Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2025-53770 — Unauthenticated remote code execution exploit for Microsoft SharePoint Server 2019 via unsafe .NET deserialization in ToolPane.aspx. Python-based PoC targeting Scorecard:ExcelDataSet control. | Kitploit
Tools/GitHubGitHub/agampreet-singh/cve-2025-53770
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingRed TeamingPayload Development
GitHubagampreet-singh/cve-2025-53770

CVE-2025-53770

Unauthenticated remote code execution exploit for Microsoft SharePoint Server 2019 via unsafe .NET deserialization in ToolPane.aspx. Python-based PoC targeting Scorecard:ExcelDataSet control.

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share
View Repository
1 year agoNot yet reviewed

CVE-2025-53770 – Microsoft SharePoint Server 2019 Unauthenticated RCE via Deserialization

CVE-2025-53770 RCE Status

Exploit Author: Agampreet Singh
Tool: RedRoot (https://github.com/Agampreet-Singh/RedRoot)
Date: August 7, 2025
Tested On: SharePoint Server 2019 (v16.0.10383.20020) on Windows Server 2019
CVE-ID: CVE-2025-53770
Vulnerability Type: Unauthenticated Remote Code Execution (RCE)
Attack Vector: Unsafe .NET deserialization via Scorecard:ExcelDataSet in ToolPane.aspx

🧠 Summary

An unauthenticated remote code execution vulnerability was discovered in Microsoft SharePoint Server 2019, specifically within the ToolPane.aspx endpoint. This flaw arises from unsafe deserialization of the Scorecard:ExcelDataSet control, which allows attackers to inject a GZip-compressed and Base64-encoded .NET object that gets deserialized server-side, leading to arbitrary code execution.

⚙️ Affected Version

  • Microsoft SharePoint Server 2019
    Version: 16.0.10383.20020

💥 Exploitation

Prerequisites

  • No authentication required
  • Target must be running a vulnerable SharePoint version
  • Python 3.x

Exploit Usage

root@kitploit:~
python3 cve-2025-53770.py https://target-sharepoint.com
Download Tool