{"metadata": {"vulnerability": "CVE-2025-11953", "count": 124, "kinds": {"milestone": 9, "sighting": 91, "kev": 11, "other": 13}}, "data": [{"timestamp": "2025-10-20T10:34:44.694Z", "date_only": false, "value": "2025-10-20T10:34:44.694Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-11953", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-11-03T16:35:07.168Z", "date_only": false, "value": "2025-11-03T16:35:07.168Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-11953", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-11-03T17:15:32Z", "date_only": false, "value": "2025-11-03T17:15:32Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-399J-VXMF-HJVR", "record": "GHSA-399J-VXMF-HJVR", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-11-03T17:15:32.677Z", "date_only": false, "value": "2025-11-03T17:15:32.677", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11953", "record": "FKIE_CVE-2025-11953", "field": "published"}, {"timestamp": "2025-11-03T18:22:40.087Z", "date_only": false, "value": "2025-11-03T18:22:40.087566Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4qnai4ku42b", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "81251cc7-aa23-45dd-bfe2-6aa13a03df12", "url": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4qnai4ku42b"}, {"timestamp": "2025-11-03T18:31:52Z", "date_only": false, "value": "2025-11-03T18:31:52Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-399J-VXMF-HJVR", "record": "GHSA-399J-VXMF-HJVR", "field": "published"}, {"timestamp": "2025-11-03T19:10:09.928Z", "date_only": false, "value": "2025-11-03T19:10:09.928Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / JFROG", "record": "CVE-2025-11953", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-03T20:05:36.885Z", "date_only": false, "value": "2025-11-03T20:05:36.885804Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qsyf4flbt2", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "3f304edc-2b26-47a8-9bfd-de8d3824263d", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4qsyf4flbt2"}, {"timestamp": "2025-11-04T15:13:16.313Z", "date_only": false, "value": "2025-11-04T15:13:16.313577Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m4st4p3gtq25", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "d13c6860-3c6b-43fb-bcf9-41665376d01b", "url": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3m4st4p3gtq25"}, {"timestamp": "2025-11-04T15:15:21.928Z", "date_only": false, "value": "2025-11-04T15:15:21.928355Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/115492082236490434", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "6f6e8e4a-0be5-448e-883f-dc41ee087cac", "url": "https://infosec.exchange/users/cR0w/statuses/115492082236490434"}, {"timestamp": "2025-11-04T15:24:32.650Z", "date_only": false, "value": "2025-11-04T15:24:32.650387Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3m4stqvizsw2h", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "4cae40c9-7fc6-4531-a10d-7e9d8aeac49f", "url": "https://bsky.app/profile/r-netsec.bsky.social/post/3m4stqvizsw2h"}, {"timestamp": "2025-11-04T16:44:01.696Z", "date_only": false, "value": "2025-11-04T16:44:01.696706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/packetstorm.bsky.social/post/3m4sy6zawkm2o", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "041af68e-8df8-4ad1-b8fa-c856716d5595", "url": "https://bsky.app/profile/packetstorm.bsky.social/post/3m4sy6zawkm2o"}, {"timestamp": "2025-11-04T16:52:07.043Z", "date_only": false, "value": "2025-11-04T16:52:07.043585Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4synchpuwl2", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "f5c1ee60-25cd-4d62-a071-972f8595776f", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4synchpuwl2"}, {"timestamp": "2025-11-04T16:57:35Z", "date_only": false, "value": "2025-11-04T16:57:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://sploitus.com/exploit?id=EB32BF5D-48E5-5DE2-83F3-9C91BA2F4414", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "00b1cc47-a49a-478d-8a66-289fd4c6fabf", "url": "https://sploitus.com/exploit?id=EB32BF5D-48E5-5DE2-83F3-9C91BA2F4414"}, {"timestamp": "2025-11-04T17:01:17Z", "date_only": false, "value": "2025-11-04T17:01:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/Darkcrai86/7561d0ae4afc1fb3217815272dabbe99", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "330942b6-a77b-4d42-a9d2-9c962697188f", "url": "https://gist.github.com/Darkcrai86/7561d0ae4afc1fb3217815272dabbe99"}, {"timestamp": "2025-11-04T17:51:08.211Z", "date_only": false, "value": "2025-11-04T17:51:08.211358Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4t3vxqt7222", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "3f51e9e9-796c-4628-90b4-115a6ce52637", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4t3vxqt7222"}, {"timestamp": "2025-11-04T17:58:50Z", "date_only": false, "value": "2025-11-04T17:58:50.