOL) \u06cc\u0627 \u067e\u0627\u06cc\u0627\u0646 \u0633\u0631\u0648\u06cc\u0633 (EOS) \u062e\u0648\u062f \u0631\u0633\u06cc\u062f\u0647\u200c\u0627\u0646\u062f \u0631\u0627 \u0627\u0632 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062c\u062f\u0627 \u06a9\u0646\u06cc\u062f. \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u062b\u0627\u0644\u060c SharePoint Server 2013 \u0648 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u0628\u0644\u06cc \u0622\u0646 \u0628\u0647 \u067e\u0627\u06cc\u0627\u0646 \u0639\u0645\u0631 \u062e\u0648\u062f \u0631\u0633\u06cc\u062f\u0647\u200c\u0627\u0646\u062f \u0648 \u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0646\u0648\u0632 \u0628\u0627\u06cc\u062f \u0645\u062a\u0648\u0642\u0641 \u0634\u0648\u0646\u062f.\n\u062f\u0631\u062e\u0648\u0627\u0633\u062a\u200c\u0647\u0627\u06cc \u0645\u0634\u06a9\u0648\u06a9 \u0628\u0647 \u0635\u0641\u062d\u0647 \u062e\u0631\u0648\u062c \u0631\u0627 \u0632\u06cc\u0631 \u0646\u0638\u0631 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f: /_layouts/SignOut.aspx is the exact HTTP header used by threat actors to exploit ToolPane.aspx for initial access\n\n\u0627\u0633\u06a9\u0646 \u0622\u06cc\u200c\u067e\u06cc\u200c\u0647\u0627\u06cc \u200e107.191.58[.]76\u060c \u200e104.238.159[.]149\u060c \u0648 \u200e96.9.125[.]147\u200e \u0631\u0627\u060c \u0628\u0647\u200c\u0648\u06cc\u0698\u0647 \u0628\u06cc\u0646 \u06f1\u06f8 \u0648 \u06f1\u06f9 \u0698\u0648\u0626\u06cc\u0647 \u06f2\u06f0\u06f2\u06f5\u060c \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f.\n\u0633\u0644\u0628 \u0645\u0633\u0626\u0648\u0644\u06cc\u062a:\n\n\u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0645\u0648\u062c\u0648\u062f \u062f\u0631 \u0627\u06cc\u0646 \u06af\u0632\u0627\u0631\u0634 \u0635\u0631\u0641\u0627\u064b \u062c\u0647\u062a \u0627\u0637\u0644\u0627\u0639\u200c\u0631\u0633\u0627\u0646\u06cc \u0648 \u00ab\u0628\u0647 \u0647\u0645\u06cc\u0646 \u0635\u0648\u0631\u062a\u00bb \u0627\u0631\u0627\u0626\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. IACS \u0647\u06cc\u0686 \u0646\u0647\u0627\u062f \u062a\u062c\u0627\u0631\u06cc\u060c \u0645\u062d\u0635\u0648\u0644\u060c \u0634\u0631\u06a9\u062a \u06cc\u0627 \u062e\u062f\u0645\u0627\u062a\u06cc\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 \u0646\u0647\u0627\u062f\u0647\u0627\u060c \u0645\u062d\u0635\u0648\u0644\u0627\u062a \u06cc\u0627 \u062e\u062f\u0645\u0627\u062a\u06cc \u06a9\u0647 \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0646\u062f \u0628\u0647 \u0622\u0646\u0647\u0627 \u0644\u06cc\u0646\u06a9 \u062f\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f , \u062a\u0648\u0635\u06cc\u0647 \u06cc\u0627 \u062c\u0627\u0646\u0628\u062f\u0627\u0631\u06cc \u0646\u0645\u06cc\u06a9\u0646\u062f.\n\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n@pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "url": "https://t.me/ics_cert/1253"}, {"timestamp": "2025-07-25T08:50:21Z", "date_only": false, "value": "2025-07-25T08:50:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/tohmoh/f81a0feb83a461cef56a4b9994694562", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "96874a27-580e-4e0b-a832-2a4c3653c6b1", "url": "https://gist.github.com/tohmoh/f81a0feb83a461cef56a4b9994694562"}, {"timestamp": "2025-07-25T09:28:16Z", "date_only": false, "value": "2025-07-25T09:28:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Kaspersky4media/1592", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "155d0c70-3fbb-495c-aabd-2fd7070caf0a", "content": "\u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Microsoft SharePoint \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u044f\u0442\u0438\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Kaspersky GReAT (\u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 \u0432 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb) \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Microsoft SharePoint. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 ToolShell, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0435\u0433\u043e \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u043e \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0434\u043b\u044f CVE-2020-1147 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 SharePoint \u0435\u0449\u0451 \u043f\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 CVE-2025-53770, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f CVE-2020-1147, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0430 \u043d\u0435 \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 2020 \u0433\u043e\u0434\u0443. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043d\u043e\u0432\u043e\u0441\u0442\u0438.", "url": "https://t.me/Kaspersky4media/1592"}, {"timestamp": "2025-07-25T09:28:16Z", "date_only": false, "value": "2025-07-25T09:28:16.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Kaspersky4media/1592", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9a93a493-af29-4260-8f36-ac0932f4c4a8", "content": "\u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430, \u0447\u0442\u043e \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 Microsoft SharePoint \u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u044f\u0442\u0438\u043b\u0435\u0442\u043d\u0435\u0439 \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u0438\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b Kaspersky GReAT (\u0413\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0446\u0435\u043d\u0442\u0440\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0443\u0433\u0440\u043e\u0437 \u0432 \u00ab\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\u00bb) \u0438\u0437\u0443\u0447\u0438\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Microsoft SharePoint. \u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 ToolShell, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0435\u0433\u043e \u0441\u0445\u043e\u0434\u0441\u0442\u0432\u043e \u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c \u0434\u043b\u044f CVE-2020-1147 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 SharePoint \u0435\u0449\u0451 \u043f\u044f\u0442\u044c \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 CVE-2025-53770, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u043c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f CVE-2020-1147, \u043a\u043e\u0442\u043e\u0440\u0430\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0431\u044b\u043b\u0430 \u043d\u0435 \u0434\u043e \u043a\u043e\u043d\u0446\u0430 \u0437\u0430\u043a\u0440\u044b\u0442\u0430 \u0432 2020 \u0433\u043e\u0434\u0443. \u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u2014 \u0432 \u043d\u0430\u0448\u0435\u0439 \u043d\u043e\u0432\u043e\u0441\u0442\u0438.", "url": "https://t.me/Kaspersky4media/1592"}, {"timestamp": "2025-07-25T09:32:05.438Z", "date_only": false, "value": "2025-07-25T09:32:05.438025Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-82e7dfb4-f54c996b22554f32", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "86daab83-5342-40d3-b93c-b36efc621494", "url": "https://poliverso.org/objects/0477a01e-82e7dfb4-f54c996b22554f32"}, {"timestamp": "2025-07-25T10:02:22.911Z", "date_only": false, "value": "2025-07-25T10:02:22.911104Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lurs6o4rvdo2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c4e6721a-514e-4c7b-ac38-1e513bb6264d", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lurs6o4rvdo2"}, {"timestamp": "2025-07-25T10:28:26.186Z", "date_only": false, "value": "2025-07-25T10:28:26.186368Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lurtnftc3s2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7f6580e7-e349-4542-97a6-1f2735d8855b", "url": "https://bsky.app/profile/malwhere.bsky.social/post/3lurtnftc3s2r"}, {"timestamp": "2025-07-25T10:28:26.939Z", "date_only": false, "value": "2025-07-25T10:28:26.939023Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lurtnjjsni2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "eb4a2023-138f-4db6-8052-ada8d1bae59b", "url": "https://bsky.app/profile/potato.software/post/3lurtnjjsni2c"}, {"timestamp": "2025-07-25T10:28:51.205Z", "date_only": false, "value": "2025-07-25T10:28:51.205204Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/malwhere.bsky.social/post/3lurto6crf22r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ca694470-b847-4bce-b3ec-960cd2a63e9e", "url": "https://bsky.app/profile/malwhere.bsky.social/post/3lurto6crf22r"}, {"timestamp": "2025-07-25T11:15:13Z", "date_only": false, "value": "2025-07-25T11:15:13.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7267", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "682d2a1a-d7b1-4dc8-ab84-de675a22b44a", "content": "\ud83d\udc46\u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0442\u0447\u0435\u0442\u0430 \"\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\" \u043f\u043e\u0434\u0441\u0432\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438:\n\n 1\ufe0f\u20e3 \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 Microsoft \u0434\u043b\u044f CVE-2025-49704 \u0431\u044b\u043b \"\u0434\u0435\u0444\u0435\u043a\u0442\u043d\u044b\u043c\" \u043f\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u0443\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u0440\u0443\u0447\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \"SharePoint Products Configuration Wizard\". \n\nMicrosoft \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a\u0438, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 AddExcelDataSetToSafeControls \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0438\u043c\u0435\u043d Microsoft.SharePoint.Upgrade. \u042d\u0442\u043e\u0442 \u043a\u043b\u0430\u0441\u0441 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0444\u0430\u0439\u043b web.config \u0438 \u043f\u043e\u043c\u0435\u0447\u0430\u0435\u0442 \u044d\u043b\u0435\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.PerformancePoint.Scorecards.ExcelDataSet \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435, \u043a\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u043e \u043d\u0435 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0430\u043f\u0433\u0440\u0435\u0439\u0434 \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043a \u044d\u0442\u043e\u0439 CVE. \u041c\u043d\u043e\u0433\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432\u0448\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0434\u0430\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044f \u043e\u0431 \u044d\u0442\u043e\u043c.\n\n2\ufe0f\u20e3 \u041b\u041a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0430\u0442\u0447 CVE-2025-49706, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u0431\u0430\u0439\u0442 \u043a POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0443, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0435\u043c\u0443 \u0432 \u0440\u043e\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430. \u0412\u0441\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u2014 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u043c\u0432\u043e\u043b / \u0432 \u043a\u043e\u043d\u0435\u0446 \u043f\u0443\u0442\u0438 \u043a ToolPane.aspx.\n\n3\ufe0f\u20e3 \u0427\u0438\u0442\u0430\u0442\u0435\u043b\u0438, \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0435 \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f SharePoint, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49704/CVE-2025-53770 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438, \u043f\u043e\u0445\u043e\u0436\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u0443\u044e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-1147 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 .NET, SharePoint Server \u0438 Visual Studio. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435, \u0435\u0441\u043b\u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a CVE-2025-49704/CVE-2025-53770 \u0438 CVE-2020-1147, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c, \u0447\u0442\u043e \u043a\u043e\u0434 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u0435\u043d. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0440\u0430\u0437\u043d\u0438\u0446\u0430 \u2014 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435 \u0434\u043b\u044f CVE-2025-49704/CVE-2025-53770 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442 ExpandedWrapper \u043f\u043e\u043c\u0435\u0449\u0435\u043d \u0432 \u0441\u043f\u0438\u0441\u043e\u043a. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e CVE-2025-53770 \u2014 \u044d\u0442\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442 CVE-2020-1147, \u0430 \u043f\u0430\u0442\u0447 \u043a \u043d\u0435\u0439 \u2014 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2020 \u0433\u043e\u0434\u0430.\n\n4\ufe0f\u20e3 \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ToolShell \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b, \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0435\u0449\u0435 \u0434\u043e\u043b\u0433\u043e. \u041f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a ProxyLogon, PrintNightmare \u0438\u043b\u0438 EternalBlue. \u0425\u043e\u0442\u044f \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0422\u0430\u043a\u0430\u044f \u0436\u0435 \u0441\u0443\u0434\u044c\u0431\u0430 \u043f\u043e\u0441\u0442\u0438\u0433\u043d\u0435\u0442 \u0438 ToolShell, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u044b \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83d\udc46\u041f\u043e\u0434 \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u043f\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \ud83c\uddea\ud83c\uddec\u0415\u0433\u0438\u043f\u0442\u0435, \ud83c\uddef\ud83c\uddf4\u0418\u043e\u0440\u0434\u0430\u043d\u0438\u0438, \ud83c\uddf7\ud83c\uddfa\u0420\u043e\u0441\u0441\u0438\u0438, \ud83c\uddfb\ud83c\uddf3\u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435 \u0438 \ud83c\uddff\ud83c\uddf2\u0417\u0430\u043c\u0431\u0438\u0438, \u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0441\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0445\u043e\u0437\u044f\u0439\u0441\u0442\u0432\u043e, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043b\u0435\u0441\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e. \u0417\u0430\u043f\u0430\u0434\u043d\u044b\u0435 \u043e\u0442\u0447\u0435\u0442\u044b \u0438 \u0421\u041c\u0418 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u0443 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440 \ud83c\uddfa\ud83c\uddf8\u0421\u0428\u0410, \u043d\u043e \u0448\u0438\u0440\u043e\u043a\u0430\u044f \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.\n\n\ud83d\udc9a https://securelist.ru/toolshell-explained/113097 (\u0420\u0443\u0441\u0441\u043a\u0438\u0439)\n\ud83d\udc9a https://securelist.com/toolshell-explained/117045 (Eng)\n\n\u270b @Russian_OSINT", "url": "https://t.me/true_secator/7267"}, {"timestamp": "2025-07-25T12:19:26Z", "date_only": false, "value": "2025-07-25T12:19:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberSachok/2534", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4acde730-8cbe-40bb-985e-4eecf033649a", "content": "\u041d\u0430\u0445\u0430\u043b\u0442\u0443\u0440\u0438\u043b\u0438?\n\n\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u044f \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u0438\u0437\u0443\u0447\u0438\u043b\u0430 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0440\u0435\u0437\u043e\u043d\u0430\u043d\u0441\u043d\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b Microsoft SharePoint \u0438 \u0432\u044b\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 ToolShell \u043e\u0447\u0435\u043d\u044c \u0443\u0436 \u043f\u043e\u0445\u043e\u0436 \u043d\u0430 \u0441\u0442\u0430\u0440\u044b\u0439 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2020-1147, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u044c\u0442\u0435 \u0441\u0435\u0431\u0435, \u0435\u0449\u0435 5 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434 \u0438 \u0434\u0430\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0434\u043b\u044f \u043d\u0435\u0435 \u043f\u0430\u0442\u0447, \u043e\u0434\u043d\u0430\u043a\u043e, \u0435\u0441\u043b\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u0438\u0435 \u043d\u0435 \u043e\u0448\u0438\u0431\u043b\u0438\u0441\u044c, \u0442\u043e \u0432\u044b\u0432\u043e\u0434 \u043d\u0430\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0441\u0430\u043c \u2014 \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0438\u043b\u0438 \u0434\u044b\u0440\u0443 \u043d\u0435 \u0434\u043e \u043a\u043e\u043d\u0446\u0430. \n\n\u041d\u0435 \u043e\u0447\u0435\u043d\u044c-\u0442\u043e \u0443\u0434\u0438\u0432\u043b\u044f\u0435\u0442, \u043f\u043e\u0442\u043e\u043c\u0443 \u0447\u0442\u043e \u0432\u0441\u0435, \u0447\u0442\u043e \u0441\u0432\u044f\u0437\u0430\u043d\u043e \u0441 \u0418\u0411 \u0432 Microsoft \u0438 \u0438\u0445 \u043f\u0440\u0435\u0441\u043b\u043e\u0432\u0443\u0442\u044b\u043c\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0441 \u0432\u044b\u043a\u0430\u0442\u043a\u043e\u0439 \u043f\u0430\u0442\u0447\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0443\u0436\u0435 \u0441\u0442\u0430\u043b\u043e \u043f\u0440\u0438\u0442\u0447\u0435\u0439 \u0432\u043e \u044f\u0437\u044b\u0446\u0430\u0445 \u0434\u043b\u044f \u043c\u0438\u0440\u043e\u0432\u043e\u0433\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u0441\u0442\u0432\u0430. \n\n\u0418\u0441\u0442\u043e\u0440\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u043f\u043e\u0441\u043b\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0432\u0441\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u043b\u043e \u0445\u0443\u0436\u0435, \u0447\u0435\u043c \u0431\u044b\u043b\u043e \u0434\u043e \u043d\u0435\u0433\u043e, \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u044b, \u0430 \u0434\u044b\u0440\u044f\u0432\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 Microsoft \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0447\u0442\u043e-\u0442\u043e \u043e\u0431\u044b\u0434\u0435\u043d\u043d\u043e\u0435. \n\n\u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Microsoft, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0435 CVE-2025-53770 \u2014 \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043b\u044f 5-\u043b\u0435\u0442\u043d\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u044b\u043b\u0430, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0437\u0430\u043b\u0430\u0442\u0430\u043d\u0430 \u0447\u0430\u0441\u0442\u0438\u0447\u043d\u043e. \n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435 \u0432 \u043e\u0442\u0447\u0435\u0442\u0435.  \n\n@cybersachok", "url": "https://t.me/CyberSachok/2534"}, {"timestamp": "2025-07-25T13:45:14Z", "date_only": false, "value": "2025-07-25T13:45:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45332", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "236382c1-f05d-47c6-a4c5-aa3054ee779d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aHoneypot for CVE-2025-53770 aka ToolShell\nURL\uff1ahttps://github.com/a-hydrae/ToolShell-Honeypot\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45332"}, {"timestamp": "2025-07-25T14:20:05.348Z", "date_only": false, "value": "2025-07-25T14:20:05.348967Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lusalpc5br2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dac815aa-d56b-45f8-93be-4e1a1e0cca6d", "url": "https://bsky.app/profile/buzzleaktv.bsky.social/post/3lusalpc5br2e"}, {"timestamp": "2025-07-25T14:28:34.179Z", "date_only": false, "value": "2025-07-25T14:28:34.179359Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/wallarm.bsky.social/post/3lusb2qfkxs2w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fe1577fe-2500-47da-8ced-60501120ddf4", "url": "https://bsky.app/profile/wallarm.bsky.social/post/3lusb2qfkxs2w"}, {"timestamp": "2025-07-25T15:13:54Z", "date_only": false, "value": "2025-07-25T15:13:54.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/in4security/747", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3a81f70e-afc8-4037-aaab-e050dabc421a", "content": "\u041f\u044f\u0442\u043d\u0438\u0447\u043d\u044b\u0439 \u0434\u0430\u0439\u0434\u0436\u0435\u0441\u0442 \u0441\u0430\u043c\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0445 \u043d\u043e\u0432\u043e\u0441\u0442\u0435\u0439 \u0432 \u043c\u0438\u0440\u0435 \u0418\u0411 \u0433\u043e\u0442\u043e\u0432. \u0411\u0443\u0434\u044c\u0442\u0435 \u0432 \u043a\u0443\u0440\u0441\u0435!\n\n\u26ab\ufe0f\u041c\u0438\u043d\u0446\u0438\u0444\u0440\u044b \u0441\u043e\u0437\u0434\u0430\u0441\u0442 \u043f\u0435\u0440\u0435\u0447\u0435\u043d\u044c \u0437\u043d\u0430\u0447\u0438\u043c\u044b\u0445 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0440\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u041f\u041e. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f  \n\n\u26ab\ufe0f\u0410\u0442\u0430\u043a\u0438 \u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439 \u043d\u0430 \u0440\u0438\u0442\u0435\u0439\u043b \u0432\u044b\u0440\u043e\u0441\u043b\u0438 \u043d\u0430 58% \u0437\u0430 \u043a\u0432\u0430\u0440\u0442\u0430\u043b. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f57% \u0440\u043e\u0441\u0441\u0438\u044f\u043d \u0433\u043e\u0442\u043e\u0432\u044b \u0441\u043e\u043e\u0431\u0449\u0438\u0442\u044c \u043e \u043a\u043e\u043b\u043b\u0435\u0433\u0435, \u0441\u043b\u0438\u0432\u0448\u0435\u043c \u0434\u0430\u043d\u043d\u044b\u0435. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f\u0412 Windows 10 \u0438 11 \u043d\u0430\u0448\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 VPN-\u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f\u041c\u043e\u0448\u0435\u043d\u043d\u0438\u043a\u0438 \u0432\u0441\u0451 \u0447\u0430\u0449\u0435 \u0430\u0442\u0430\u043a\u0443\u044e\u0442 \u043f\u043e\u0434\u0440\u043e\u0441\u0442\u043a\u043e\u0432 \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 \u0433\u043e\u0441\u0441\u043b\u0443\u0436\u0431. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0fPoisonSeed \u043e\u0431\u0445\u043e\u0434\u0438\u0442 FIDO2, \u043f\u043e\u0434\u0441\u043e\u0432\u044b\u0432\u0430\u044f \u0436\u0435\u0440\u0442\u0432\u0430\u043c \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0435 QR-\u043a\u043e\u0434\u044b. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b \u043f\u0440\u044f\u0447\u0443\u0442 \u0432\u0438\u0440\u0443\u0441\u044b \u0432 \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445 \u043d\u0430 GitHub. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0437 \u041a\u0438\u0442\u0430\u044f \u0432\u0437\u043b\u043e\u043c\u0430\u043b\u0438 \u044f\u0434\u0435\u0440\u043d\u043e\u0435 \u0430\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u0421\u0428\u0410 \u0447\u0435\u0440\u0435\u0437 SharePoint. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-53770 \u0432 SharePoint \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0432\u0437\u043b\u043e\u043c \u0431\u0435\u0437 \u0432\u0445\u043e\u0434\u0430. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0fClorox \u0442\u0440\u0435\u0431\u0443\u0435\u0442 $429 \u043c\u043b\u043d \u0437\u0430 \u0432\u0437\u043b\u043e\u043c \u0438\u0437-\u0437\u0430 \u043e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0434\u0440\u044f\u0434\u0447\u0438\u043a\u0430.\n\u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f\u0413\u0440\u0443\u043f\u043f\u0430 Mimo \u043c\u0430\u0441\u043a\u0438\u0440\u0443\u0435\u0442 \u043c\u0430\u0439\u043d\u0435\u0440\u044b \u0438 \u043f\u0440\u043e\u043a\u0441\u0438 \u0432 Docker \u0438 Magento. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n\u26ab\ufe0f\u0423\u0442\u0435\u0447\u043a\u0430 \u0432 \u041c\u0438\u043d\u043e\u0431\u043e\u0440\u043e\u043d\u044b \u0411\u0440\u0438\u0442\u0430\u043d\u0438\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0430 \u0434\u0430\u043d\u043d\u044b\u0435 \u0430\u0433\u0435\u043d\u0442\u043e\u0432 \u0438 \u0441\u043f\u0435\u0446\u043d\u0430\u0437\u0430. \u0427\u0438\u0442\u0430\u0442\u044c \u26a1\ufe0f\n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438@in4security", "url": "https://t.me/in4security/747"}, {"timestamp": "2025-07-25T15:40:01.088Z", "date_only": false, "value": "2025-07-25T15:40:01.088835Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lusezvii7gr2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b4db4fcc-d984-4f35-88c0-fbfa88294996", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lusezvii7gr2"}, {"timestamp": "2025-07-25T15:40:01.920Z", "date_only": false, "value": "2025-07-25T15:40:01.920167Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3lusf2o4cmm2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a63cd0ac-bcfd-4e81-af7a-9c1990f93a61", "url": "https://bsky.app/profile/potato.software/post/3lusf2o4cmm2m"}, {"timestamp": "2025-07-25T16:23:31.136Z", "date_only": false, "value": "2025-07-25T16:23:31.136491Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3lushidmn222i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f0356e67-f8e0-4fb6-9c53-c3dd58ecc56b", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3lushidmn222i"}, {"timestamp": "2025-07-25T17:48:22.881Z", "date_only": false, "value": "2025-07-25T17:48:22.881672Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lusma6c4l42k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e65e626b-6a2a-41b4-a403-8c5b86fc4b83", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lusma6c4l42k"}, {"timestamp": "2025-07-25T20:34:17Z", "date_only": false, "value": "2025-07-25T20:34:17.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45366", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dd4f0b5a-6784-4b55-8252-79513d928a67", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aScans Windows IIS logs for signs of CVE-2025-53770 & CVE-2025-53771\nURL\uff1ahttps://github.com/zach115th/ToolShellFinder\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45366"}, {"timestamp": "2025-07-25T21:57:07Z", "date_only": false, "value": "2025-07-25T21:57:07.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/linuxtnt/4417", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "297578ba-0ccc-44b0-9472-78f06f62e792", "content": "\u0647\u0634\u062f\u0627\u0631 \u062e\u06cc\u0644\u06cc \u0641\u0648\u0631\u06cc  \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f SharePoint\n\n\u0628\u0647 \u0646\u0642\u0644 \u0627\u0632 \u0637\u0627\u0647\u0627 \u062a\u0648\u06a9\u0644\u06cc:\n \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062c\u062f\u06cc\u062f SharePoint \u0628\u0627 \u06a9\u062f CVE-2025-53770 \u062f\u0627\u0631\u0647 \u0628\u0647\u200c\u0634\u062f\u062a \u062a\u0648\u0633\u0637 \u06af\u0631\u0648\u0647\u200c\u0647\u0627\u06cc APT \u0686\u06cc\u0646\u06cc \u0645\u0648\u0631\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u06af\u06cc\u0631\u0647.\n \u062f\u06cc\u0634\u0628 \u06cc\u0647 \u0628\u0631\u0631\u0633\u06cc \u0631\u0648\u06cc \u0645\u0648\u062a\u0648\u0631\u0647\u0627\u06cc \u062c\u0633\u062a\u200c\u0648\u062c\u0648 \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f\u0645 \u0648 \u0645\u062a\u0627\u0633\u0641\u0627\u0646\u0647 \u0627\u06cc\u0631\u0627\u0646 \u062c\u0632\u0648 \u0635\u062f\u0631\u0646\u0634\u06cc\u0646\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0633\u0631\u0648\u06cc\u0633\u0647\n\u0627\u06af\u0647 \u0627\u0644\u0627\u0646 \u0627\u0642\u062f\u0627\u0645 \u0646\u06a9\u0646\u06cc\u0645\u060c \u0628\u0627\u06cc\u062f \u0645\u0646\u062a\u0638\u0631 \u0645\u0648\u062c \u062c\u062f\u06cc\u062f\u06cc \u0627\u0632 \u0646\u0634\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u060c \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u0648 \u0646\u0641\u0648\u0630 \u0628\u0647 \u0633\u0631\u0648\u0631\u0647\u0627 \u0628\u0627\u0634\u06cc\u0645.\n\n \u0644\u0637\u0641\u0627\u064b \u0647\u0645\u06cc\u0646 \u0627\u0645\u0631\u0648\u0632:\n\u0647\u0645\u0647 \u0633\u0631\u0648\u0631\u0647\u0627\u06cc SharePoint \u0631\u0648 \u0686\u06a9 \u06a9\u0646\u06cc\u062f\n\u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0631\u0648 \u0641\u0648\u0631\u0627\u064b \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f\n\u0627\u0632 \u0644\u062d\u0627\u0638 \u0622\u0644\u0648\u062f\u06af\u06cc \u0647\u0627\u0646\u062a\u06cc\u0646\u06af \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0645\u0631\u0628\u0648\u0637\u0647 \u0627\u0646\u062c\u0627\u0645 \u0628\u062f\u06cc\u062f.", "url": "https://t.me/linuxtnt/4417"}, {"timestamp": "2025-07-25T23:21:22.810Z", "date_only": false, "value": "2025-07-25T23:21:22.810565Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lut6tmsvlx26", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "d4039d93-493a-4771-a70a-25ad071a3b40", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lut6tmsvlx26"}, {"timestamp": "2025-07-26T00:55:10.759Z", "date_only": false, "value": "2025-07-26T00:55:10.759385Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/stux.mstdn.social.ap.brid.gy/post/3lute2yifwjz2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0688b44d-3aee-47ad-8302-7fc73615de5a", "url": "https://bsky.app/profile/stux.mstdn.social.ap.brid.gy/post/3lute2yifwjz2"}, {"timestamp": "2025-07-26T02:23:51.528Z", "date_only": false, "value": "2025-07-26T02:23:51.528067Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lutizwkvtc2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "74879de0-912d-40c3-9490-4713c5d2a3b9", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lutizwkvtc2j"}, {"timestamp": "2025-07-26T03:00:05Z", "date_only": false, "value": "2025-07-26T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/vafqcufGXbAia4TcbW912zaOrLHP_QqWcL1A9mVr4kulmIQ", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d71f51ea-71ff-487b-87d7-cc891c02fc92"}, {"timestamp": "2025-07-26T07:00:22Z", "date_only": false, "value": "2025-07-26T07:00:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Russian_OSINT/5884", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ad06b2ec-ffb6-4731-a217-27caaeca0186", "content": "\ud83d\udc46\u0410\u043d\u0430\u043b\u0438\u0437 \u043e\u0442\u0447\u0435\u0442\u0430 \"\u041b\u0430\u0431\u043e\u0440\u0430\u0442\u043e\u0440\u0438\u0438 \u041a\u0430\u0441\u043f\u0435\u0440\u0441\u043a\u043e\u0433\u043e\" \u043f\u043e\u0434\u0441\u0432\u0435\u0447\u0438\u0432\u0430\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u0434\u0435\u0442\u0430\u043b\u0438:\n\n 1\ufe0f\u20e3 \u041f\u0435\u0440\u0432\u044b\u0439 \u043f\u0430\u0442\u0447 Microsoft \u0434\u043b\u044f CVE-2025-49704 \u0431\u044b\u043b \"\u0434\u0435\u0444\u0435\u043a\u0442\u043d\u044b\u043c\" \u043f\u043e \u0441\u0432\u043e\u0435\u0439 \u0441\u0443\u0442\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b \u0440\u0443\u0447\u043d\u043e\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \"SharePoint Products Configuration Wizard\". \n\nMicrosoft \u043d\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0430 \u043f\u044b\u0442\u0430\u0435\u0442\u0441\u044f \u0441\u043d\u0438\u0437\u0438\u0442\u044c \u0440\u0438\u0441\u043a\u0438, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043d\u043e\u0432\u044b\u0439 \u043a\u043b\u0430\u0441\u0441 AddExcelDataSetToSafeControls \u0432 \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u043e \u0438\u043c\u0435\u043d Microsoft.SharePoint.Upgrade. \u042d\u0442\u043e\u0442 \u043a\u043b\u0430\u0441\u0441 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043d\u043e\u0432\u044b\u0439 \u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u0444\u0430\u0439\u043b web.config \u0438 \u043f\u043e\u043c\u0435\u0447\u0430\u0435\u0442 \u044d\u043b\u0435\u043c\u0435\u043d\u0442 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f Microsoft.PerformancePoint.Scorecards.ExcelDataSet \u043a\u0430\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0432\u0441\u0435, \u043a\u0442\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435, \u043d\u043e \u043d\u0435 \u0437\u0430\u043f\u0443\u0441\u0442\u0438\u043b \u0430\u043f\u0433\u0440\u0435\u0439\u0434 \u0432\u0440\u0443\u0447\u043d\u0443\u044e, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u043a \u044d\u0442\u043e\u0439 CVE. \u041c\u043d\u043e\u0433\u0438\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0432\u0448\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435, \u043e\u0441\u0442\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438, \u0434\u0430\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u043e\u0437\u0440\u0435\u0432\u0430\u044f \u043e\u0431 \u044d\u0442\u043e\u043c.\n\n2\ufe0f\u20e3 \u041b\u041a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0430\u0442\u0447 CVE-2025-49706, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u0438\u043d \u0431\u0430\u0439\u0442 \u043a POST-\u0437\u0430\u043f\u0440\u043e\u0441\u0443, \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u044e\u0449\u0435\u043c\u0443 \u0432 \u0440\u043e\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430. \u0412\u0441\u0435, \u0447\u0442\u043e \u043f\u043e\u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043b\u043e\u0441\u044c \u2014 \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u043c\u0432\u043e\u043b / \u0432 \u043a\u043e\u043d\u0435\u0446 \u043f\u0443\u0442\u0438 \u043a ToolPane.aspx.\n\n3\ufe0f\u20e3 \u0427\u0438\u0442\u0430\u0442\u0435\u043b\u0438, \u0437\u043d\u0430\u043a\u043e\u043c\u044b\u0435 \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430\u043c\u0438 \u0434\u043b\u044f SharePoint, \u043c\u043e\u0433\u0443\u0442 \u0437\u0430\u043c\u0435\u0442\u0438\u0442\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-49704/CVE-2025-53770 \u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438, \u043f\u043e\u0445\u043e\u0436\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u0443\u044e RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2020-1147 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 .NET, SharePoint Server \u0438 Visual Studio. \u041d\u0430 \u0441\u0430\u043c\u043e\u043c \u0434\u0435\u043b\u0435, \u0435\u0441\u043b\u0438 \u0441\u0440\u0430\u0432\u043d\u0438\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a CVE-2025-49704/CVE-2025-53770 \u0438 CVE-2020-1147, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u0443\u0432\u0438\u0434\u0435\u0442\u044c, \u0447\u0442\u043e \u043a\u043e\u0434 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0438\u0434\u0435\u043d\u0442\u0438\u0447\u0435\u043d. \u0415\u0434\u0438\u043d\u0441\u0442\u0432\u0435\u043d\u043d\u0430\u044f \u0440\u0430\u0437\u043d\u0438\u0446\u0430 \u2014 \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0432 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0435 \u0434\u043b\u044f CVE-2025-49704/CVE-2025-53770 \u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442 ExpandedWrapper \u043f\u043e\u043c\u0435\u0449\u0435\u043d \u0432 \u0441\u043f\u0438\u0441\u043e\u043a. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u0430\u0437\u0430\u0442\u044c, \u0447\u0442\u043e CVE-2025-53770 \u2014 \u044d\u0442\u043e \u0432\u0430\u0440\u0438\u0430\u043d\u0442 CVE-2020-1147, \u0430 \u043f\u0430\u0442\u0447 \u043a \u043d\u0435\u0439 \u2014 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0439 \u043f\u0430\u0442\u0447 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 2020 \u0433\u043e\u0434\u0430.\n\n4\ufe0f\u20e3 \u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e \u0447\u0442\u043e \u043f\u0430\u0442\u0447\u0438 \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c ToolShell \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b, \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u043c\u0438 \u0435\u0449\u0435 \u0434\u043e\u043b\u0433\u043e. \u041f\u043e\u0434\u043e\u0431\u043d\u0430\u044f \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0430\u0441\u044c \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u043f\u0435\u0447\u0430\u043b\u044c\u043d\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438, \u0442\u0430\u043a\u0438\u043c\u0438 \u043a\u0430\u043a ProxyLogon, PrintNightmare \u0438\u043b\u0438 EternalBlue. \u0425\u043e\u0442\u044f \u0438\u0445 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434, \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0434\u043e \u0441\u0438\u0445 \u043f\u043e\u0440 \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u044e\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0438\u0445 \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043d\u0435\u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b. \u0422\u0430\u043a\u0430\u044f \u0436\u0435 \u0441\u0443\u0434\u044c\u0431\u0430 \u043f\u043e\u0441\u0442\u0438\u0433\u043d\u0435\u0442 \u0438 ToolShell, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043a\u0440\u0430\u0439\u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u044b \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\ud83d\udc46\u041f\u043e\u0434 \u0430\u0442\u0430\u043a\u0443 \u043f\u043e\u043f\u0430\u043b\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u044b \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \ud83c\uddea\ud83c\uddec\u0415\u0433\u0438\u043f\u0442\u0435, \ud83c\uddef\ud83c\uddf4\u0418\u043e\u0440\u0434\u0430\u043d\u0438\u0438, \ud83c\uddf7\ud83c\uddfa\u0420\u043e\u0441\u0441\u0438\u0438, \ud83c\uddfb\ud83c\uddf3\u0412\u044c\u0435\u0442\u043d\u0430\u043c\u0435 \u0438 \ud83c\uddff\ud83c\uddf2\u0417\u0430\u043c\u0431\u0438\u0438, \u0430 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043e\u0442\u043d\u043e\u0441\u0438\u043b\u0438\u0441\u044c \u043a \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u043c \u043e\u0442\u0440\u0430\u0441\u043b\u044f\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0435 \u0443\u0447\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044f, \u0441\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u0445\u043e\u0437\u044f\u0439\u0441\u0442\u0432\u043e, \u043f\u0440\u043e\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u043e\u0441\u0442\u044c \u0438 \u043b\u0435\u0441\u043e\u0432\u043e\u0434\u0441\u0442\u0432\u043e. \u0417\u0430\u043f\u0430\u0434\u043d\u044b\u0435 \u043e\u0442\u0447\u0435\u0442\u044b \u0438 \u0421\u041c\u0418 \u0441\u043e\u0437\u0434\u0430\u044e\u0442 \u043a\u0430\u0440\u0442\u0438\u043d\u0443 \u0446\u0435\u043b\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0433\u043e\u0441\u0441\u0435\u043a\u0442\u043e\u0440 \ud83c\uddfa\ud83c\uddf8\u0421\u0428\u0410, \u043d\u043e \u0448\u0438\u0440\u043e\u043a\u0430\u044f \u0433\u0435\u043e\u0433\u0440\u0430\u0444\u0438\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u043d\u0430 \u043c\u0430\u0441\u0441\u043e\u0432\u0443\u044e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443.