24 matches found
CVE-2025-59287-PoC
CVE-2025-59287 / CVE-2023-35317 PoC Inside CVE-2025-59287: SoapFormatter RCE in WSUS: https://shellcode.blog/wsus-cve-2025-59287-investigation/ This software has been created purely for the purposes of academic research and for the development of effective defensive techniques, and is not intende...
CVE-2025-59287
This repository does not have a README...
WSUSResponder
🧰 WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT 🎯 Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...
Windows Server Update Service - Insecure Deserialization
Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...
WSUS-CVE-2025-59287
WSUS-CVE-2025-59287...
wsus_CVE-2025-59287
This repository does not have a README...
Honeypot-for-CVE-2025-59287-WSUS
wsus-decoy Defensive proof of concept decoy for CVE-2025-59287 WSUS. The decoy emulates WSUS web endpoints on ports 8530 and 8531, captures full HTTP request bodies and headers, stores evidence for forensic analysis, and includes a Windows test harness to validate endpoint, file and process...
CVE-2025-59287-hawktrace
This repository does not have a README...
WSUSploit.NET
WSUSploit.NET C PoC for CVE-2025-59287 Basically a port of the initial public PoC. Warning, will mess up WSUS. Disclaimer: This is for ethical and legal security testing, research, and education. Do not use any of this software in any unauthorized manner. Defensive Considerations These HTTP calls...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-59287 - WSUS / SCCM RCE Based on the original exploi...
Metasploit Wrap-Up 11/14/2025
It has “SUS” in the name, what did you expect? This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service WSUS vulnerability that allows for SYSTEM level remote code execution. Documented among the multiple recent zero-days in Windows, the...
Exploit for Deserialization of Untrusted Data in Microsoft
🚨 ALERTA CRÍTICA DE CIBERSEGURIDAD: RCE en WSUS CVE-2025-5928...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2025-59287-WSUS powershell version of hawktrace POC exploi...
Exploit for CVE-2025-59287
CVE-2025-59287 WSUS RCE Exploit Automated exploit for Windows...
KB5070882: Windows Server 2016 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
KB5070887: Windows Server 2012 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
KB5070883: Windows Server 2019 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
KB5070886: Windows Server 2012R2 WSUS RCE (CVE-2025-59287)
The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service - Circumvention of a security measure - Manipulation of data - Execution of arbitrary code user privilege...