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/58307", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "8d623926-680a-4777-9b30-72e25d0f817b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-11953 demonstration: Critical RCE vulnerability in React Native CLI (CVSS 9.8). Educational security research with proof-of-concept exploits and mitigation strategies.\nURL\uff1ahttps://github.com/SaidBenaissa/cve-2025-11953-vulnerability-demo\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/58307"}, {"timestamp": "2025-11-04T18:18:19.372Z", "date_only": false, "value": "2025-11-04T18:18:19.372610Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3m4t5hmlfno2s", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "ccae69b5-5663-4c7d-ad59-5f5b6d24e2d9", "url": "https://bsky.app/profile/buherator.bsky.social/post/3m4t5hmlfno2s"}, {"timestamp": "2025-11-04T18:19:41.810Z", "date_only": false, "value": "2025-11-04T18:19:41.810310Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/mttaggart/statuses/115492807047537293", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "fb1f9615-fef3-4fad-8350-98a794e64cf9", "url": "https://infosec.exchange/users/mttaggart/statuses/115492807047537293"}, {"timestamp": "2025-11-04T19:00:11Z", "date_only": false, "value": "2025-11-04T19:00:11.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/OWrNUlIhA1Fy5RGPDoJGtHppWHVQuRDi4DpJlafTsQFubiQ", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "8f8f79f1-8586-4a37-b02a-1499c7577380"}, {"timestamp": "2025-11-04T19:51:18Z", "date_only": false, "value": "2025-11-04T19:51:18.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/information_security_channel/54401", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "9bcd5657-01ac-478d-ab4f-fa986ce4669b", "content": "Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks\nhttps://www.securityweek.com/critical-flaw-in-popular-react-native-npm-package-exposes-developers-to-attacks/\n\nArbitrary command/code execution has been demonstrated through the exploitation of CVE-2025-11953 on Windows, macOS and Linux.\u00a0\nThe post Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks (https://www.securityweek.com/critical-flaw-in-popular-react-native-npm-package-exposes-developers-to-attacks/) appeared first on SecurityWeek (https://www.securityweek.com/).", "url": "https://t.me/information_security_channel/54401"}, {"timestamp": "2025-11-04T21:00:05Z", "date_only": false, "value": "2025-11-04T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WrQaMTevy7WSUORikUxdrSPBs99wZo-jtxg57p3kMuQ3eM0", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "2d5dcde5-70ec-4f71-8155-8626c3dd413b"}, {"timestamp": "2025-11-05T03:29:09.622Z", "date_only": false, "value": "2025-11-05T03:29:09.622421Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4u4ak5xc22d", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "d4da1f47-63c6-46d7-aa52-dd3dd201e644", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3m4u4ak5xc22d"}, {"timestamp": "2025-11-05T04:46:16.251Z", "date_only": false, "value": "2025-11-05T04:46:16.251742Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uaj6hftbp2", "record": "cve-2025-11953", "field": "creation_timestamp", "uuid": "a283b137-86d4-40a5-8857-392015b94a73", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4uaj6hftbp2"}, {"timestamp": "2025-11-05T05:56:15.426Z", "date_only": false, "value": "2025-11-05T05:56:15.426880Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3m4uehn53rd2s", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "044fd78d-f418-4f87-87a6-9f31003eab41", "url": "https://bsky.app/profile/opsmatters.com/post/3m4uehn53rd2s"}, {"timestamp": "2025-11-05T07:51:21.821Z", "date_only": false, "value": "2025-11-05T07:51:21.821255Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/eyalestrin.bsky.social/post/3m4ukvhj73q2b", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "93e34f59-d945-467f-ad81-1b8f92310b7a", "url": "https://bsky.app/profile/eyalestrin.bsky.social/post/3m4ukvhj73q2b"}, {"timestamp": "2025-11-05T09:13:10Z", "date_only": false, "value": "2025-11-05T09:13:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/58391", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "1b426a30-edee-4cc4-9273-bcf9948a1ef4", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-11953\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-11953\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/58391"}, {"timestamp": "2025-11-05T10:05:03Z", "date_only": false, "value": "2025-11-05T10:05:03.