\n\n\ud83d\udc9a https://securelist.ru/toolshell-explained/113097 (\u0420\u0443\u0441\u0441\u043a\u0438\u0439)\n\ud83d\udc9a https://securelist.com/toolshell-explained/117045 (Eng)\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/5884"}, {"timestamp": "2025-07-26T07:00:31Z", "date_only": false, "value": "2025-07-26T07:00:31.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Russian_OSINT/5883", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a4ba76cd-c934-4d4c-bb3f-b948dfffe470", "content": "\ud83c\udde8\ud83c\uddf3\ud83d\udc7a\ud83c\uddfa\ud83c\uddf8 SharePoint: \u043e\u0442 Pwn2Own \u0434\u043e \u0433\u043b\u043e\u0431\u0430\u043b\u044c\u043d\u043e\u0439 ransomware-\u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438\n\n\u041d\u0430 \u044d\u0442\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 \u0443\u0436\u0435 \u0432\u0441\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043e\u0431\u0441\u0443\u0434\u0438\u0442\u044c SharePoint. \u0418\u0441\u0442\u043e\u0440\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u0443\u0445\u043e\u0434\u0438\u0442 \u0441\u0432\u043e\u0438\u043c\u0438 \u043a\u043e\u0440\u043d\u044f\u043c\u0438 \u0432 \u043c\u0430\u0439 2025 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 \ud83d\udcbbPwn2Own \u0431\u044b\u043b\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0441\u0432\u044f\u0437\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \"ToolShell\", \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043e\u0441\u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0431\u044b\u043b\u0438 \u043f\u043e\u0437\u0436\u0435 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Code White GmbH.\n\n\u0414\u0432\u0435 \u043a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: \n\ud83d\udea0CVE-2025-49706 \u2014 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0443\u044e \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e. \u041d\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043d\u0438\u0432\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0437\u0430\u0449\u0438\u0442\u0443 MFA.\n\ud83d\udea0 CVE-2025-49704 \u2014 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0431\u0435\u0437 \u043a\u0430\u043a\u0438\u0445-\u043b\u0438\u0431\u043e \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041f\u043e \u043c\u043d\u0435\u043d\u0438\u044e \u0437\u0430\u043f\u0430\u0434\u043d\u044b\u0445 \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u0432\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u044d\u0442\u0438\u043c\u0438 \u0437\u043d\u0430\u043d\u0438\u044f\u043c\u0438, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u0442\u0443 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u044b \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\ud83e\udd77\u2757\ufe0f\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0441\u043e\u0435\u0434\u0438\u043d\u0438\u043b\u0438 \u0434\u0432\u0430 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0432 \u0435\u0434\u0438\u043d\u0443\u044e \u0430\u0442\u0430\u043a\u0443: \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043e\u0431\u0445\u043e\u0434\u0438\u043b\u0438 \u0437\u0430\u0449\u0438\u0442\u0443, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u043b\u0438 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u043b\u0438 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.  \n\n\ud83d\ude37 \u041a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043f\u0435\u0440\u0435\u043b\u043e\u043c\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u043d\u0430\u0441\u0442\u0443\u043f\u0438\u043b 17 \u0438\u044e\u043b\u044f, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043e, \u0447\u0442\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e HTTP-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430 Referer \u0441 \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0442\u0440\u0435\u0445 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 (\u201c/_layouts/SignOut.aspx\u201d, \u201c/_layouts/14/SignOut.aspx\u201d, \u0438\u043b\u0438 \u201c/_layouts/15/SignOut.aspx\u201d) \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0439 zero-day.\n\n\u2757\ufe0f \u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0443 Microsoft, \u0432 \u044d\u0442\u043e\u0439 \u0438\u0441\u0442\u043e\u0440\u0438\u0438 \u0437\u0430\u043c\u0435\u0448\u0430\u043d\u044b \ud83e\udd1e\u043a\u0438\u0442\u0430\u0439\u0441\u043a\u0438\u0435 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 Linen Typhoon, Violet Typhoon \u0438 Storm-2603, \u043a\u043e\u0442\u043e\u0440\u044b\u0435, \u043a\u0430\u043a \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f, \u043d\u0430\u0447\u0430\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0435\u0449\u0435 7 \u0438\u044e\u043b\u044f, \u0433\u043e\u0442\u043e\u0432\u044f \u043f\u043e\u0447\u0432\u0443 \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0445 \u0430\u0442\u0430\u043a.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u0432\u043e\u043b\u043d\u0430 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430\u0447\u0430\u043b\u0430\u0441\u044c 18 \u0438\u044e\u043b\u044f, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0441\u0442\u0430\u043b\u0438 \u043c\u0430\u0441\u0441\u043e\u0432\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0432\u044f\u0437\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043f\u043e\u0437\u0436\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0443\u044e \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b CVE-2025-53770 \u0438 CVE-2025-53771. \n\n\ud83c\udf83 POST \u0437\u0430\u043f\u0440\u043e\u0441 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443 /_layouts/15/ToolPane.aspx \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b \u0437\u0430\u0433\u0440\u0443\u0437\u0438\u0442\u044c \u0432\u0435\u0431-\u0448\u0435\u043b\u043b spinstall0.aspx. \u0415\u0433\u043e \u0446\u0435\u043b\u044c\u044e \u0431\u044b\u043b\u043e \u043d\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434, \u0430 \u0445\u0438\u0449\u0435\u043d\u0438\u0435 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 ASP.NET MachineKey. \u0417\u0430\u0432\u043b\u0430\u0434\u0435\u0432 \u044d\u0442\u0438\u043c\u0438 \u043a\u043b\u044e\u0447\u0430\u043c\u0438, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \"\u043c\u0430\u0441\u0442\u0435\u0440-\u043a\u043b\u044e\u0447\", \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 ysoserial \u0441\u0430\u043c\u043e\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 __VIEWSTATE \u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u0435 \u043f\u0435\u0440\u043c\u0430\u043d\u0435\u043d\u0442\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0435\u0440\u0435\u0436\u0438\u0432\u0435\u0442 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u043f\u0430\u0442\u0447\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u041d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0442\u043e\u0433\u043e \u0436\u0435 18 \u0438\u044e\u043b\u044f, \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 Storm-2603 \u043f\u0435\u0440\u0435\u0448\u043b\u0430 \u043e\u0442 \u0448\u043f\u0438\u043e\u043d\u0430\u0436\u0430 \u043a \u043f\u0440\u044f\u043c\u043e\u0439 \u043c\u043e\u043d\u0435\u0442\u0438\u0437\u0430\u0446\u0438\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u0434\u043b\u044f \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438 Warlock \u0438 LockBit. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0434\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u041e\u0431\u044a\u0435\u043a\u0442\u044b \u0433\u0440\u0443\u043f\u043f\u043e\u0432\u043e\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0438 (GPO) \u0432 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0434\u043b\u044f \u043c\u0430\u0441\u0441\u043e\u0432\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043b\u044c\u0449\u0438\u043a\u043e\u0432, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u043b\u043e \u043a \u043f\u0430\u0440\u0430\u043b\u0438\u0447\u0443 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0438 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u043c \u043f\u043e\u0442\u0435\u0440\u044f\u043c \u0443 \u0436\u0435\u0440\u0442\u0432. \n\n\ud83d\udee1 \u0412\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0435 Microsoft 22 \u0438\u044e\u043b\u044f \u0444\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 \u0431\u044b\u043b\u0438 \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u044b \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044e. \u041e\u0434\u043d\u0430\u043a\u043e \u0434\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f\u043c \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0438\u0445 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c, \u043d\u043e \u0438 \u0432 \u043e\u0431\u044f\u0437\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0441\u0442\u0438 \u0440\u043e\u0442\u0430\u0446\u0438\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 MachineKeys \u0438 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u0442\u0438\u0442\u044c \u0441\u043b\u0443\u0436\u0431\u044b IIS, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u043c\u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438.\n\n\u041a 24 \u0438\u044e\u043b\u044f \u0447\u0438\u0441\u043b\u043e \u043f\u043e\u0441\u0442\u0440\u0430\u0434\u0430\u0432\u0448\u0438\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u043f\u0440\u0435\u0432\u044b\u0441\u0438\u043b\u043e 400, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0442\u0430\u043a\u0438\u0435 \u0432\u0435\u0434\u043e\u043c\u0441\u0442\u0432\u0430 \u0421\u0428\u0410, \u043a\u0430\u043a \u041c\u0438\u043d\u0438\u0441\u0442\u0435\u0440\u0441\u0442\u0432\u0430 \u044d\u043d\u0435\u0440\u0433\u0435\u0442\u0438\u043a\u0438 \u0438 \u0437\u0434\u0440\u0430\u0432\u043e\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u0430 \u0442\u0430\u043a\u0436\u0435 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0433\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430, \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0433\u043e \u0447\u0430\u0441\u0442\u044c\u044e \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0441\u0435\u0442\u0435\u0439 \u0448\u0442\u0430\u0442\u0430. \n\n\ud83c\udf0e Shadowserver \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u043b, \u0447\u0442\u043e \u043a \u0441\u0435\u0440\u0435\u0434\u0438\u043d\u0435 \u043d\u0435\u0434\u0435\u043b\u0438 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442\u0435 \u043e\u0441\u0442\u0430\u0432\u0430\u043b\u043e\u0441\u044c \u043e\u043a\u043e\u043b\u043e 11 000 \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 SharePoint \u0431\u0435\u0437 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0430\u0442\u0447\u0435\u0439.\n\n\u270b @Russian_OSINT", "url": "https://t.me/Russian_OSINT/5883"}, {"timestamp": "2025-07-26T08:29:42.923Z", "date_only": false, "value": "2025-07-26T08:29:42.923105Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-2dda26be-09228bf42301efd5", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ea9a5a06-f630-441a-b47c-6361a4ff56af", "url": "https://poliverso.org/objects/0477a01e-2dda26be-09228bf42301efd5"}, {"timestamp": "2025-07-26T09:17:02Z", "date_only": false, "value": "2025-07-26T09:17:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/819504", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d7993b46-e407-435c-94ee-5f564d65b6d1", "content": "{\n  \"Source\": \"https://htdark.com/index.php\",\n  \"Content\": \"PoC Microsoft SharePoint CVE-2025-53770\", \n  \"author\": \" (dEEpEst)\",\n  \"Detection Date\": \"26 Jul 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "url": "https://t.me/breachdetector/819504"}, {"timestamp": "2025-07-26T10:19:53.575Z", "date_only": false, "value": "2025-07-26T10:19:53.575816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3luudn4phj223", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "72e4e103-6282-4c34-b65d-26edc7beac0e", "url": "https://bsky.app/profile/undercode.bsky.social/post/3luudn4phj223"}, {"timestamp": "2025-07-26T10:41:15.577Z", "date_only": false, "value": "2025-07-26T10:41:15.577461Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/m365.show/post/3luuetdseeo2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "813e9c24-cac0-4e96-9197-52de5a0c5e1a", "url": "https://bsky.app/profile/m365.show/post/3luuetdseeo2j"}, {"timestamp": "2025-07-26T11:09:14Z", "date_only": false, "value": "2025-07-26T11:09:14.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45440", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7e914a2f-55aa-459e-908a-f71e592a56c7", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aSharepoint ToolPane - CVE-2025-53770 & CVE-2025-53771\nURL\uff1ahttps://github.com/unk9vvn/sharepoint-toolpane\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45440"}, {"timestamp": "2025-07-26T12:16:46.226Z", "date_only": false, "value": "2025-07-26T12:16:46.226373Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newsnexttech.bsky.social/post/3luuk657hb32i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "62c34819-87e1-4d0d-9a41-e3efec05d8b6", "url": "https://bsky.app/profile/newsnexttech.bsky.social/post/3luuk657hb32i"}, {"timestamp": "2025-07-26T12:17:14.716Z", "date_only": false, "value": "2025-07-26T12:17:14.716703Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/monikawalker.bsky.social/post/3luuk6ylfep24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "19c24be7-e07f-46ca-b2b5-81fa0477578e", "url": "https://bsky.app/profile/monikawalker.bsky.social/post/3luuk6ylfep24"}, {"timestamp": "2025-07-26T12:21:05.032Z", "date_only": false, "value": "2025-07-26T12:21:05.032126Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nextbusiness24.bsky.social/post/3luukfub33i2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "74b2c945-f8ae-45a6-ba92-19ad7009505c", "url": "https://bsky.app/profile/nextbusiness24.bsky.social/post/3luukfub33i2i"}, {"timestamp": "2025-07-26T12:21:16.811Z", "date_only": false, "value": "2025-07-26T12:21:16.811364Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/monikawalker.bsky.social/post/3luukg7jpaw2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "afca8e04-2f1c-41a8-821c-ed7b5e8e96a7", "url": "https://bsky.app/profile/monikawalker.bsky.social/post/3luukg7jpaw2r"}, {"timestamp": "2025-07-26T12:32:07.199Z", "date_only": false, "value": "2025-07-26T12:32:07.199942Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/smalls.online/post/3luukzk5juj2w", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "971bc7b5-4d0f-4c34-aadc-1b7b24dce9e7", "url": "https://bsky.app/profile/smalls.online/post/3luukzk5juj2w"}, {"timestamp": "2025-07-26T12:46:19.873Z", "date_only": false, "value": "2025-07-26T12:46:19.873458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technofeed.bsky.social/post/3luulsyd3zb2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a063bc08-31f2-4ff4-8c90-8c5a94e5dac1", "url": "https://bsky.app/profile/technofeed.bsky.social/post/3luulsyd3zb2s"}, {"timestamp": "2025-07-26T14:00:50.150Z", "date_only": false, "value": "2025-07-26T14:00:50.150583Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/tib3rius.bsky.social/post/3luupy6yro22d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ad2e93f6-7483-4e2d-ae3e-b2cd8cc9efe8", "url": "https://bsky.app/profile/tib3rius.bsky.social/post/3luupy6yro22d"}, {"timestamp": "2025-07-26T14:58:39.488Z", "date_only": false, "value": "2025-07-26T14:58:39.488029Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/114920122960999948", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "503f7180-804c-49bd-b6c5-69c8844d58ab", "url": "https://mstdn.ca/users/rfwaveio/statuses/114920122960999948"}, {"timestamp": "2025-07-26T15:00:07Z", "date_only": false, "value": "2025-07-26T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/aJSulEfzlvWzvTMBfPk51bbTeaXii0v458D9js_bSuDvORY", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f3592bcf-9a5e-46ff-9b79-d9ac77918046"}, {"timestamp": "2025-07-26T16:46:14.647Z", "date_only": false, "value": "2025-07-26T16:46:14.647252Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luuz2ykqcrf2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "839183f0-a011-493c-97c0-fc984064bf2c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luuz2ykqcrf2"}, {"timestamp": "2025-07-26T21:57:52.091Z", "date_only": false, "value": "2025-07-26T21:57:52.091992Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luvkn7cbks25", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2910aa97-eadb-4258-a1b1-86394ce6433c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3luvkn7cbks25"}, {"timestamp": "2025-07-27T00:00:00Z", "date_only": false, "value": "2025-07-27T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-27)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e154fc7f-691b-4fa9-a009-a63933f04335"}, {"timestamp": "2025-07-27T02:27:52.369Z", "date_only": false, "value": "2025-07-27T02:27:52.369650Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3luvzpzsgxn2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "650e458c-6f80-4fad-af90-da8002572060", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3luvzpzsgxn2k"}, {"timestamp": "2025-07-27T04:09:42.284Z", "date_only": false, "value": "2025-07-27T04:09:42.284503Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luw7fwz5owy2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9ecebda2-11b9-410a-8fc3-a973160ae599", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luw7fwz5owy2"}, {"timestamp": "2025-07-27T11:50:32.988Z", "date_only": false, "value": "2025-07-27T11:50:32.988524Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luwz5noncxb2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "efb7a197-4950-45cd-9bfa-b5d85249c4e4", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luwz5noncxb2"}, {"timestamp": "2025-07-27T13:05:29.404Z", "date_only": false, "value": "2025-07-27T13:05:29.404652Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/sentinellabs.bsky.social/post/3lux5e5akvc2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ed5ea233-df18-4558-8a5c-009744fecad8", "url": "https://bsky.app/profile/sentinellabs.bsky.social/post/3lux5e5akvc2k"}, {"timestamp": "2025-07-27T20:57:52Z", "date_only": false, "value": "2025-07-27T20:57:52.