The Reveal Platform
Intel Name: Potential sharepoint toolshell cve-2025-53770 exploitation – file create
Date of Scan: July 29, 2025
Impact: High
Summary: Detects the creation of files like spinstall0.aspx, which may suggest successful exploitation of CVE-2025-53770—a zero-day remote code execution vulnerability in SharePoint.