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/disponibile-poc-pubblico-per-lo-sfruttamento-della-cve-2025-11953", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "652b406f-945f-49ab-92d6-0d53ab7096ad", "url": "https://www.acn.gov.it/portale/w/disponibile-poc-pubblico-per-lo-sfruttamento-della-cve-2025-11953"}, {"timestamp": "2025-11-05T15:00:12Z", "date_only": false, "value": "2025-11-05T15:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/H97MW8DcOQ0HQ2edqbF4Ukf6930T9O-KaahGicp1PWMI3n4", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "d3750473-afb3-4b0f-9f3b-36bc05b0025e"}, {"timestamp": "2025-11-05T16:22:04.908Z", "date_only": false, "value": "2025-11-05T16:22:04.908685Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m4vhgo34es2i", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "e495eaf3-2607-4058-9fe3-e5be4f75c7b8", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3m4vhgo34es2i"}, {"timestamp": "2025-11-06T02:17:55.228Z", "date_only": false, "value": "2025-11-06T02:17:55.228361Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3m4wiq4xazw2o", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "a85f1c3a-4f5d-4486-804d-619e66381670", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3m4wiq4xazw2o"}, {"timestamp": "2025-11-06T05:11:56.244Z", "date_only": false, "value": "2025-11-06T05:11:56.244635Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/happenstuff.com/post/3m4wsiqceos2b", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "bb3db54d-5ca1-4093-b488-36cb3e3e33d1", "url": "https://bsky.app/profile/happenstuff.com/post/3m4wsiqceos2b"}, {"timestamp": "2025-11-06T12:33:58.323Z", "date_only": false, "value": "2025-11-06T12:33:58.323012Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3m4xl5pmzv22e", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "6be9f249-bd59-4f3f-8bcf-cc65b7e3468f", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3m4xl5pmzv22e"}, {"timestamp": "2025-11-06T16:53:13.914Z", "date_only": false, "value": "2025-11-06T16:53:13.914835Z", "kind": "sighting", "label": "Seen", "source": "https://s.ovalerio.net/users/dethos/statuses/115503790140404300", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "26b15f67-4ab5-427e-9b13-9a60c53e926c", "url": "https://s.ovalerio.net/users/dethos/statuses/115503790140404300"}, {"timestamp": "2025-11-06T18:08:03.237Z", "date_only": false, "value": "2025-11-06T18:08:03.237934Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4y5t3nh3s25", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "5ded8c05-2b96-450b-a6fa-39f0fffb7add", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3m4y5t3nh3s25"}, {"timestamp": "2025-11-06T21:40:26.022Z", "date_only": false, "value": "2025-11-06T21:40:26.022354Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4yjou7nks2g", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "34388cbd-4556-462a-9745-ed26ebaf63ac", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m4yjou7nks2g"}, {"timestamp": "2025-11-07T14:40:13.368Z", "date_only": false, "value": "2025-11-07T14:40:13.368148Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3m52cofmezy2q", "record": "cve-2025-11953", "field": "creation_timestamp", "uuid": "26f2c781-8e14-4956-b0b3-f8a18750a3f3", "url": "https://bsky.app/profile/cyberhub.blog/post/3m52cofmezy2q"}, {"timestamp": "2025-11-07T20:49:45.375Z", "date_only": false, "value": "2025-11-07T20:49:45.375017Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/geeknik.bsky.social/post/3m52xd6gfaf2k", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "24913c6a-9a77-4800-bc15-c11cee0e3586", "url": "https://bsky.app/profile/geeknik.bsky.social/post/3m52xd6gfaf2k"}, {"timestamp": "2025-11-08T05:54:05Z", "date_only": false, "value": "2025-11-08T05:54:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/notlukatsky/7302", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "3803944d-aa5c-414f-a8ae-51011e5dd477", "content": "CVE-2025-11953 \u2014 unauth RCE \u0438\u0437-\u0437\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0439 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 React Native\n#CVE #RCE #PoC #developer #dev #metro #react #ReactNative\n\nMetro Development Server, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0432 React Native CLI, \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u043b\u0443\u0448\u0430\u0435\u0442 \u0432\u0441\u0435 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b (0.0.0.0), \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439. \u0412 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432\u0441\u0442\u0440\u043e\u0435\u043d \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 POST /open-url, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 JSON \u0441 \u043f\u043e\u043b\u0435\u043c url. \u0417\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u0433\u043e \u043f\u043e\u043b\u044f \u043d\u0430\u043f\u0440\u044f\u043c\u0443\u044e \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e open(url) \u0438\u0437 npm-\u043f\u0430\u043a\u0435\u0442\u0430 open (\u0432\u0435\u0440\u0441\u0438\u044f 6.4.0), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430 Windows \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 cmd.exe \u0431\u0435\u0437 \u044d\u043a\u0440\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0441 \u043f\u043e\u043b\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0437\u0430\u043f\u0443\u0441\u043a calc.exe \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u0444\u0430\u0439\u043b\u0430 htb-easy-lol.txt.