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45605", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "03c3b8ef-8f8b-40ef-81f7-f5834a94a119", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-53770 Mass Scanner\nURL\uff1ahttps://github.com/3a7/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45605"}, {"timestamp": "2025-07-27T21:00:04Z", "date_only": false, "value": "2025-07-27T21:00:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wRnl8ntDAGY7eTPUGTtFqIuU6Tsi3Eou0FYkl74XLLXvV2Q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "253107ca-437b-44c3-8944-51b40b5d9213"}, {"timestamp": "2025-07-28T00:00:00Z", "date_only": false, "value": "2025-07-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-07-28)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ae955680-1e1c-4aab-b285-dd1da2ccf119"}, {"timestamp": "2025-07-28T00:45:03.703Z", "date_only": false, "value": "2025-07-28T00:45:03.703191Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kitafox.bsky.social/post/3luyeh3cy572h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "091c4c1b-97b0-496f-8d4c-31fca4084e64", "url": "https://bsky.app/profile/kitafox.bsky.social/post/3luyeh3cy572h"}, {"timestamp": "2025-07-28T01:34:43Z", "date_only": false, "value": "2025-07-28T01:34:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.schneier.com/blog/archives/2025/07/microsoft-sharepoint-zero-day.html", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "856048eb-cda5-402e-80ab-9b8ee76885a9", "url": "https://www.schneier.com/blog/archives/2025/07/microsoft-sharepoint-zero-day.html"}, {"timestamp": "2025-07-28T02:27:41.432Z", "date_only": false, "value": "2025-07-28T02:27:41.432207Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3luyk6mqc3g2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "413bfb30-a3d4-4a21-b30b-373a6e950b02", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3luyk6mqc3g2d"}, {"timestamp": "2025-07-28T03:00:05Z", "date_only": false, "value": "2025-07-28T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/BWxbGXem8ClULdKOu4nqbYkWSWCePF7s5-TXtg4_WKFjrOw", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0e679b6f-de13-4d28-b95d-a4bccd83011f"}, {"timestamp": "2025-07-28T08:56:45Z", "date_only": false, "value": "2025-07-28T08:56:45.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/28/emerging-threat-actor-warlock-ransomware.html", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8120774a-7ec0-46e4-9bd5-559080e6af43", "url": "https://threatintel.cc/2025/07/28/emerging-threat-actor-warlock-ransomware.html"}, {"timestamp": "2025-07-28T11:10:24.881Z", "date_only": false, "value": "2025-07-28T11:10:24.881340Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/schneier.com/post/3luzhfd4wmv2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e855321c-62e1-4e1c-98e1-80a4355809f3", "url": "https://bsky.app/profile/schneier.com/post/3luzhfd4wmv2i"}, {"timestamp": "2025-07-28T11:52:15.006Z", "date_only": false, "value": "2025-07-28T11:52:15.006469Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/gorekhaa.bsky.social/post/3luzjq562tq2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c8d5a57a-7c93-4479-b6b8-e770d27cc996", "url": "https://bsky.app/profile/gorekhaa.bsky.social/post/3luzjq562tq2r"}, {"timestamp": "2025-07-28T12:59:45.005Z", "date_only": false, "value": "2025-07-28T12:59:45.005653Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdsec.bsky.social/post/3luznisal5c2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "91fc8d22-a31a-4b1b-b2a1-7e8e122b58e5", "url": "https://bsky.app/profile/crowdsec.bsky.social/post/3luznisal5c2h"}, {"timestamp": "2025-07-28T13:21:05.463Z", "date_only": false, "value": "2025-07-28T13:21:05.463996Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/anthonyhove.bsky.social/post/3luzooxv54q2w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b33cdd8d-9fc2-4835-bbca-a09e706a74d4", "url": "https://bsky.app/profile/anthonyhove.bsky.social/post/3luzooxv54q2w"}, {"timestamp": "2025-07-28T19:20:08.603Z", "date_only": false, "value": "2025-07-28T19:20:08.603617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lv2cqzwk3n2t", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "035b070c-8ca4-4536-926c-6017b85a9fd6", "url": "https://bsky.app/profile/cyberhub.blog/post/3lv2cqzwk3n2t"}, {"timestamp": "2025-07-28T22:48:29Z", "date_only": false, "value": "2025-07-28T22:48:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/45736", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3686d0ec-85fc-457f-843f-06a86ac0b0a5", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83c\udfaf Vulnerability scanner for SharePoint servers affected by CVE-2025-53770. Detects unsafe deserialization using ToolPane.aspx with a crafted base64+gzip payload. \ud83d\udee1\ufe0f Developed by Ahmed Tamer.\nURL\uff1ahttps://github.com/0x-crypt/CVE-2025-53770-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/45736"}, {"timestamp": "2025-07-29T02:27:50.526Z", "date_only": false, "value": "2025-07-29T02:27:50.526674Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lv32nssloe2w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "229243a3-311d-4342-8a8c-90f4a21260e0", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lv32nssloe2w"}, {"timestamp": "2025-07-29T03:00:05Z", "date_only": false, "value": "2025-07-29T03:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/o8ZKoWV2Y_A2XRg1P8qW1kiSLgUFj0IHGqQJ6A5ARyKaU-0", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "058afee1-fd8c-4bf9-b1b2-8cdb37f925f5"}, {"timestamp": "2025-07-29T04:27:06.765Z", "date_only": false, "value": "2025-07-29T04:27:06.765977Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lv3bd3jfek2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d972e246-6b3e-4a87-bf23-5afb9b1756f8", "url": "https://bsky.app/profile/opsmatters.com/post/3lv3bd3jfek2i"}, {"timestamp": "2025-07-29T04:35:27.358Z", "date_only": false, "value": "2025-07-29T04:35:27.358676Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lv3bryzfdz2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ef170871-43d8-48ad-9682-9dfd11def042", "url": "https://bsky.app/profile/opsmatters.com/post/3lv3bryzfdz2r"}, {"timestamp": "2025-07-29T05:28:45.339Z", "date_only": false, "value": "2025-07-29T05:28:45.339310Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lv3ercjzv22v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "48b69d1a-45df-4f9c-b9b9-775f3890c3e1", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lv3ercjzv22v"}, {"timestamp": "2025-07-29T08:02:51.788Z", "date_only": false, "value": "2025-07-29T08:02:51.788255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bastacon.bsky.social/post/3lv3neuespf2y", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "a956d525-bf7e-4df8-a677-fe43b9762fcc", "url": "https://bsky.app/profile/bastacon.bsky.social/post/3lv3neuespf2y"}, {"timestamp": "2025-07-29T11:11:38Z", "date_only": false, "value": "2025-07-29T11:11:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2025/07/29/cyber-threat-intelligence-report-jul.html", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "ded25c79-d969-43e8-9ae8-2a98d1b4e738", "url": "https://threatintel.cc/2025/07/29/cyber-threat-intelligence-report-jul.html"}, {"timestamp": "2025-07-29T12:42:14.705Z", "date_only": false, "value": "2025-07-29T12:42:14.705921Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lv44ydgqzk2w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "251ec25e-0e20-4524-b956-beff58c9b1c7", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lv44ydgqzk2w"}, {"timestamp": "2025-07-29T13:01:37.034Z", "date_only": false, "value": "2025-07-29T13:01:37.034137Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/itsmalware.bsky.social/post/3lv4633utjh2w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4de392d2-6708-48a1-a2e8-f7c31e58c562", "url": "https://bsky.app/profile/itsmalware.bsky.social/post/3lv4633utjh2w"}, {"timestamp": "2025-07-29T16:10:54.753Z", "date_only": false, "value": "2025-07-29T16:10:54.753076Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lv4inldxco23", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a4859acd-7aaf-4f4f-8f20-cde7e2117fdd", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lv4inldxco23"}, {"timestamp": "2025-07-29T23:16:53.194Z", "date_only": false, "value": "2025-07-29T23:16:53.194233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lv5ahbszhu2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2ebfb492-8c39-4b75-9839-9b0679a91661", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lv5ahbszhu2c"}, {"timestamp": "2025-07-29T23:22:38.569Z", "date_only": false, "value": "2025-07-29T23:22:38.569275Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lv5arknbet26", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "6647f457-db2e-4018-83be-b460dbce5941", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lv5arknbet26"}, {"timestamp": "2025-07-30T02:27:33.304Z", "date_only": false, "value": "2025-07-30T02:27:33.304386Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lv5l47mb3z2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f925dfc4-e4e8-4f60-bc38-de16b291b7e8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lv5l47mb3z2i"}, {"timestamp": "2025-07-30T11:51:37.150Z", "date_only": false, "value": "2025-07-30T11:51:37.150498Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/technadu.com/post/3lv6kmhfz7c23", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9597364a-d407-40f5-bb15-15394008b617", "url": "https://bsky.app/profile/technadu.com/post/3lv6kmhfz7c23"}, {"timestamp": "2025-07-30T13:38:23.464Z", "date_only": false, "value": "2025-07-30T13:38:23.464185Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lv6qlqsjyh2q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7a648b01-49a6-4086-bdc7-01ca267de0e2", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3lv6qlqsjyh2q"}, {"timestamp": "2025-07-31T02:27:15.151Z", "date_only": false, "value": "2025-07-31T02:27:15.151869Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lva3km4r5v2t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9a4ac826-4e44-47cf-9059-3a982aad85a2", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lva3km4r5v2t"}, {"timestamp": "2025-07-31T12:51:44.937Z", "date_only": false, "value": "2025-07-31T12:51:44.937378Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6h563yc24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2c0035f7-4152-4906-abbe-e0fedbeb7792", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6h563yc24"}, {"timestamp": "2025-07-31T12:51:46.532Z", "date_only": false, "value": "2025-07-31T12:51:46.532198Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6hbmjm224", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d3bebaea-2d51-4a92-820e-0469a8e0b224", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6hbmjm224"}, {"timestamp": "2025-07-31T12:51:48.187Z", "date_only": false, "value": "2025-07-31T12:51:48.187569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6hbmklc24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "885052f6-bdc8-44fa-a742-bd266f9461b3", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6hbmklc24"}, {"timestamp": "2025-07-31T12:51:49.800Z", "date_only": false, "value": "2025-07-31T12:51:49.800611Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6hbmlkk24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7facc8ac-d75a-4789-a388-74cacf5dc806", "url": "https://bsky.app/profile/shadowserver.bsky.social/post/3lvb6hbmlkk24"}, {"timestamp": "2025-07-31T19:13:00.884Z", "date_only": false, "value": "2025-07-31T19:13:00.884792Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lvbtr27t5q2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c14093c7-e47a-48c9-b36e-1b440f299c36", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lvbtr27t5q2p"}, {"timestamp": "2025-07-31T21:02:22.310Z", "date_only": false, "value": "2025-07-31T21:02:22.310620Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvbzuixtiz2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a59a9fa5-fdfb-4669-b94e-65d86f77549e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvbzuixtiz2a"}, {"timestamp": "2025-07-31T22:53:04.087Z", "date_only": false, "value": "2025-07-31T22:53:04.087008Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lvca2jj6kd2c", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "29be3747-25a0-4ad2-a0e6-9da0a4d6a9a8", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lvca2jj6kd2c"}, {"timestamp": "2025-08-01T00:00:00Z", "date_only": false, "value": "2025-08-01T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "881a04c0-257a-4e5c-be1d-4b02a5261802"}, {"timestamp": "2025-08-01T02:27:58.654Z", "date_only": false, "value": "2025-08-01T02:27:58.654103Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvcm2ss66g2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "38b01296-8027-48a9-8564-1428e42625cf", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lvcm2ss66g2p"}, {"timestamp": "2025-08-01T15:38:11.414Z", "date_only": false, "value": "2025-08-01T15:38:11.414901Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lvdy7slfer2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "84fc4f3f-7446-4c56-9bb3-485f9d689c59", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lvdy7slfer2r"}, {"timestamp": "2025-08-02T02:24:34.375Z", "date_only": false, "value": "2025-08-02T02:24:34.375592Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvf4dnf4nt22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c6a74fe0-c937-40a6-a71b-18e059a2b7de", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lvf4dnf4nt22"}, {"timestamp": "2025-08-02T08:05:40Z", "date_only": false, "value": "2025-08-02T08:05:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/46273", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2cee801b-c520-46d6-9f17-7e5e9d666ce1", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aExplore the CVE-2025-32463 lab environment for testing the sudo vulnerability. Ideal for security researchers. \ud83d\udc31\ud83d\udcbb\ud83d\udd0d\nURL\uff1ahttps://github.com/harryhaxor/CVE-2025-53770-SharePoint-Deserialization-RCE-PoC\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/46273"}, {"timestamp": "2025-08-02T15:00:07Z", "date_only": false, "value": "2025-08-02T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/uA_KmDo_LUFTfrc3apT2ICtIGtHBkSpaWjddRag3RJoiBGk", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e7b34802-25f5-4486-9100-51dd744a8065"}, {"timestamp": "2025-08-03T00:00:00Z", "date_only": false, "value": "2025-08-03T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-03)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "939a5b41-cd7d-4889-821c-e8a17956af09"}, {"timestamp": "2025-08-03T02:27:59.066Z", "date_only": false, "value": "2025-08-03T02:27:59.066401Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvhmyo5sn72t", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "75de26e3-9c3a-43ff-89df-7eb2879ada61", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lvhmyo5sn72t"}, {"timestamp": "2025-08-03T07:31:35Z", "date_only": false, "value": "2025-08-03T07:31:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/1120", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8f22b392-32c4-45a2-a5b6-d822cdfce379", "content": "Vulnerabilities of the Week\n\n\u2623 SharePoint Under Siege\nCVE-2025-53770 \u2013 Microsoft SharePoint\u2019s zero-day lets unauthenticated attackers remotely execute code by deserializing untrusted data. Already exploited in the wild. No patch yet. If you\u2019re running it, you\u2019re probably already in someone\u2019s pentest report.\n\n\ud83c\udfaf Supply Chain Smoke Alarm\nCVE-2025-54415 \u2013 A misconfigured GitHub Actions workflow in dag-factory allows attackers to take over repos and exfiltrate secrets. Welcome to CI/CD hell.\n\n\ud83d\udd13 WordPress Gets Whacked\nCVE-2025-6895 \u2013 MelaPress Login Security plugin flaw lets attackers bypass authentication and escalate privileges. Another day, another backdoor into WordPress.\n\n\ud83d\udcdf Routers in the Crosshairs\nCVE-2025-8184 + CVE-2025-8180 \u2013 Stack and heap overflows in D-Link and Tenda routers scream botnet fodder. If it ships with a default password, it\u2019s already compromised.\n\n\u26a0 GitHub Action Turns Action Movie\nCVE-2025-54416 \u2013 tj-actions/branch-names lets shell commands fly unchecked. Classic command injection, in plain sight, used by thousands of repos.\n\nIf you\u2019re running SharePoint, GitHub Actions, or small-office routers \u2014 patch like you\u2019ve got ransomware breathing down your neck. Because you probably do.\n\n@bhhub", "url": "https://t.me/bhhub/1120"}, {"timestamp": "2025-08-03T07:31:35Z", "date_only": false, "value": "2025-08-03T07:31:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/bhhub/858", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ac8d7ca6-8668-46cf-80b9-20553ac94626", "content": "Vulnerabilities of the Week\n\n\u2623 SharePoint Under Siege\nCVE-2025-53770 \u2013 Microsoft SharePoint\u2019s zero-day lets unauthenticated attackers remotely execute code by deserializing untrusted data. Already exploited in the wild. No patch yet. If you\u2019re running it, you\u2019re probably already in someone\u2019s pentest report.\n\n\ud83c\udfaf Supply Chain Smoke Alarm\nCVE-2025-54415 \u2013 A misconfigured GitHub Actions workflow in dag-factory allows attackers to take over repos and exfiltrate secrets. Welcome to CI/CD hell.\n\n\ud83d\udd13 WordPress Gets Whacked\nCVE-2025-6895 \u2013 MelaPress Login Security plugin flaw lets attackers bypass authentication and escalate privileges. Another day, another backdoor into WordPress.\n\n\ud83d\udcdf Routers in the Crosshairs\nCVE-2025-8184 + CVE-2025-8180 \u2013 Stack and heap overflows in D-Link and Tenda routers scream botnet fodder. If it ships with a default password, it\u2019s already compromised.\n\n\u26a0 GitHub Action Turns Action Movie\nCVE-2025-54416 \u2013 tj-actions/branch-names lets shell commands fly unchecked. Classic command injection, in plain sight, used by thousands of repos.\n\nIf you\u2019re running SharePoint, GitHub Actions, or small-office routers \u2014 patch like you\u2019ve got ransomware breathing down your neck. Because you probably do.