CVE-2025-53690-POC

Sitecore 关键反序列化 RCE CVE-2025-53690 PoC 和 Nuclei 模板 简短摘要 此仓库托管了针对 CVE-2025-53690 Sitecore 的检测模板及辅助材料。内含的 Nuclei 模板可帮助扫描配置方式可能易受我文章中所述问题影响的 Sitecore 实例（实验室复现分析与 PoC）。本仓库旨在帮助防御者、事件响应人员和审计人员快速识别其资产中可能受影响的系统。 ⚠️ 仅限负责任使用。 请勿扫描或测试你不拥有或未获得明确书面授权的系统。未经授权的扫描可能违法并造成损害。请阅读下方的“负责任披露与法律”部分。 快速开始 — 使用 Nuclei 扫描...

China-Linked APT Exploited Sitecore Zero-Day in Critical Infrastructure Intrusion

A threat actor likely aligned with China has been observed targeting critical infrastructure sectors in North America since at least last year. Cisco Talos, which is tracking the activity under the name UAT-8837 , assessed it to be a China-nexus advanced persistent threat APT actor with medium...

Exploit for Deserialization of Untrusted Data in Sitecore Experience_Commerce

PoC exploit for CVE-2025-53690, a vulnerability in a .NET framew...

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

Federal Civilian Executive Branch FCEB agencies are being advised to update their Sitecore instances by September 25, 2025, following the discovery of a security flaw that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2025-53690 , carries a CVSS score of 9.0 ou...