\n\n\u041d\u0430 Linux \u0438 macOS open \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b xdg-open \u0438 open \u0431\u0435\u0437 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f shell, \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u044b \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b, \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0440\u044f\u043c\u043e\u0439 command injection \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u0435\u043d. \u0414\u043b\u044f \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434 \u043d\u0430 \u044d\u0442\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0442\u0440\u0435\u0431\u0443\u044e\u0442\u0441\u044f \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0438\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 URI-\u0441\u0445\u0435\u043c, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a \u0437\u0430\u043f\u0443\u0441\u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 file://.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e React Native CLI \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442 Metro Development Server, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 open-\u043f\u0430\u043a\u0435\u0442 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0438 /open-url, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u043f\u0443\u0442\u044c \u043a \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0440\u0435\u0434\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438. \u042d\u0442\u043e \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e, \u0442\u0430\u043a \u043a\u0430\u043a dev-\u0441\u0435\u0440\u0432\u0435\u0440 \u0432 \u0440\u044f\u0434\u0435 \u0441\u043b\u0443\u0447\u0430\u0435\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0441\u0435\u0442\u0435\u0439 \u0438 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0431\u0435\u0437 \u0437\u0430\u0449\u0438\u0442\u044b. \u041f\u0440\u0438\u0437\u043d\u0430\u0439\u0442\u0435\u0441\u044c, \u0434\u0435\u043b\u0430\u043b\u0438 \u0436\u0435 \u043f\u0440\u043e\u0435\u043a\u0442\u044b \u043d\u0430 5 \u043c\u0438\u043d\u0443\u0442 \u0438 \u043f\u043e\u0442\u043e\u043c \u044d\u0442\u043e \u0432\u0438\u0441\u0435\u043b\u043e \u043c\u0435\u0441\u044f\u0446 \u0432 \u043f\u0440\u043e\u0434\u0435?)\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0430\u043a\u0435\u0442: @react-native-community/cli-server-api \u0438 @react-native-community/cli\n\u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: 4.8.0 \u2014 20.0.0-alpha.2\nCVSS: 9.8\n\n\u27a1\ufe0f\u041f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0430\u0442\u0430\u043a\u0438\n- \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 POST-\u0437\u0430\u043f\u0440\u043e\u0441\nPOST /open-url HTTP/1.1\nHost: vulnerable-dev-server:8081\nContent-Type: application/json\nContent-Length: \n\n{\n  \"url\": \"calc.exe\"\n}\n- Metro \u0441\u0435\u0440\u0432\u0435\u0440, \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0439 \u0438\u0437 \u0432\u043d\u0435\u0448\u043d\u0435\u0439 \u0441\u0435\u0442\u0438, \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442 \u0437\u0430\u043f\u0440\u043e\u0441.\n- \u0412\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u044e\u0442\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e open(), \u0432\u044b\u0437\u044b\u0432\u0430\u044e\u0449\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0431\u0435\u0437 \u0437\u0430\u0449\u0438\u0442\u044b.\n- \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u2014 \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u043e\u0442\u043a\u0440\u044b\u0442\u044c calc.exe \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0444\u0430\u0439\u043b pwned.txt.\n\n\u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b npm list @react-native-community/cli-server-api \u0438 \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f \u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438.\n\n\u27a1\ufe0f\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438\n- \u0421\u0440\u043e\u0447\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 20.0.0 \u0438\u043b\u0438 \u0432\u044b\u0448\u0435, \u0433\u0434\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430.\n- \u0415\u0441\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c Metro \u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u043e\u0439 \u043a localhost (npx react-native start --host 127.0.0.1), \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u0438\u0437\u0432\u043d\u0435.\n- \u041f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0430\u0443\u0434\u0438\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0446\u0435\u043f\u043e\u0447\u0435\u043a \u043f\u043e\u0441\u0442\u0430\u0432\u043e\u043a (SBOM) \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0438 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043c\u043e\u0434\u0443\u043b\u0435\u0439.