\n\n@bhhub", "url": "https://t.me/bhhub/858"}, {"timestamp": "2025-08-04T02:27:54.947Z", "date_only": false, "value": "2025-08-04T02:27:54.947569Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvk5hhwcjx2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "08aa40de-7268-4f69-a1ce-fd8f15d1c3a7", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lvk5hhwcjx2n"}, {"timestamp": "2025-08-04T09:38:25.817Z", "date_only": false, "value": "2025-08-04T09:38:25.817523Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvkvir25sc2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a9c16958-307d-4293-9081-a3602352da7a", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvkvir25sc2c"}, {"timestamp": "2025-08-04T13:04:32Z", "date_only": false, "value": "2025-08-04T13:04:32.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/46536", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e7177e52-9e6b-403b-9b62-ff78c25a4827", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aUnauthenticated Remote Code Execution via unsafe deserialization in Microsoft SharePoint Server (CVE-2025-53770)\nURL\uff1ahttps://github.com/MuhammadWaseem29/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/46536"}, {"timestamp": "2025-08-04T15:54:19.385Z", "date_only": false, "value": "2025-08-04T15:54:19.385805Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rcinghio.bsky.social/post/3lvlkjjyies24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8f863f0e-b0c1-4383-a5a7-faeed2dcdb6a", "url": "https://bsky.app/profile/rcinghio.bsky.social/post/3lvlkjjyies24"}, {"timestamp": "2025-08-05T02:27:36.469Z", "date_only": false, "value": "2025-08-05T02:27:36.469777Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lvmnvts2kk2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ca4aac90-10c3-43c8-bfa0-a6cc0e0a40ab", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lvmnvts2kk2n"}, {"timestamp": "2025-08-05T05:53:26Z", "date_only": false, "value": "2025-08-05T05:53:26.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/28ad5115-be33-4d4c-b093-2f89fe35f991", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "813f3ca3-8941-41ea-8757-0c522cc99a68"}, {"timestamp": "2025-08-05T13:29:22.700Z", "date_only": false, "value": "2025-08-05T13:29:22.700984Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-5829b01c-0fe5e9122e1cbc34", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "90b23383-4302-4e20-81be-4abd5f863821", "url": "https://poliverso.org/objects/0477a01e-5829b01c-0fe5e9122e1cbc34"}, {"timestamp": "2025-08-06T05:03:58.372Z", "date_only": false, "value": "2025-08-06T05:03:58.372372Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lvph4em4es2v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6ab66a76-8605-4769-9818-08f32f60f714", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lvph4em4es2v"}, {"timestamp": "2025-08-06T07:00:00Z", "date_only": false, "value": "2025-08-06T07:00:00.000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2025-08-06T07:00:00Z", "date_only": false, "value": "2025-08-06T07:00:00.000Z", "kind": "other", "label": "Updated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-08-06T19:33:05Z", "date_only": false, "value": "2025-08-06T19:33:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "eeb253d4-a497-4f84-a988-c6fdcf4cf8f0", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb"}, {"timestamp": "2025-08-07T02:38:03.008Z", "date_only": false, "value": "2025-08-07T02:38:03.008042Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secqube.com/post/3lvrpgebtwd2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f7504846-6af5-4d3d-8d55-dc92fb21af4f", "url": "https://bsky.app/profile/secqube.com/post/3lvrpgebtwd2d"}, {"timestamp": "2025-08-07T03:11:13.665Z", "date_only": false, "value": "2025-08-07T03:11:13.665063Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lvrrbnxlp723", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f0b07996-1fa2-42dd-b1b7-f4c2b4e6a5ee", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lvrrbnxlp723"}, {"timestamp": "2025-08-07T08:49:08Z", "date_only": false, "value": "2025-08-07T08:49:08.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/9a73022c-0f05-4651-ba26-b6b314bbc8fa", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1883265a-2b01-4c8a-90f2-d39a47166ed7"}, {"timestamp": "2025-08-07T21:02:27.816Z", "date_only": false, "value": "2025-08-07T21:02:27.816072Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvtn53olnv22", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "601fdfc5-2869-4827-8416-db11848b535a", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvtn53olnv22"}, {"timestamp": "2025-08-08T00:06:54.298Z", "date_only": false, "value": "2025-08-08T00:06:54.298638Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvtxgvu5gs2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "273fa944-e068-4a52-88c9-c9d37dc5bd92", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvtxgvu5gs2h"}, {"timestamp": "2025-08-08T02:22:09.935Z", "date_only": false, "value": "2025-08-08T02:22:09.935931Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvu6ytr7ck2h", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9055d009-a5a4-4238-973b-6a79f0ee6d64", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lvu6ytr7ck2h"}, {"timestamp": "2025-08-10T00:00:00Z", "date_only": false, "value": "2025-08-10T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-10)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d8f0d87b-d750-41a1-97b0-be3c1fc52cbb"}, {"timestamp": "2025-08-11T00:00:00Z", "date_only": false, "value": "2025-08-11T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-11)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "37e87a34-292a-4b0e-a960-a33eb08024b0"}, {"timestamp": "2025-08-11T09:32:40.187Z", "date_only": false, "value": "2025-08-11T09:32:40.187816Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/msittechnews.bsky.social/post/3lw4ihfy66s2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a6f8eb5a-a94a-4feb-86f0-9d6cd7ba8187", "url": "https://bsky.app/profile/msittechnews.bsky.social/post/3lw4ihfy66s2b"}, {"timestamp": "2025-08-11T16:07:59.243Z", "date_only": false, "value": "2025-08-11T16:07:59.243265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shanahan.bsky.social/post/3lw56kcnlbp2r", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ca7a4c80-0b2f-461e-bd32-fad4571dbe27", "url": "https://bsky.app/profile/shanahan.bsky.social/post/3lw56kcnlbp2r"}, {"timestamp": "2025-08-12T00:00:00Z", "date_only": false, "value": "2025-08-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-12)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d510415d-e635-4bc4-b597-4eb2699c24ea"}, {"timestamp": "2025-08-12T13:09:02Z", "date_only": false, "value": "2025-08-12T13:09:02.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/47457", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e9bd2697-f0c5-4e1c-9696-40a1a7cb89e0", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-53770 SharePoint Deserialization Vulnerability Checker\nURL\uff1ahttps://github.com/behnamvanda/CVE-2025-53770-Checker\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/47457"}, {"timestamp": "2025-08-12T21:02:33.452Z", "date_only": false, "value": "2025-08-12T21:02:33.452812Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwa7hq7cyh2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "97789211-71b3-4347-9a63-67a82a139c4d", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lwa7hq7cyh2f"}, {"timestamp": "2025-08-14T00:00:00Z", "date_only": false, "value": "2025-08-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-14)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e6fd5ff7-b0d0-4c0e-b4f6-24835d9d3a5c"}, {"timestamp": "2025-08-14T09:01:23Z", "date_only": false, "value": "2025-08-14T09:01:23.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/47671", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "98841cf5-0192-49fa-b997-b1fb89825741", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-53770 - SharePoint\nURL\uff1ahttps://github.com/ghostn4444/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/47671"}, {"timestamp": "2025-08-14T15:00:06Z", "date_only": false, "value": "2025-08-14T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nUNYWlG9FEVlGOS9YJMbOOAkWKc_ddRoY36Taz2YXfyigNQ", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a99cd521-96db-42ce-abdc-5741f59294bc"}, {"timestamp": "2025-08-14T21:03:38.505Z", "date_only": false, "value": "2025-08-14T21:03:38.505594Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alphahunt.io/post/3lwfahqzpyq2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "82e43b44-19cb-46ca-bcda-67e8c427fcce", "url": "https://bsky.app/profile/alphahunt.io/post/3lwfahqzpyq2d"}, {"timestamp": "2025-08-15T02:54:51.314Z", "date_only": false, "value": "2025-08-15T02:54:51.314932Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lwfu3riy5l2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7c546396-4a9a-4c94-a6b7-7d1538cbb053", "url": "https://bsky.app/profile/opsmatters.com/post/3lwfu3riy5l2y"}, {"timestamp": "2025-08-15T03:03:07.123Z", "date_only": false, "value": "2025-08-15T03:03:07.123891Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lwfukjxk542w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c8415634-f02f-4f62-a56c-820f7fd86637", "url": "https://bsky.app/profile/opsmatters.com/post/3lwfukjxk542w"}, {"timestamp": "2025-08-15T11:26:24.058Z", "date_only": false, "value": "2025-08-15T11:26:24.058824Z", "kind": "sighting", "label": "Seen", "source": "https://cyberplace.social/users/GossiTheDog/statuses/115032533860318853", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3a3cdc42-78d5-45c5-a30a-de95bd5c3271", "url": "https://cyberplace.social/users/GossiTheDog/statuses/115032533860318853"}, {"timestamp": "2025-08-15T11:28:58.279Z", "date_only": false, "value": "2025-08-15T11:28:58.279612Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lwgqoutd4y72", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7f5eae66-f7cf-4bcb-bd7f-07d56e083b3c", "url": "https://bsky.app/profile/GossiTheDog.cyberplace.social.ap.brid.gy/post/3lwgqoutd4y72"}, {"timestamp": "2025-08-16T02:19:11.155Z", "date_only": false, "value": "2025-08-16T02:19:11.155554Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwickvomwz2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "13353608-a7ad-4c0f-86d6-b4a1e4f03405", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lwickvomwz2d"}, {"timestamp": "2025-08-18T15:06:59.197Z", "date_only": false, "value": "2025-08-18T15:06:59.197659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lwoofnuqis2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6e95228a-e538-4363-ad16-5d6bfc0ccab9", "url": "https://bsky.app/profile/pentest-tools.com/post/3lwoofnuqis2e"}, {"timestamp": "2025-08-19T18:29:51Z", "date_only": false, "value": "2025-08-19T18:29:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/236721", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cce4687b-8ffc-4749-a490-df3e29f0cb0a", "content": "Proactive Security Insights for SharePoint Attacks (CVE-2025-53770 and CVE-2025-53771)\nhttps://ift.tt/3o1jExW", "url": "https://t.me/ctinow/236721"}, {"timestamp": "2025-08-20T00:00:00Z", "date_only": false, "value": "2025-08-20T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-20)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ed17d7f8-3d35-4eba-8afd-4dde399d30c4"}, {"timestamp": "2025-08-20T02:15:07.225Z", "date_only": false, "value": "2025-08-20T02:15:07.225060Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/azureweekly.endj.in/post/3lwse7chej22d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "25d82765-5d01-4fba-accc-89cb2df85760", "url": "https://bsky.app/profile/azureweekly.endj.in/post/3lwse7chej22d"}, {"timestamp": "2025-08-20T02:15:52.234Z", "date_only": false, "value": "2025-08-20T02:15:52.234244Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lwseanwnc52x", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "49715101-6154-47e1-bd87-fa25c3064514", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lwseanwnc52x"}, {"timestamp": "2025-08-20T22:03:38Z", "date_only": false, "value": "2025-08-20T22:03:38.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/kpZTVhJCrtsZio08QfKIiKVE-soC8CM4X7HYS2gyijR__AY", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9e5c47e8-c968-407f-8e35-b10b96bff6e2"}, {"timestamp": "2025-08-21T02:11:10.091Z", "date_only": false, "value": "2025-08-21T02:11:10.091980Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3lwuuh6bd5a2o", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "25e6dff9-50a5-463c-bb48-b08a4f8f5090", "url": "https://bsky.app/profile/opsmatters.com/post/3lwuuh6bd5a2o"}, {"timestamp": "2025-08-22T14:06:09Z", "date_only": false, "value": "2025-08-22T14:06:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Takas0522/dad0b8e79fc8f3a8cf6e900adb814567", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8a504985-2c59-4326-9d53-28af37141eb6", "url": "https://gist.github.com/Takas0522/dad0b8e79fc8f3a8cf6e900adb814567"}, {"timestamp": "2025-08-22T22:44:40.094Z", "date_only": false, "value": "2025-08-22T22:44:40.094450Z", "kind": "sighting", "label": "Seen", "source": "https://social.circl.lu/users/cedric/statuses/115074838000391199", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "11ee634f-7568-4b39-84f4-54d7130a3dda", "url": "https://social.circl.lu/users/cedric/statuses/115074838000391199"}, {"timestamp": "2025-08-23T00:39:18.903Z", "date_only": false, "value": "2025-08-23T00:39:18.903Z", "kind": "other", "label": "Document generated", "source": "csaf_microsoft \u00b7 MSRC_CVE-2025-53770", "record": "MSRC_CVE-2025-53770", "field": "document.tracking.generator.date"}, {"timestamp": "2025-08-23T12:00:37Z", "date_only": false, "value": "2025-08-23T12:00:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/YouPentest/13415", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "aedeb6f6-527e-40b1-a4ef-b789c282126d", "content": "\u200aCVE-2025-53770 EXPLAINED: ToolShell RCE + Live SOC Analysis (Letsdefend SOC342)\n\nhttps://www.youtube.com/watch?v=GaCw0Z4hHbk", "url": "https://t.me/YouPentest/13415"}, {"timestamp": "2025-08-23T12:00:38Z", "date_only": false, "value": "2025-08-23T12:00:38.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/YouPentest/13416", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "76a3583a-0387-4e2f-8613-40a7ce1630d0", "content": "\u200aSOC Analysis Sneak Peek: CVE-2025-53770\n\nhttps://www.youtube.com/shorts/J15ERX6x9P4", "url": "https://t.me/YouPentest/13416"}, {"timestamp": "2025-08-25T06:32:13.133Z", "date_only": false, "value": "2025-08-25T06:32:13.133355Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/u2k25.bsky.social/post/3lx7evmkh2k2v", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fc8a3da2-b107-4fe4-96d4-b101828300a6", "url": "https://bsky.app/profile/u2k25.bsky.social/post/3lx7evmkh2k2v"}, {"timestamp": "2025-08-26T00:00:00Z", "date_only": false, "value": "2025-08-26T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "last_revision_date"}, {"timestamp": "2025-08-26T00:00:00Z", "date_only": false, "value": "2025-08-26T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_alerte \u00b7 CERTFR-2025-ALE-010", "record": "CERTFR-2025-ALE-010", "field": "revisions.3.revision_date"}, {"timestamp": "2025-08-28T03:05:36Z", "date_only": false, "value": "2025-08-28T03:05:36.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/49327", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "eb82c2b5-e23e-4cbf-867b-93e694e82e42", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aMicroSoft SharePoint ToolPane Exploit CVE-2025-53770\nURL\uff1ahttps://github.com/guinea-offensive-security/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/49327"}, {"timestamp": "2025-08-29T07:36:14Z", "date_only": false, "value": "2025-08-29T07:36:14.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/265cae8f-cfe7-5868-b1d5-b2c6574393d3", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0c8af55b-1bb8-4bfe-b226-a915d993739c"}, {"timestamp": "2025-09-05T13:17:31.308Z", "date_only": false, "value": "2025-09-05T13:17:31.308434Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3ly3qofcwos2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "54d48934-311e-4cc7-85a3-a733a209b8ca", "url": "https://bsky.app/profile/virusbtn.bsky.social/post/3ly3qofcwos2c"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-08)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bab25582-c36f-4084-be79-4152595e2047"}, {"timestamp": "2025-09-08T00:00:00Z", "date_only": false, "value": "2025-09-08T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-08)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5e29d0c9-041f-466f-aad7-d92bf29db624"}, {"timestamp": "2025-09-08T14:29:17.557Z", "date_only": false, "value": "2025-09-08T14:29:17.557659Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lydg3h4lvs2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "78019704-fad2-4c15-8ace-e91a21a57675", "url": "https://bsky.app/profile/pentest-tools.com/post/3lydg3h4lvs2i"}, {"timestamp": "2025-09-08T14:29:18.068Z", "date_only": false, "value": "2025-09-08T14:29:18.068266Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lydg3jnzes2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "18fadace-e279-4b2f-94d9-9e2dd647547f", "url": "https://bsky.app/profile/pentest-tools.com/post/3lydg3jnzes2i"}, {"timestamp": "2025-09-08T14:29:18.568Z", "date_only": false, "value": "2025-09-08T14:29:18.568963Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lydg3jnzet2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e23272cb-6a66-4db7-93ce-e4e8b624c43b", "url": "https://bsky.app/profile/pentest-tools.com/post/3lydg3jnzet2i"}, {"timestamp": "2025-09-08T14:29:19.097Z", "date_only": false, "value": "2025-09-08T14:29:19.097923Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3lydg3jo3dd2i", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3a7e4b2c-cd44-4db4-a44a-b7710f34c700", "url": "https://bsky.app/profile/pentest-tools.com/post/3lydg3jo3dd2i"}, {"timestamp": "2025-09-09T01:49:11.473Z", "date_only": false, "value": "2025-09-09T01:49:11.473536Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/newstecnicas.bsky.social/post/3lyem37ii3c2l", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4111a105-5f77-4296-ba15-8510297fee88", "url": "https://bsky.app/profile/newstecnicas.bsky.social/post/3lyem37ii3c2l"}, {"timestamp": "2025-09-09T11:53:38Z", "date_only": false, "value": "2025-09-09T11:53:38.