CVE-2025-59287-PoC

CVE-2025-59287 / CVE-2023-35317 PoC Au cœur de CVE-2025-59287 : RCE via SoapFormatter dans WSUS : https://shellcode.blog/wsus-cve-2025-59287-investigation/ Ce logiciel a été créé uniquement à des fins de recherche académique et de développement de techniques défensives efficaces, et n'est pas...

wsus_CVE-2025-59287

Ce depot n’a pas de fichier README...

WSUSResponder

🧰 WSUSResponder Version : 1.0.1 Auteur : RZA / IT Operations Licence :MIT 🎯 Objectif Le module WSUSResponder fournit un ensemble d’outils PowerShell pour répondre rapidement à la vulnérabilité critique CVE-2025-59287 , une faille d’exécution de code à distance RCE affectant Windows Server Update...

Honeypot-for-CVE-2025-59287-WSUS

wsus-decoy Preuve de concept défensive leurre pour CVE-2025-59287 WSUS. Le leurre émule les points de terminaison web WSUS sur les ports 8530 et 8531, capture l'intégralité des corps de requêtes HTTP et des en-têtes, stocke les preuves pour analyse forensique, et inclut un harnais de test Windows...

CVE-2025-59287-hawktrace

Ce depot n’a pas de fichier README...

WSUSploit.NET

WSUSploit.NET PoC en C pour CVE-2025-59287 Essentiellement un portage du PoC public initial. Attention, cela perturbera WSUS. Avertissement : Ceci est destiné aux tests de sécurité éthiques et légaux, à la recherche et à l'éducation. N'utilisez aucun de ces logiciels de manière non autorisée...

CVE-2025-59287

Ce depot n’a pas de fichier README...

WSUS-CVE-2025-59287

WSUS-CVE-2025-59287...

Windows Server Update Service - Insecure Deserialization

Windows Server Update Service contains an insecure deserialization vulnerability caused by deserialization of untrusted data. An unauthorized attacker with network access can exploit this to execute arbitrary code remotely, potentially leading to full system compromise. id: CVE-2025-59287 info:...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-59287 - WSUS / SCCM RCE Based on the original exploi...

Metasploit Wrap-Up 11/14/2025

It has “SUS” in the name, what did you expect? This week’s release features the much-hyped CVE-2025-59287, a Critical-Severity Windows Server Update Service WSUS vulnerability that allows for SYSTEM level remote code execution. Documented among the multiple recent zero-days in Windows, the...

Exploit for Deserialization of Untrusted Data in Microsoft

🚨 ALERTA CRÍTICA DE CIBERSEGURIDAD: RCE en WSUS CVE-2025-5928...

Exploit for Deserialization of Untrusted Data in Microsoft

CVE-2025-59287-WSUS powershell version of hawktrace POC exploi...

⚡ Weekly Recap: WSUS Exploited, LockBit 5.0 Returns, Telegram Backdoor, F5 Breach Widens

Security, trust, and stability — once the pillars of our digital world — are now the tools attackers turn against us. From stolen accounts to fake job offers, cybercriminals keep finding new ways to exploit both system flaws and human behavior. Each new breach proves a harsh truth: in...

Exploit for CVE-2025-59287

CVE-2025-59287 WSUS RCE Exploit Automated exploit for Windows...

KB5070883: Windows Server 2019 WSUS RCE (CVE-2025-59287)

The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...

KB5070882: Windows Server 2016 WSUS RCE (CVE-2025-59287)

The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...

KB5070887: Windows Server 2012 WSUS RCE (CVE-2025-59287)

The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...

KB5070886: Windows Server 2012R2 WSUS RCE (CVE-2025-59287)

The remote Windows host is missing security update 5070879, which addresses a remote code execution vulnerability in Windows Server Update Services WSUS. This plugin identifies vulnerable systems by performing the following checks: 1. Validates the host is an affected Windows Server instance. 2...

Vulnerabilities fixed in Microsoft Windows

Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to carry out attacks that can lead to the following categories of damage: - Denial-of-Service - Circumvention of a security measure - Manipulation of data - Execution of arbitrary code user privilege...