\n\n\ud83d\udd17\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a\n\n\ud83c\udf1a @poxek | \ud83d\udcf2 MAX |\ud83c\udf1a \u0411\u043b\u043e\u0433 | \ud83d\udcfa YT | \ud83d\udcfa RT | \ud83d\udcfa VK | \u2764\ufe0f \u041c\u0435\u0440\u0447", "url": "https://t.me/notlukatsky/7302"}, {"timestamp": "2025-11-08T14:09:54.550Z", "date_only": false, "value": "2025-11-08T14:09:54.550414Z", "kind": "sighting", "label": "Seen", "source": "https://mstdn.ca/users/rfwaveio/statuses/115514473973421957", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "cbdb7590-5dd4-4ce2-8e1f-9ba23b2fee3b", "url": "https://mstdn.ca/users/rfwaveio/statuses/115514473973421957"}, {"timestamp": "2025-11-10T04:10:31.746Z", "date_only": false, "value": "2025-11-10T04:10:31.746458Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m5aqv32n3c23", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "f555c238-205c-4fe8-abdd-672fbfe05720", "url": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3m5aqv32n3c23"}, {"timestamp": "2025-11-10T22:12:55Z", "date_only": false, "value": "2025-11-10T22:12:55.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/59165", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "65ea0c27-8e55-4023-9a67-900000d413f9", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aComprehensive Proof of Concept collection for CVE-2025-11953, CVE-2025-59287, CVE-2025-8941 with exploitation frameworks in Python, C, Bash, PowerShell\nURL\uff1ahttps://github.com/N3k0t-dev/PoC-CVE-collection\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/59165"}, {"timestamp": "2025-11-11T03:00:07Z", "date_only": false, "value": "2025-11-11T03:00:07.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/7SN-z5difEiZToLpXcuc9ccLsruf9-tgqLjvxvRXkd8FUr0", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "7449404e-f846-411a-b15a-86dcf35c95f3"}, {"timestamp": "2025-11-11T17:06:16.919Z", "date_only": false, "value": "2025-11-11T17:06:16.919Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2025-11953", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-12T05:22:37.413Z", "date_only": false, "value": "2025-11-12T05:22:37.413312Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3m5fvtwtuzb2w", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "68d742c6-fc61-4e33-923a-e55f979c4c2e", "url": "https://bsky.app/profile/opsmatters.com/post/3m5fvtwtuzb2w"}, {"timestamp": "2025-11-12T06:08:49.509Z", "date_only": false, "value": "2025-11-12T06:08:49.509564Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m5fygk6gtr2g", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "c66e3670-8bc2-4c45-8bc7-6272726b6d67", "url": "https://bsky.app/profile/crowdcyber.bsky.social/post/3m5fygk6gtr2g"}, {"timestamp": "2025-12-22T05:37:21.313Z", "date_only": false, "value": "2025-12-22T05:37:21.313080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3makjd3pq3623", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "29b6e7ce-8a0e-4fbf-8c46-0c5b3ff3130c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3makjd3pq3623"}, {"timestamp": "2025-12-22T16:24:22.969Z", "date_only": false, "value": "2025-12-22T16:24:22.969049Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pentest-tools.com/post/3malnhxlpxs2l", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "58fea7fa-e72c-4ceb-b766-eb239be19e86", "url": "https://bsky.app/profile/pentest-tools.com/post/3malnhxlpxs2l"}, {"timestamp": "2025-12-23T02:23:53.964Z", "date_only": false, "value": "2025-12-23T02:23:53.964834Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3mamoy3lpvm2p", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "10db8a2c-30de-4348-8558-d53d198a8ff8", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3mamoy3lpvm2p"}, {"timestamp": "2026-01-12T11:00:10Z", "date_only": false, "value": "2026-01-12T11:00:10.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/ZOaPQk2qo1kF67xB9c1w3FBXAiam7yo_FojTfVMOk9SwVLE", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "596bfb51-70e9-4262-b043-0e9d326b31ad"}, {"timestamp": "2026-02-03T13:00:00Z", "date_only": false, "value": "2026-02-03T13:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2026/02/hackers-exploit-metro4shell-rce-flaw-in.html", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "d921cceb-12b4-4729-b7db-1f5563eff932", "url": "https://thehackernews.com/2026/02/hackers-exploit-metro4shell-rce-flaw-in.html"}, {"timestamp": "2026-02-03T14:11:55.553Z", "date_only": false, "value": "2026-02-03T14:11:55.553789Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdxk4semey2l", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "e3919183-38ef-4439-be47-286795393722", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdxk4semey2l"}, {"timestamp": "2026-02-03T14:20:16.362Z", "date_only": false, "value": "2026-02-03T14:20:16.362043Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/defendopsdiaries/statuses/116007135848435039", "record": "cve-2025-11953", "field": "creation_timestamp", "uuid": "889c9454-e5c5-48a4-a0c2-b795336331aa", "url": "https://infosec.exchange/users/defendopsdiaries/statuses/116007135848435039"}, {"timestamp": "2026-02-03T15:14:29.061Z", "date_only": false, "value": "2026-02-03T15:14:29.061046Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdxnmo7li52j", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "a59aa1f9-0df9-43bc-bae9-6f9cc28a8162", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdxnmo7li52j"}, {"timestamp": "2026-02-03T15:50:06Z", "date_only": false, "value": "2026-02-03T15:50:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/7869", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "31f86e70-cfe9-4cd5-8882-3f3ccfb83a49", "content": "\u0425\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-11953 