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a3c5beab-b790-4171-8b4c-02c8a9678071", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a7fd3571-bfd5-4ba3-91fe-f91a02b1b100"}, {"timestamp": "2025-09-12T19:53:22.631Z", "date_only": false, "value": "2025-09-12T19:53:22.631628Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lyo22rmkoq2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b15f2df8-ba20-46d5-bb7e-a278ff43a14d", "url": "https://bsky.app/profile/undercode.bsky.social/post/3lyo22rmkoq2p"}, {"timestamp": "2025-09-13T09:33:06Z", "date_only": false, "value": "2025-09-13T09:33:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/51411", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "73414178-456e-4997-af70-07d325aa1569", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-53770 \u5b9e\u9a8c\u73af\u5883\nURL\uff1ahttps://github.com/go-bi/sharepoint-CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/51411"}, {"timestamp": "2025-09-13T09:36:40Z", "date_only": false, "value": "2025-09-13T09:36:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/51412", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c4b399ae-c18a-4d4a-be93-3321990a03ab", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-53770 \u5b9e\u9a8c\u73af\u5883\nURL\uff1ahttps://github.com/go-bi/sharepoint-CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/51412"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-15)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "858a7d88-d015-4f43-91ff-1973e0a14ab4"}, {"timestamp": "2025-09-15T00:00:00Z", "date_only": false, "value": "2025-09-15T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e7337acc-fa6d-4ad8-9019-fd28105d47cf"}, {"timestamp": "2025-09-15T05:15:52.127Z", "date_only": false, "value": "2025-09-15T05:15:52.127147Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ytroncal.bsky.social/post/3lyu2gf3axs2c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "75f3a064-508f-438c-b99d-facaf1174e2f", "url": "https://bsky.app/profile/ytroncal.bsky.social/post/3lyu2gf3axs2c"}, {"timestamp": "2025-09-16T22:14:37Z", "date_only": false, "value": "2025-09-16T22:14:37.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/51899", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cbebd339-8232-4818-8121-850941b0915a", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTools for detecting and assessing systems vulnerable to CVE-2025-53770 (CWE-502: Deserialization of Untrusted Data).\nURL\uff1ahttps://github.com/daryllundy/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/51899"}, {"timestamp": "2025-09-16T22:28:35Z", "date_only": false, "value": "2025-09-16T22:28:35.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/51902", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "339a78f6-3ec8-4b32-87e3-b62aa2b58aa3", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aTools for detecting and assessing systems vulnerable to CVE-2025-53770 (CWE-502: Deserialization of Untrusted Data).\nURL\uff1ahttps://github.com/daryllundy/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/51902"}, {"timestamp": "2025-09-17T16:02:48.459Z", "date_only": false, "value": "2025-09-17T16:02:48.459922Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz27j4kzax2f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fca7840b-0989-499a-a2ef-3acccb5a6606", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lz27j4kzax2f"}, {"timestamp": "2025-09-23T10:25:58Z", "date_only": false, "value": "2025-09-23T10:25:58.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/52764", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5755b190-c690-42ca-8843-ffdf5b78cdee", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd0d Scan for potential exposure to the critical SharePoint vulnerability CVE-2025-53770 with this simple and effective tool for authorized testing.\nURL\uff1ahttps://github.com/ziisenpai/CVE-2025-53770-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/52764"}, {"timestamp": "2025-09-23T15:00:06Z", "date_only": false, "value": "2025-09-23T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/738jfAXXC3LWOZnsDd9qNuo1W8BYdUA_U_0UHdIR_wlIZ1A", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7b464677-ddfa-4e4f-a4a2-d30fe8dc768d"}, {"timestamp": "2025-09-24T00:00:00Z", "date_only": false, "value": "2025-09-24T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-24)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "536c028a-fa08-4623-b311-a060cfe8f564"}, {"timestamp": "2025-09-24T13:53:30Z", "date_only": false, "value": "2025-09-24T13:53:30.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/52917", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c7b1cfbb-eef2-4642-b613-805911050bce", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udd0d Explore Microsoft SharePoint CVE-2025-53770 with this proof of concept for educational use, emphasizing security insights in authorized environments.\nURL\uff1ahttps://github.com/taqiaferdianshah/CVE-2025-53770\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/52917"}, {"timestamp": "2025-09-28T08:23:31Z", "date_only": false, "value": "2025-09-28T08:23:31.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5ef145bd-f95a-4bb7-b3e7-f0ce11fc1a05"}, {"timestamp": "2025-09-29T03:12:19Z", "date_only": false, "value": "2025-09-29T03:12:19.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8060ba32-46a6-43eb-9726-7f1c1b39bad6"}, {"timestamp": "2025-09-30T10:00:00Z", "date_only": false, "value": "2025-09-30T10:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "1a89b78e-f703-45f3-bb86-59eb712668bd", "record": "CVE-2025-53770", "field": "timestamps.last_seen_at", "uuid": "9d0b5efa-7369-4c7b-a448-529e4a837f2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2025-09-30T14:47:46.035Z", "date_only": false, "value": "2025-09-30T14:47:46.035614Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rapid7.com/post/3m22retelo22q", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b932a24a-e9ba-46aa-ace2-47d8902dd5ab", "url": "https://bsky.app/profile/rapid7.com/post/3m22retelo22q"}, {"timestamp": "2025-10-03T14:03:36.377Z", "date_only": false, "value": "2025-10-03T14:03:36.377989Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3m2caco3azo2m", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b619d5d1-91c6-40be-91c4-437072aa3e0c", "url": "https://bsky.app/profile/undercode.bsky.social/post/3m2caco3azo2m"}, {"timestamp": "2025-10-03T21:00:28.272Z", "date_only": false, "value": "2025-10-03T21:00:28.272415Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m2cxm4cvmr2g", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "ca8302bd-a666-480e-bf62-6af4825990c4", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m2cxm4cvmr2g"}, {"timestamp": "2025-10-09T00:00:00Z", "date_only": false, "value": "2025-10-09T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-09)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "88511ec5-401b-476e-8867-81ae6e27aeb9"}, {"timestamp": "2025-10-22T00:33:19Z", "date_only": false, "value": "2025-10-22T00:33:19Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-XCRC-8VQV-VC8R", "record": "GHSA-XCRC-8VQV-VC8R", "field": "modified"}, {"timestamp": "2025-10-22T09:30:48.597Z", "date_only": false, "value": "2025-10-22T09:30:48.597366Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3m3rjwf5qct2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "87789c62-585b-4c60-bc27-b97ffcec6a0d", "url": "https://bsky.app/profile/solidot.bsky.social/post/3m3rjwf5qct2j"}, {"timestamp": "2025-10-22T10:24:45.211Z", "date_only": false, "value": "2025-10-22T10:24:45.211458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bleepingcomputer.com/post/3m3rmwtwpzf2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "49eea35c-4e74-4c37-b880-755f210edd55", "url": "https://bsky.app/profile/bleepingcomputer.com/post/3m3rmwtwpzf2p"}, {"timestamp": "2025-10-22T10:39:14.092Z", "date_only": false, "value": "2025-10-22T10:39:14.092023Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3rnqqtd3y2d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "05036d42-7cb7-47b9-b093-e2a08b928dd4", "url": "https://bsky.app/profile/blackhatnews.tokyo/post/3m3rnqqtd3y2d"}, {"timestamp": "2025-10-22T11:01:22Z", "date_only": false, "value": "2025-10-22T11:01:22.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BleepingComputer/23234", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2eabb08d-ac70-42e4-a2c3-e8afe3dcbc7b", "content": "\u200aSharepoint ToolShell attacks targeted orgs across four continents\n\nHackers believed to be associated with China have leveraged the ToolShell vulnerability (CVE-2025-53770) in Microsoft SharePoint in attacks targeting government agencies, universities, telecommunication service providers, and finance organizations. [...]\n\nhttps://www.bleepingcomputer.com/news/security/sharepoint-toolshell-attacks-targeted-orgs-across-four-continents/", "url": "https://t.me/BleepingComputer/23234"}, {"timestamp": "2025-10-22T12:35:50.740Z", "date_only": false, "value": "2025-10-22T12:35:50.740672Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3rub7iyfc2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "70fc5418-4715-48a5-9072-7dfc2b2dc625", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3rub7iyfc2s"}, {"timestamp": "2025-10-22T13:25:49.264Z", "date_only": false, "value": "2025-10-22T13:25:49.264213Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/jbhall56/statuses/115418041476215498", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "792802e3-95ef-4ed9-a8b8-6bf7fb7bca21", "url": "https://infosec.exchange/users/jbhall56/statuses/115418041476215498"}, {"timestamp": "2025-10-22T13:25:59.426Z", "date_only": false, "value": "2025-10-22T13:25:59.426771Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jbhall56.bsky.social/post/3m3rx2vk4fs24", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "edfd1eee-9b90-45fd-a964-a0d08c902c6f", "url": "https://bsky.app/profile/jbhall56.bsky.social/post/3m3rx2vk4fs24"}, {"timestamp": "2025-10-22T17:27:41.662Z", "date_only": false, "value": "2025-10-22T17:27:41.662346Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/theitnerd.ca/post/3m3sel4zcot2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d2229d41-16d1-45a3-86cf-76388304d3d6", "url": "https://bsky.app/profile/theitnerd.ca/post/3m3sel4zcot2e"}, {"timestamp": "2025-10-23T02:14:06.851Z", "date_only": false, "value": "2025-10-23T02:14:06.851368Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3tbyghidh2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9e2b0ee9-4170-4368-8a7c-53ffc4ff5fc3", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m3tbyghidh2k"}, {"timestamp": "2025-10-23T07:19:28.624Z", "date_only": false, "value": "2025-10-23T07:19:28.624600Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3tt2hojnc2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "14c87f86-874a-4063-963a-9c4c02977d98", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3tt2hojnc2z"}, {"timestamp": "2025-10-23T08:00:22.744Z", "date_only": false, "value": "2025-10-23T08:00:22.744233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3tvdmg7342o", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "79d0a9f1-dc80-4d1a-8ee3-16b7307d0e10", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3tvdmg7342o"}, {"timestamp": "2025-10-23T08:46:27.453Z", "date_only": false, "value": "2025-10-23T08:46:27.453629Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3txvyxjes2s", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "8170e806-d078-476f-a306-0ada97c77246", "url": "https://bsky.app/profile/ahmandonk.bsky.social/post/3m3txvyxjes2s"}, {"timestamp": "2025-10-23T10:42:31.861Z", "date_only": false, "value": "2025-10-23T10:42:31.861840Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cybersecurity.page/post/3m3u6fkum3f2k", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "340754e0-4aba-478c-ad9a-d9356975af0e", "url": "https://bsky.app/profile/cybersecurity.page/post/3m3u6fkum3f2k"}, {"timestamp": "2025-10-23T13:00:22.317Z", "date_only": false, "value": "2025-10-23T13:00:22.317437Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3ug4247ju2o", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "f6e669ea-b84c-421b-802e-e7833cb302ff", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3m3ug4247ju2o"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "336941e6-a96d-4331-a633-1a415290987e"}, {"timestamp": "2025-10-24T02:11:13.740Z", "date_only": false, "value": "2025-10-24T02:11:13.740419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3vsc7hnph2a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "59cabe7e-f2d9-4db4-b22c-ff506443cdd5", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m3vsc7hnph2a"}, {"timestamp": "2025-10-24T11:32:32.522Z", "date_only": false, "value": "2025-10-24T11:32:32.522493Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m3wrnvmdn72j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0014cd19-c4d6-47ca-9c2e-c6ccf1932b7d", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3m3wrnvmdn72j"}, {"timestamp": "2025-10-24T13:32:24.824Z", "date_only": false, "value": "2025-10-24T13:32:24.824035Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115429392021841990", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "23707bb2-24f6-4293-b2b6-b194ea30a8af", "url": "https://infosec.exchange/users/edwardk/statuses/115429392021841990"}, {"timestamp": "2025-10-24T13:33:31.583Z", "date_only": false, "value": "2025-10-24T13:33:31.583771Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/115429396385459441", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "10ff0489-7499-4f38-9d8d-eca2e8fb187e", "url": "https://infosec.exchange/users/edwardk/statuses/115429396385459441"}, {"timestamp": "2025-10-24T13:33:34.820Z", "date_only": false, "value": "2025-10-24T13:33:34.820507Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3m3wygcxl4w2y", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e0fdce50-d0ed-498a-98bd-7cb195958b6c", "url": "https://bsky.app/profile/e-kiledjian.bsky.social/post/3m3wygcxl4w2y"}, {"timestamp": "2025-10-25T02:12:29.484Z", "date_only": false, "value": "2025-10-25T02:12:29.484287Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m3yctetvdb2b", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4ae4312d-b220-47e7-95f4-34408ad3b9f0", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m3yctetvdb2b"}, {"timestamp": "2025-10-25T06:30:32.004Z", "date_only": false, "value": "2025-10-25T06:30:32.004426Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m3yraoaep22g", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "684604a1-8a69-4ff3-9f3c-b095be8a752e", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m3yraoaep22g"}, {"timestamp": "2025-10-25T06:30:38.013Z", "date_only": false, "value": "2025-10-25T06:30:38.013556Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3yraxqrvs2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ec89e348-73c9-4a91-9c58-8c5ebe646b16", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m3yraxqrvs2z"}, {"timestamp": "2025-10-25T20:58:37.699Z", "date_only": false, "value": "2025-10-25T20:58:37.699298Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42bqyndjc2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6dd4b380-b2d2-4643-9a0b-f50d7c01c0d6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m42bqyndjc2n"}, {"timestamp": "2025-10-27T10:36:09.458Z", "date_only": false, "value": "2025-10-27T10:36:09.458584Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-482fa334-ae4bd14916193ac1", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8b7ccf90-0284-4290-95de-d760f0011af6", "url": "https://poliverso.org/objects/0477a01e-482fa334-ae4bd14916193ac1"}, {"timestamp": "2025-10-28T00:00:00Z", "date_only": false, "value": "2025-10-28T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2109f7eb-b8f5-427c-85ff-6f050d5e4507"}, {"timestamp": "2025-11-07T18:18:22.985Z", "date_only": false, "value": "2025-11-07T18:18:22.985356Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-e71d3734-3706cad125ec9575", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "578f3e3f-8b20-41d1-954c-37e4e6398111", "url": "https://poliverso.org/objects/0477a01e-e71d3734-3706cad125ec9575"}, {"timestamp": "2025-11-11T07:20:07.590Z", "date_only": false, "value": "2025-11-11T07:20:07.590260Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m5dlx527qo2u", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "5d038e76-25d7-45d5-83d0-d8de2e540bc0", "url": "https://bsky.app/profile/cyberhub.blog/post/3m5dlx527qo2u"}, {"timestamp": "2025-11-13T00:00:00Z", "date_only": false, "value": "2025-11-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-11-13)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7f6877da-b8e9-4419-866e-c1c950823e5a"}, {"timestamp": "2025-11-19T15:51:50.726Z", "date_only": false, "value": "2025-11-19T15:51:50.726777Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-b09ebdbf-49ce2daf7174e42b", "record": "cve-2025-53770", "field": "creation_timestamp", "uuid": "753a20bb-560e-4b73-be87-bfaeb8a0a19f", "url": "https://poliverso.org/objects/0477a01e-b09ebdbf-49ce2daf7174e42b"}, {"timestamp": "2025-11-21T21:00:05Z", "date_only": false, "value": "2025-11-21T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/c9mxF0xUgnweIqFG-7qFhNjFM98zK9XRzRCqE5Wws_VSdzI", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7174dc55-adb6-4f43-835e-8839f3b81603"}, {"timestamp": "2025-12-05T12:35:59.191Z", "date_only": false, "value": "2025-12-05T12:35:59.191704Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "48b3a9c6-07e8-46d9-b2bc-f225c5742156", "url": "https://poliverso.org/objects/0477a01e-c39acbe0-91886c343547fcce"}, {"timestamp": "2025-12-10T00:00:00Z", "date_only": false, "value": "2025-12-10T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-10)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "405772a1-37dc-41ed-968a-1a53cd4f6603"}, {"timestamp": "2025-12-19T12:05:35.735Z", "date_only": false, "value": "2025-12-19T12:05:35.735119Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-93e026d2-cbc088d46bf7c951", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "16461e2b-6bac-487a-acf9-c554b66ff9ca", "url": "https://poliverso.org/objects/0477a01e-93e026d2-cbc088d46bf7c951"}, {"timestamp": "2025-12-23T00:00:00Z", "date_only": false, "value": "2025-12-23T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-23)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "34d5c9ed-f8dd-4375-9af9-c670061e08ba"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-29)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6c7c7933-a95c-4ace-9e89-9c405e70e249"}, {"timestamp": "2025-12-29T00:00:00Z", "date_only": false, "value": "2025-12-29T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-29)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "874cbb05-f196-4ae6-8097-4838ef7e91d0"}, {"timestamp": "2025-12-31T10:06:49.348Z", "date_only": false, "value": "2025-12-31T10:06:49.348596Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/decodedintel.bsky.social/post/3mbbmla3dhf2j", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "be04b33d-1e29-48cc-adc9-2026a0779f66", "url": "https://bsky.app/profile/decodedintel.bsky.social/post/3mbbmla3dhf2j"}, {"timestamp": "2026-01-05T16:15:13Z", "date_only": false, "value": "2026-01-05T16:15:13.