SharePoint ToolShell CVE-2025-53770 Exploitation - Web IIS

ᴅᴜᴛᴄʜʙᴏʏ 😎@dutchboy

•updated Oct 23, 2025•1•33

Detects potential exploitation of the critical SharePoint “ToolShell” zero‑day vulnerability (CVE‑2025‑53770), in which attackers leverage unsafe deserialization of untrusted data in SharePoint’s ToolPane.aspx endpoint to achieve unauthenticated remote code execution via IIS worker process behavior.