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 Metro \u0434\u043b\u044f React Native \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u044f \u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0430 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u041f\u041e \u0434\u043b\u044f Windows \u0438 Linux.\n\n\u0412 Windows \u043d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0447\u0435\u0440\u0435\u0437 POST-\u0437\u0430\u043f\u0440\u043e\u0441. \u0412 Linux \u0438 macOS - \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432 \u0441 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432.\n\nMetro - \u044d\u0442\u043e \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0439 \u0441\u0431\u043e\u0440\u0449\u0438\u043a JavaScript \u0434\u043b\u044f \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u0432 React Native, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0431\u043e\u0440\u043a\u0443 \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 \u044d\u0442\u0430\u043f\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\n\n\u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e Metro \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0442\u044c\u0441\u044f \u043a \u0432\u043d\u0435\u0448\u043d\u0438\u043c \u0441\u0435\u0442\u0435\u0432\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430\u043c \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0442\u044c HTTP-\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0435 \u0442\u043e\u0447\u043a\u0438 (/open-url), \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0434\u043b\u044f \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438.\n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 JFrog \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u043d\u0435\u0439 \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043d\u043e\u044f\u0431\u0440\u044f. \u041f\u043e\u0441\u043b\u0435 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u043e\u0441\u044c \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u043b\u0430\u0441\u044c \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e\u00a0HTTP-\u0442\u043e\u0447\u043a\u0430 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 /open-url\u00a0\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u043b\u0430 POST-\u0437\u0430\u043f\u0440\u043e\u0441\u044b, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 URL-\u0430\u0434\u0440\u0435\u0441\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0433\u043b\u043e \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u044e open() \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u0438.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0435\u0440\u0441\u0438\u0438 @react-native-community/cli-server-api \u043e\u0442 4.8.0 \u0434\u043e 20.0.0-alpha.2 \u0438 \u0431\u044b\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 20.0.0 \u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0438\u0445.\n\n21 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2025 \u0433\u043e\u0434\u0430 VulnCheck \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0435\u0433\u043e CVE-2025-11953, \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u043a\u0430\u043a Metro4Shell. \u042d\u0442\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0438\u043b\u0430\u0441\u044c 4 \u0438 21 \u044f\u043d\u0432\u0430\u0440\u044f, \u043a\u043e\u0433\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u043b\u0438 \u0442\u0435 \u0436\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u041f\u041e.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u044b\u043b\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u043b\u043e\u0436\u043d\u044b\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0435 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u043a\u0430\u043a \u0434\u043b\u044f Linux, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f Windows, \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u0443\u044f, \u0447\u0442\u043e Metro4Shell \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0412\u043e \u0432\u0441\u0435\u0445 \u0442\u0440\u0435\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0431\u043b\u044e\u0434\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0443 \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435 \u0437\u0430\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0432 base64 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a PowerShell, \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0432 \u0442\u0435\u043b\u0435 HTTP POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, \u0434\u043e\u0441\u0442\u0438\u0433\u0430\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a.