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/506fab2f-1a82-5379-9595-5572612ad77d", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8f268d3a-09e8-4200-bb90-243df26151df"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-12)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dd220fe9-61b3-452c-9f73-771908e233ee"}, {"timestamp": "2026-01-12T00:00:00Z", "date_only": false, "value": "2026-01-12T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-12)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a6c3b53d-2e6b-4383-9f68-9a90a018bb85"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-13)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7caf9638-d691-451d-befb-cf5f5aa20ed0"}, {"timestamp": "2026-01-13T00:00:00Z", "date_only": false, "value": "2026-01-13T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-13)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e99f6a2c-98a0-4db2-9800-503e66f3589d"}, {"timestamp": "2026-01-31T13:20:51Z", "date_only": false, "value": "2026-01-31T13:20:51.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/4a720bfcf058fac944d2e65c3125be1c", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7a1a253a-1b25-4f7c-8d78-c875c1e057c8", "url": "https://gist.github.com/alon710/4a720bfcf058fac944d2e65c3125be1c"}, {"timestamp": "2026-02-02T12:25:56.647Z", "date_only": false, "value": "2026-02-02T12:25:56.647634Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19295aeb-29a8-4dd9-b160-efcccd72d5a2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c0293685-2606-4548-8a2e-4ff58d571211", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19295aeb-29a8-4dd9-b160-efcccd72d5a2"}, {"timestamp": "2026-02-02T12:25:56.647Z", "date_only": false, "value": "2026-02-02T12:25:56.647634Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19295aeb-29a8-4dd9-b160-efcccd72d5a2", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "30ad72c9-eb4f-4795-ac3a-c1a59d094f20", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/19295aeb-29a8-4dd9-b160-efcccd72d5a2"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-53770", "field": "timestamps.recorded_at", "uuid": "160f3cbc-a649-483b-9380-4fed2056bb10", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T14:32:46Z", "date_only": false, "value": "2026-02-02T14:32:46+00:00", "kind": "kev", "label": "Status updated", "source": "1a89b78e-f703-45f3-bb86-59eb712668bd", "record": "CVE-2025-53770", "field": "status.status_updated_at", "uuid": "9d0b5efa-7369-4c7b-a448-529e4a837f2e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-02T14:35:17.215Z", "date_only": false, "value": "2026-02-02T14:35:17.215193Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d0b5efa-7369-4c7b-a448-529e4a837f2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7ebf1ad5-2c4f-448b-a1e4-11a490cda926", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d0b5efa-7369-4c7b-a448-529e4a837f2e"}, {"timestamp": "2026-02-02T14:35:17.215Z", "date_only": false, "value": "2026-02-02T14:35:17.215193Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d0b5efa-7369-4c7b-a448-529e4a837f2e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ce6f6168-a262-4db6-a976-3741921b6a23", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9d0b5efa-7369-4c7b-a448-529e4a837f2e"}, {"timestamp": "2026-02-13T19:07:56.860Z", "date_only": false, "value": "2026-02-13T19:07:56.860Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / microsoft", "record": "cve-2025-53770", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-06T10:29:26.758Z", "date_only": false, "value": "2026-03-06T10:29:26.758519Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-1fdfda19-2805a58255f192e9", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d7b00419-5801-4fbe-a996-ae4f794584d8", "url": "https://poliverso.org/objects/0477a01e-1fdfda19-2805a58255f192e9"}, {"timestamp": "2026-03-15T00:00:00Z", "date_only": false, "value": "2026-03-15T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-15)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "834f1de1-c211-44dd-9397-70112368a57f"}, {"timestamp": "2026-03-19T08:02:18.293Z", "date_only": false, "value": "2026-03-19T08:02:18.293668Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/secqube.com/post/3mhfjyf6wma2z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "47803237-0437-4bfe-a78a-5879d28e8052", "url": "https://bsky.app/profile/secqube.com/post/3mhfjyf6wma2z"}, {"timestamp": "2026-03-21T03:00:05Z", "date_only": false, "value": "2026-03-21T03:00:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.theregister.com/2026/03/19/unknown_attackers_exploit_yet_another/", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "599f20bc-414a-4f75-bef2-4c72a165678c", "url": "https://www.theregister.com/2026/03/19/unknown_attackers_exploit_yet_another/"}, {"timestamp": "2026-04-01T12:02:15Z", "date_only": false, "value": "2026-04-01T12:02:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/78293", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6547fb68-646e-4d68-aaff-3cfa66d11069", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #Webshell\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a SharePoint-ToolShell-CVE-2025-53770-Incident-Analysis\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a Zedocun\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-01 11:52:29\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nTechnical analysis of a SharePoint ToolShell (CVE-2025-53770) exploitation attempt involving RCE, webshell deployment, and MachineKey extraction.\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/78293"}, {"timestamp": "2026-04-01T15:00:07Z", "date_only": false, "value": "2026-04-01T15:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/v9uCn_dLujK0z6nWpoAPZrXvhfEaTfJKfYKQA8qCx-Erqh4", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cf8f0ca4-9f67-4b3f-8dfd-304a3ee41fd1"}, {"timestamp": "2026-04-02T00:00:00Z", "date_only": false, "value": "2026-04-02T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-02)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "43631ca8-355a-4d47-ab85-9edc50ed9c26"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": false, "value": "2026-04-03T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-03)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7efea02e-4ffc-417f-92d8-cacb3097302c"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-06)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "28971e2a-416e-4706-8460-9bbfa4c5da19"}, {"timestamp": "2026-04-06T00:00:00Z", "date_only": false, "value": "2026-04-06T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-06)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "514a0778-2704-435e-bcfb-3bf3e7d972d4"}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "enisa-cnw-kev", "record": "CVE-2025-53770", "field": "timestamps.asserted_at", "uuid": "afea1e9f-7b6c-428a-a23f-a89ddb687147", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "enisa-cnw-kev", "record": "CVE-2025-53770", "field": "timestamps.first_seen_at", "uuid": "afea1e9f-7b6c-428a-a23f-a89ddb687147", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-08T00:00:00Z", "date_only": false, "value": "2026-04-08T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "enisa-cnw-kev", "record": "CVE-2025-53770", "field": "status.status_updated_at", "uuid": "afea1e9f-7b6c-428a-a23f-a89ddb687147", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-22T00:00:00Z", "date_only": false, "value": "2026-04-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ea010620-a6e7-4ec4-ba5b-2c5be7ea917c"}, {"timestamp": "2026-05-07T10:52:26.730Z", "date_only": false, "value": "2026-05-07T10:52:26.730136Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a889734d-9f54-4a2b-a5ac-df174bd58f45", "url": "https://poliverso.org/objects/0477a01e-e8c8129d-b09e02c4de9c4f4a"}, {"timestamp": "2026-05-11T00:00:00Z", "date_only": false, "value": "2026-05-11T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-11)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9d50d261-f22c-4aa4-b3f2-97eed35ad16d"}, {"timestamp": "2026-05-14T00:00:00Z", "date_only": false, "value": "2026-05-14T00:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-14)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "557d06dc-89d3-4bb4-b794-549f24f29b34"}, {"timestamp": "2026-06-01T10:37:19Z", "date_only": false, "value": "2026-06-01T10:37:19+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-53770", "field": "timestamps.asserted_at", "uuid": "088137b8-9c2a-45d8-af4b-f0f18b6f9767", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:37:19Z", "date_only": false, "value": "2026-06-01T10:37:19+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-53770", "field": "timestamps.first_seen_at", "uuid": "088137b8-9c2a-45d8-af4b-f0f18b6f9767", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:37:19Z", "date_only": false, "value": "2026-06-01T10:37:19+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-53770", "field": "status.status_updated_at", "uuid": "088137b8-9c2a-45d8-af4b-f0f18b6f9767", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:37:19.166Z", "date_only": false, "value": "2026-06-01T10:37:19.166Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-53770", "field": "evidence.0.details.added_date", "uuid": "088137b8-9c2a-45d8-af4b-f0f18b6f9767", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-02T00:00:00Z", "date_only": false, "value": "2026-06-02T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-02)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "795442eb-c00a-40ac-83e8-6d13a7400d52"}, {"timestamp": "2026-06-05T08:25:26.074Z", "date_only": false, "value": "2026-06-05T08:25:26.074174Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/golangoss.bsky.social/post/3mnjpnkoyh32z", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f14351d6-f86d-4c49-9ae5-be669e54c1a5", "url": "https://bsky.app/profile/golangoss.bsky.social/post/3mnjpnkoyh32z"}, {"timestamp": "2026-06-05T17:01:37Z", "date_only": false, "value": "2026-06-05T17:01:37+00:00", "kind": "kev", "label": "Recorded", "source": "enisa-cnw-kev", "record": "CVE-2025-53770", "field": "timestamps.recorded_at", "uuid": "afea1e9f-7b6c-428a-a23f-a89ddb687147", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-05T17:01:38.148Z", "date_only": false, "value": "2026-06-05T17:01:38.148003Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/afea1e9f-7b6c-428a-a23f-a89ddb687147", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e970ec80-bdc7-42fa-9f6c-2944473041b7", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/afea1e9f-7b6c-428a-a23f-a89ddb687147"}, {"timestamp": "2026-06-05T17:04:14.296Z", "date_only": false, "value": "2026-06-05T17:04:14.296687Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82892979-15e4-4cb2-83f1-771e29f9e78e", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c975a729-8ff2-4749-8f74-aa998a6141aa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/82892979-15e4-4cb2-83f1-771e29f9e78e"}, {"timestamp": "2026-06-19T12:41:46Z", "date_only": false, "value": "2026-06-19T12:41:46+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-53770", "field": "timestamps.recorded_at", "uuid": "088137b8-9c2a-45d8-af4b-f0f18b6f9767", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:42:18.517Z", "date_only": false, "value": "2026-06-19T12:42:18.517431Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/088137b8-9c2a-45d8-af4b-f0f18b6f9767", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e175b3ab-bc3e-4fb8-a568-2485dc0dc2ae", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/088137b8-9c2a-45d8-af4b-f0f18b6f9767"}, {"timestamp": "2026-06-19T12:45:28.787Z", "date_only": false, "value": "2026-06-19T12:45:28.787689Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e7625ba4-d1f4-43f3-b375-e93d2cd88044", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fa7a9578-9fc3-4153-afdd-d7a463f0c272", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e7625ba4-d1f4-43f3-b375-e93d2cd88044"}, {"timestamp": "2026-06-22T00:00:00Z", "date_only": false, "value": "2026-06-22T00:00:00.000000Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-22)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "76333a0f-66a2-4aea-b0b5-52ad5d8547d2"}, {"timestamp": "2026-06-23T14:03:53.956Z", "date_only": false, "value": "2026-06-23T14:03:53.956277Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/402e3d5e-807b-4512-b1e1-187edc643139", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "73269aba-7502-466d-b658-000ee93ee54a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/402e3d5e-807b-4512-b1e1-187edc643139"}, {"timestamp": "2026-06-30T09:23:59.718Z", "date_only": false, "value": "2026-06-30T09:23:59.718630Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/241e3e8c-daee-4758-990e-7cc482d57c81", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "719ae01a-1825-4020-90da-011e8d9c2d81", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/241e3e8c-daee-4758-990e-7cc482d57c81"}, {"timestamp": "2026-07-01T07:18:14.162Z", "date_only": false, "value": "2026-07-01T07:18:14.162570Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/18149507-1873-4ce2-b7ff-3f50dd853e33", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "55e8643a-a2cb-4c60-bf8f-6c80a13aa9da", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/18149507-1873-4ce2-b7ff-3f50dd853e33"}, {"timestamp": "2026-07-04T10:00:07.228Z", "date_only": false, "value": "2026-07-04T10:00:07.228936Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-03)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c4ec36bd-1703-4aef-8796-45a86b72d424"}, {"timestamp": "2026-07-04T10:15:06.264Z", "date_only": false, "value": "2026-07-04T10:15:06.264762Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-03)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "3fba3ace-314b-40c0-94a5-af4bdcf4076c"}, {"timestamp": "2026-07-08T12:33:06.161Z", "date_only": false, "value": "2026-07-08T12:33:06.161057Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mq54us7x4e2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e1c0bbe4-e93a-4e67-b443-e340f6f73e55", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mq54us7x4e2p"}, {"timestamp": "2026-07-09T03:00:06.874Z", "date_only": false, "value": "2026-07-09T03:00:06.874358Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2096", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5ae53fd5-0228-4874-830f-940b6730f775", "url": "https://t.me/brutsecurity/2096"}, {"timestamp": "2026-07-10T00:00:14.424Z", "date_only": false, "value": "2026-07-10T00:00:14.424723Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/2096", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6e0de3f6-c572-4f30-b68e-11e55632810a", "url": "https://t.me/brutsecurity/2096"}, {"timestamp": "2026-07-10T16:15:10.124Z", "date_only": false, "value": "2026-07-10T16:15:10.124473Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/news-events/sharpviewstateking-stealthy-implant-framework", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e7ecac6a-9683-4c11-947d-821014f7aee1", "url": "https://cyber.gc.ca/en/news-events/sharpviewstateking-stealthy-implant-framework"}, {"timestamp": "2026-07-11T12:00:04.065Z", "date_only": false, "value": "2026-07-11T12:00:04.065169Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/brutsecurity/2096", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ce20a704-afa8-4c26-8a28-09b911af934f", "url": "https://t.me/brutsecurity/2096"}, {"timestamp": "2026-07-12T00:00:50.532Z", "date_only": false, "value": "2026-07-12T00:00:50.532298Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/brutsecurity/2096", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "57bd15bc-1bb2-4433-b4e6-ea8f3fb6b947", "url": "https://t.me/brutsecurity/2096"}, {"timestamp": "2026-07-14T10:15:11.070Z", "date_only": false, "value": "2026-07-14T10:15:11.070123Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-13)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "791e5ee0-d08a-4cd2-b498-23adf55f29d3"}, {"timestamp": "2026-07-15T11:00:04.954Z", "date_only": false, "value": "2026-07-15T11:00:04.954855Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/881607", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2ca1cc0b-8007-4ddc-8876-cc51c0213aa4", "url": "https://t.me/breachdetector/881607"}, {"timestamp": "2026-07-15T13:07:21.240Z", "date_only": false, "value": "2026-07-15T13:07:21.240969Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mqos2ijieu2n", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f02ed2d2-859f-4754-9dc0-699a98fef335", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mqos2ijieu2n"}, {"timestamp": "2026-07-16T00:00:20.280Z", "date_only": false, "value": "2026-07-16T00:00:20.280172Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/breachdetector/881607", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "68dd989d-cb1d-4c21-8452-82a9d5bf2fca", "url": "https://t.me/breachdetector/881607"}, {"timestamp": "2026-07-21T14:00:04.865Z", "date_only": false, "value": "2026-07-21T14:00:04.865410Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ArasakaCorporationChannel/183", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b8993738-fd7b-4600-a575-7cd23d36d474", "url": "https://t.me/ArasakaCorporationChannel/183"}, {"timestamp": "2026-07-22T00:00:22.857Z", "date_only": false, "value": "2026-07-22T00:00:22.857164Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ArasakaCorporationChannel/183", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "095f80ad-40e2-4d59-bc2a-0d521f8d8892", "url": "https://t.me/ArasakaCorporationChannel/183"}, {"timestamp": "2026-07-22T05:00:04.819Z", "date_only": false, "value": "2026-07-22T05:00:04.819107Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pphm_HackerNews/1065", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a6abd24a-82d1-4ef3-8d89-1aa9a4cac19d", "url": "https://t.me/pphm_HackerNews/1065"}, {"timestamp": "2026-07-23T00:00:25.350Z", "date_only": false, "value": "2026-07-23T00:00:25.350583Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/pphm_HackerNews/1065", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "47a79b99-5fd1-4edf-93da-e0504cf9d885", "url": "https://t.me/pphm_HackerNews/1065"}, {"timestamp": "2026-07-26T02:00:08.900Z", "date_only": false, "value": "2026-07-26T02:00:08.900616Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/898", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6280f44a-7647-4914-be48-dc46bc82493c", "url": "https://t.me/cyberwarehouse/898"}, {"timestamp": "2026-07-26T02:00:08.939Z", "date_only": false, "value": "2026-07-26T02:00:08.939355Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/903", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "2262ec1d-3d5c-4ced-a583-d80d262877d4", "url": "https://t.me/cyberwarehouse/903"}, {"timestamp": "2026-07-26T02:00:09.027Z", "date_only": false, "value": "2026-07-26T02:00:09.027342Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/886", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c7cd13dc-7f3e-46c1-809d-4263577