CVE-2025-53770
In 4 briefs, most recently 23 October 2025. RSS for this tag
Published 2025-07-20
Learn more: DanSec Explorer ↗ NVD ↗ CVE.org ↗ CISA KEV ↗
Known exploited (CISA KEV)
Microsoft SharePoint Deserialization of Untrusted Data Vulnerability.
Added 2025-07-20 · used in ransomware campaigns
Coverage in DanSec Daily
- Magento/Adobe Commerce SessionReaper (CVE-2025-54236) mass compromise, MuddyWater Phoenix backdoor campaign, and SharePoint ToolShell exploitation by Chinese …
- Pandora and Cisco data breaches, Android and Adobe AEM zero-days, and SonicWall firewall attacks by ransomware gangs in this August 2025 brief.
- Dell confirms World Leaks breach of its test lab and CrushFTP zero-day exposes 1,000+ servers; also SharePoint ToolShell zero-days hit US agencies, plus Dior …
- SharePoint zero-days (CVE-2025-53770/53771) breached 75+ servers, 3,500 sites ran stealth crypto miners, and npm packages were trojanized via phishing.