a6fbc", "url": "https://t.me/cyberwarehouse/886"}, {"timestamp": "2026-07-26T02:00:09.065Z", "date_only": false, "value": "2026-07-26T02:00:09.065108Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/888", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "91258126-c04b-4546-a230-ede403f04e8f", "url": "https://t.me/cyberwarehouse/888"}, {"timestamp": "2026-07-26T02:00:09.102Z", "date_only": false, "value": "2026-07-26T02:00:09.102389Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/890", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cfdce6b7-f332-4349-ba92-ef99dc972183", "url": "https://t.me/cyberwarehouse/890"}, {"timestamp": "2026-07-26T02:00:29.965Z", "date_only": false, "value": "2026-07-26T02:00:29.965217Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/3974", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5ef8f376-05e4-4838-bca8-aae9e869cb0e", "url": "https://t.me/EchelonEyes/3974"}, {"timestamp": "2026-07-26T02:02:58.533Z", "date_only": false, "value": "2026-07-26T02:02:58.533513Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3900", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ce26018c-cb2a-417a-be9a-c0241e3d377f", "url": "https://t.me/Positive_Technologies/3900"}, {"timestamp": "2026-07-27T00:00:07.713Z", "date_only": false, "value": "2026-07-27T00:00:07.713261Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/3974", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "42b90923-4455-4f65-86cd-91a3ce3ee884", "url": "https://t.me/EchelonEyes/3974"}, {"timestamp": "2026-07-27T00:00:31.464Z", "date_only": false, "value": "2026-07-27T00:00:31.464494Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/890", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d749b8d2-5a47-4b65-a130-43327eb35b91", "url": "https://t.me/cyberwarehouse/890"}, {"timestamp": "2026-07-27T00:00:31.498Z", "date_only": false, "value": "2026-07-27T00:00:31.498248Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/888", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "35c96d56-8728-4342-82d6-d6123a0528fe", "url": "https://t.me/cyberwarehouse/888"}, {"timestamp": "2026-07-27T00:00:31.529Z", "date_only": false, "value": "2026-07-27T00:00:31.529709Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberwarehouse/886", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9cc539f7-16f0-49ca-8e94-09f96a36fab5", "url": "https://t.me/cyberwarehouse/886"}, {"timestamp": "2026-07-27T00:00:31.600Z", "date_only": false, "value": "2026-07-27T00:00:31.600738Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberwarehouse/903", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "10286642-efff-4104-a9e5-945dabf4ce8e", "url": "https://t.me/cyberwarehouse/903"}, {"timestamp": "2026-07-27T00:00:31.630Z", "date_only": false, "value": "2026-07-27T00:00:31.630003Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/898", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0dad72f1-2c79-4c93-832c-cf92cbf65984", "url": "https://t.me/cyberwarehouse/898"}, {"timestamp": "2026-07-27T00:01:23.962Z", "date_only": false, "value": "2026-07-27T00:01:23.962148Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Positive_Technologies/3900", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "4b086187-86d2-4b13-826b-f0288adc2ae2", "url": "https://t.me/Positive_Technologies/3900"}, {"timestamp": "2026-07-28T15:00:06.028Z", "date_only": false, "value": "2026-07-28T15:00:06.028405Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Positive_Technologies/3900", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "dfa75ecb-e61f-4773-a790-58040c9be118", "url": "https://t.me/Positive_Technologies/3900"}, {"timestamp": "2026-07-29T00:00:33.924Z", "date_only": false, "value": "2026-07-29T00:00:33.924243Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/Positive_Technologies/3900", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c7d9c9cc-b150-4cd8-8df5-4233107a20f9", "url": "https://t.me/Positive_Technologies/3900"}, {"timestamp": "2026-07-29T09:00:07.758Z", "date_only": false, "value": "2026-07-29T09:00:07.758897Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/redsecurity_co/770", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "98302fac-b3a8-4999-b795-99a039fe6ed3", "url": "https://t.me/redsecurity_co/770"}, {"timestamp": "2026-07-29T12:01:57.026Z", "date_only": false, "value": "2026-07-29T12:01:57.026594Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1259", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "bb8e3170-56ab-4f95-93f1-cf086169c3ec", "url": "https://t.me/cyberdom_business/1259"}, {"timestamp": "2026-07-29T12:01:58.078Z", "date_only": false, "value": "2026-07-29T12:01:58.078092Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/safebdv/1600", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c9f957ed-a6e7-4112-9fda-27a51d9d2b2c", "url": "https://t.me/safebdv/1600"}, {"timestamp": "2026-07-30T00:02:06.559Z", "date_only": false, "value": "2026-07-30T00:02:06.559746Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/redsecurity_co/770", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6acf9466-ded0-4997-8236-fdb964e99d4d", "url": "https://t.me/redsecurity_co/770"}, {"timestamp": "2026-07-30T00:02:07.902Z", "date_only": false, "value": "2026-07-30T00:02:07.902542Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberdom_business/1259", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d9df51a5-11a0-4bb2-a9a2-8f472afd58d7", "url": "https://t.me/cyberdom_business/1259"}, {"timestamp": "2026-07-30T00:02:09.781Z", "date_only": false, "value": "2026-07-30T00:02:09.781229Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/safebdv/1600", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b7563838-8159-43ee-b6eb-869ea9065433", "url": "https://t.me/safebdv/1600"}, {"timestamp": "2026-07-31T10:15:11.022Z", "date_only": false, "value": "2026-07-31T10:15:11.022678Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cd29f1c4-6831-458b-875e-342f6a6239c7"}, {"timestamp": "2026-08-01T19:00:03.536Z", "date_only": false, "value": "2026-08-01T19:00:03.536627Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberdom_business/1259", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "636883ea-1fb4-4534-a09a-8d8fd11c7b3b", "url": "https://t.me/cyberdom_business/1259"}, {"timestamp": "2026-08-01T20:00:05.650Z", "date_only": false, "value": "2026-08-01T20:00:05.650565Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/safebdv/1600", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "acfb00ef-edf9-4e7c-b84d-76bf8bc68628", "url": "https://t.me/safebdv/1600"}, {"timestamp": "2026-08-02T00:00:22.716Z", "date_only": false, "value": "2026-08-02T00:00:22.716392Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberdom_business/1259", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1cad1e7e-2586-4772-8ee1-2d3e37683601", "url": "https://t.me/cyberdom_business/1259"}, {"timestamp": "2026-08-02T01:00:09.683Z", "date_only": false, "value": "2026-08-02T01:00:09.683758Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/safebdv/1600", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e44de2dc-123a-4c01-a1a7-beb62ad99bc0", "url": "https://t.me/safebdv/1600"}, {"timestamp": "2026-08-03T10:53:20.953Z", "date_only": false, "value": "2026-08-03T10:53:20.953993Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cc81629b-867f-4cbe-8158-9086937bdeb4"}, {"timestamp": "2026-08-04T03:55:52.588Z", "date_only": false, "value": "2026-08-04T03:55:52.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2025-53770", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-08-04T03:55:52.588Z", "date_only": false, "value": "2026-08-04T03:55:52.588Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2025-53770", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-08-04T05:16:34.887Z", "date_only": false, "value": "2026-08-04T05:16:34.887", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-53770", "record": "FKIE_CVE-2025-53770", "field": "lastModified"}, {"timestamp": "2026-08-04T12:02:22.344Z", "date_only": false, "value": "2026-08-04T12:02:22.344998Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msaxqizw2f2s", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "b7f09e44-e5e0-455c-b2a5-2987771b2552", "url": "https://bsky.app/profile/vulnsea.com/post/3msaxqizw2f2s"}, {"timestamp": "2026-08-04T13:00:04.802Z", "date_only": false, "value": "2026-08-04T13:00:04.802707Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purpleshift/111", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "43932f8e-d65e-40c7-b0c3-3a0580970fee", "url": "https://t.me/purpleshift/111"}, {"timestamp": "2026-08-04T13:00:17.375Z", "date_only": false, "value": "2026-08-04T13:00:17.375357Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pentestnotes/192", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "eae74aaf-c9e1-447d-8d98-1265b39a6177", "url": "https://t.me/pentestnotes/192"}, {"timestamp": "2026-08-04T14:00:05.827Z", "date_only": false, "value": "2026-08-04T14:00:05.827849Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/GithubRedTeam/96603", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "7ba21cf0-7d4a-476e-9ac8-6063cc564c6f", "url": "https://t.me/GithubRedTeam/96603"}, {"timestamp": "2026-08-04T17:00:04.559Z", "date_only": false, "value": "2026-08-04T17:00:04.559669Z", "kind": "sighting", "label": "Seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "37fa800e-74fe-4394-b2f8-74a5e9816447"}, {"timestamp": "2026-08-05T00:00:26.243Z", "date_only": false, "value": "2026-08-05T00:00:26.243037Z", "kind": "sighting", "label": "Seen", "source": "Telegram/R-K8yexL9h9FqCu7kuwBiYvy86poGzTHuRy3PTR8RVZt5C0", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "417ccf21-f564-49a5-9da5-52201e9ad3aa"}, {"timestamp": "2026-08-05T00:00:28.598Z", "date_only": false, "value": "2026-08-05T00:00:28.598358Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96603", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "e4ada28b-b301-43d2-af27-9e1d94644215", "url": "https://t.me/GithubRedTeam/96603"}, {"timestamp": "2026-08-05T00:00:30.378Z", "date_only": false, "value": "2026-08-05T00:00:30.378241Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/purpleshift/111", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "0462d49d-512b-4d26-a3a3-b3387e2088a8", "url": "https://t.me/purpleshift/111"}, {"timestamp": "2026-08-05T00:00:32.283Z", "date_only": false, "value": "2026-08-05T00:00:32.283824Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/pentestnotes/192", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "f8f8b863-cb64-42c4-8a3a-19b70a589e2e", "url": "https://t.me/pentestnotes/192"}, {"timestamp": "2026-08-06T00:01:01.982Z", "date_only": false, "value": "2026-08-06T00:01:01.982253Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/pentestnotes/192", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c36716f4-dd27-4f26-beba-b2055ffba88d", "url": "https://t.me/pentestnotes/192"}, {"timestamp": "2026-08-11T12:00:03.313Z", "date_only": false, "value": "2026-08-11T12:00:03.313187Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/_gJYzpI-JGWjDWOZAHPi_HmafMvYRh3tePRe7vVgz8w", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "ac6441e1-f4a9-4436-8b5f-bd333d819911"}, {"timestamp": "2026-08-14T10:00:12.005Z", "date_only": false, "value": "2026-08-14T10:00:12.005325Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-13)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "5ba22b32-10d4-4616-8e61-b9658a344958"}, {"timestamp": "2026-08-14T10:15:06.995Z", "date_only": false, "value": "2026-08-14T10:15:06.995010Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-13)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "1649ad8d-86f0-4603-8937-72095dd5c1ce"}, {"timestamp": "2026-08-15T06:00:03.812Z", "date_only": false, "value": "2026-08-15T06:00:03.812870Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityExploit/24810", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "642c5cda-cee6-4600-bd9d-f4bf33ba25f5", "url": "https://t.me/CyberSecurityExploit/24810"}, {"timestamp": "2026-08-22T10:00:15.376Z", "date_only": false, "value": "2026-08-22T10:00:15.376755Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-21)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "fabb0313-a805-41cc-b7c8-56a26e162f6a"}, {"timestamp": "2026-08-22T10:15:05.167Z", "date_only": false, "value": "2026-08-22T10:15:05.167226Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "313fce6d-8ee8-45fa-aefe-0ead75c67984"}, {"timestamp": "2026-08-26T10:30:36.708Z", "date_only": false, "value": "2026-08-26T10:30:36.708824Z", "kind": "sighting", "label": "Seen", "source": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "55acbd2b-c83d-44c4-8bf7-0a4bdbee10c5", "url": "https://poliverso.org/objects/0477a01e-66d81917-442e1a3db5444e7f"}, {"timestamp": "2026-08-27T12:00:06.375Z", "date_only": false, "value": "2026-08-27T12:00:06.375380Z", "kind": "sighting", "label": "Seen", "source": "Telegram/1RDfiYvrsmnO1GwdulIpRqcmzx_QFBcCsg-HKcZQ14O2mKw", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "68eb2428-e33f-4485-9313-addfb398a5aa"}, {"timestamp": "2026-08-28T00:00:42.732Z", "date_only": false, "value": "2026-08-28T00:00:42.732872Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/1RDfiYvrsmnO1GwdulIpRqcmzx_QFBcCsg-HKcZQ14O2mKw", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "33056ed6-7f59-4bb1-b143-4dd5f6826a80"}, {"timestamp": "2026-08-28T10:00:08.118Z", "date_only": false, "value": "2026-08-28T10:00:08.118169Z", "kind": "sighting", "label": "Seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "338f0c5c-5555-435b-b191-e1ff75a86fce"}, {"timestamp": "2026-08-31T10:15:13.891Z", "date_only": false, "value": "2026-08-31T10:15:13.891858Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-30)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "8f65eea8-7e3f-408a-a725-99f923c70b05"}, {"timestamp": "2026-09-02T01:00:12.122Z", "date_only": false, "value": "2026-09-02T01:00:12.122690Z", "kind": "sighting", "label": "Seen", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9270b0ee-dcc6-47a0-854b-4879f160abb4"}, {"timestamp": "2026-09-03T00:00:54.273Z", "date_only": false, "value": "2026-09-03T00:00:54.273819Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/XmAeLpCnDR7fQWWs5ZgvKZOpllMiY_5ATwXxwRV07Zq46AA", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "cf302f9b-66f2-4e21-8eac-05a88b864fe2"}, {"timestamp": "2026-09-03T18:00:06.253Z", "date_only": false, "value": "2026-09-03T18:00:06.253766Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/itrussia_news/66", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "6a3e041e-bc2e-4327-b70a-c364c8d00f84", "url": "https://t.me/itrussia_news/66"}, {"timestamp": "2026-09-04T00:00:39.541Z", "date_only": false, "value": "2026-09-04T00:00:39.541884Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itrussia_news/66", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c948e9cb-06c9-4ed8-968c-7e5ea069aacf", "url": "https://t.me/itrussia_news/66"}, {"timestamp": "2026-09-09T05:00:16.085Z", "date_only": false, "value": "2026-09-09T05:00:16.085233Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1687", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "9b87e707-f172-4e0d-922f-107d81ab140a", "url": "https://t.me/Intel_Encyclopedia/1687"}, {"timestamp": "2026-09-10T00:00:35.134Z", "date_only": false, "value": "2026-09-10T00:00:35.134648Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/Intel_Encyclopedia/1687", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "a58cfa17-2985-406a-88e3-bfbed6f92ea5", "url": "https://t.me/Intel_Encyclopedia/1687"}, {"timestamp": "2026-09-13T10:15:07.859Z", "date_only": false, "value": "2026-09-13T10:15:07.859692Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-12)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "c39cc91f-a7a8-471e-b47f-35f83ef3da1e"}, {"timestamp": "2026-09-14T10:15:07.584Z", "date_only": false, "value": "2026-09-14T10:15:07.584181Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-13)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "88416f45-3035-4b7b-9b3a-d2ac4cd29fee"}, {"timestamp": "2026-09-22T07:00:09.433Z", "date_only": false, "value": "2026-09-22T07:00:09.433206Z", "kind": "sighting", "label": "Seen", "source": "Telegram/QY4rIqioC-K1Cn2y-29Xdu83ice7XQqIGW6pp0692hd96to", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "61dc310c-52ec-484c-a543-9247846e8ff3"}, {"timestamp": "2026-09-22T10:15:08.270Z", "date_only": false, "value": "2026-09-22T10:15:08.270732Z", "kind": "sighting", "label": "Exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-21)", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d32255fc-d70a-44e1-b56e-f1142edd1477"}, {"timestamp": "2026-09-23T00:00:13.950Z", "date_only": false, "value": "2026-09-23T00:00:13.950857Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/QY4rIqioC-K1Cn2y-29Xdu83ice7XQqIGW6pp0692hd96to", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "d0f66889-842e-4b33-aa21-20e1c2c9308b"}, {"timestamp": "2026-10-03T07:11:40.686Z", "date_only": false, "value": "2026-10-03T07:11:40.686622Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwxdi5xok722", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "87415eae-db8f-4859-8f90-91f79ec6de15", "url": "https://bsky.app/profile/securitycyebruk.bsky.social/post/3mwxdi5xok722"}, {"timestamp": "2026-10-03T07:23:00.998Z", "date_only": false, "value": "2026-10-03T07:23:00.998484Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/potato.software/post/3mwxe4gkuwp2p", "record": "CVE-2025-53770", "field": "creation_timestamp", "uuid": "27d21cf3-f382-4101-bf74-5743ec106b47", "url": "https://bsky.app/profile/potato.software/post/3mwxe4gkuwp2p"}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00+00:00", "kind": "kev", "label": "Last seen", "source": "shadowserver", "record": "CVE-2025-53770", "field": "timestamps.last_seen_at", "uuid": "18149507-1873-4ce2-b7ff-3f50dd853e33", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": true, "value": "2026-10-23", "kind": "kev", "label": "Observation date", "source": "shadowserver", "record": "CVE-2025-53770", "field": "evidence.0.details.observation_date", "uuid": "18149507-1873-4ce2-b7ff-3f50dd853e33", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-23T00:00:00Z", "date_only": false, "value": "2026-10-23T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "shadowserver", "record": "CVE-2025-53770", "field": "status.status_updated_at", "uuid": "18149507-1873-4ce2-b7ff-3f50dd853e33", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-10-25T01:00:01Z", "date_only": false, "value": "2026-10-25T01:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "shadowserver", "record": "CVE-2025-53770", "field": "timestamps.recorded_at", "uuid": "18149507-1873-4ce2-b7ff-3f50dd853e33", "status": {"status_reason": "confirmed", "exploited": true}}]}