\n\n\u041f\u043e\u0441\u043b\u0435 \u0434\u0435\u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0437\u0430\u0449\u0438\u0442\u0443 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u0435\u043a, \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043f\u0443\u0442\u0438 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f Microsoft Defender \u043a\u0430\u043a \u0434\u043b\u044f \u0442\u0435\u043a\u0443\u0449\u0435\u0433\u043e \u0440\u0430\u0431\u043e\u0447\u0435\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430, \u0442\u0430\u043a \u0438 \u0434\u043b\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0433\u043e \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b Add-MpPreference.\n\n\u0417\u0430\u0442\u0435\u043c \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u044f\u043c\u043e\u0435 TCP-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0441 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430 \u0438 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 GET-\u0437\u0430\u043f\u0440\u043e\u0441 /windows \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u0435\u0437\u043d\u043e\u0439 \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u044d\u0442\u0430\u043f\u0430.\n\n\u041f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0433\u0440\u0443\u0437\u0438\u0442 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0434\u0438\u0441\u043a \u0432 \u0432\u0438\u0434\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430 \u0432\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433 \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u043b\u0438\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u0432, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u043e\u043c.\n\n\u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u044d\u0442\u0438\u0445 \u0430\u0442\u0430\u043a \u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u043b\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0434\u043b\u044f Windows, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0439 \u0441\u043e\u0431\u043e\u0439 \u0443\u043f\u0430\u043a\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e UPX \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Rust \u0441 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u043b\u043e\u0433\u0438\u043a\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u044b \u043e\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430. \u041d\u0430 \u0442\u043e\u0439 \u0436\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0440\u0430\u0437\u043c\u0435\u0449\u0430\u043b\u0441\u044f \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 \u0431\u0438\u043d\u0430\u0440\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0434\u043b\u044f Linux.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f ZoomEye, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0435\u0439 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430, \u0441\u0435\u0440\u0432\u0438\u0441\u044b \u0438 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f, \u0432 \u0441\u0435\u0442\u0438 \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 3500  \u043d\u0435\u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 React Native Metro.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0432\u043e\u043f\u0440\u0435\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 \u043c\u0435\u0441\u044f\u0446\u0430, \u043e\u043d\u0430 \u043f\u043e-\u043f\u0440\u0435\u0436\u043d\u0435\u043c\u0443 \u0438\u043c\u0435\u0435\u0442 \u043d\u0438\u0437\u043a\u0438\u0439 \u0431\u0430\u043b\u043b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043e\u0446\u0435\u043d\u043a\u0438 \u043f\u0440\u043e\u0433\u043d\u043e\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 (EPSS).\n\nIOCs \u0441\u0435\u0442\u0435\u0432\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u043e\u043b\u0435\u0437\u043d\u044b\u0445 \u043d\u0430\u0433\u0440\u0443\u0437\u043e\u043a \u0434\u043b\u044f Windows \u0438 Linux - \u043e\u0442\u0447\u0435\u0442\u0435 VulnCheck.", "url": "https://t.me/true_secator/7869"}, {"timestamp": "2026-02-03T16:44:20.808Z", "date_only": false, "value": "2026-02-03T16:44:20.808232Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdxsnecwtn2e", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "9098ca43-b405-4988-9e0c-c21efe6235a4", "url": "https://bsky.app/profile/undercodenews.bsky.social/post/3mdxsnecwtn2e"}, {"timestamp": "2026-02-03T16:46:57Z", "date_only": false, "value": "2026-02-03T16:46:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://threatintel.cc/2026/02/03/hackers-exploiting-react-natives-metro.html", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "c1a69913-806f-4a1d-824e-23877370cc6f", "url": "https://threatintel.cc/2026/02/03/hackers-exploiting-react-natives-metro.html"}, {"timestamp": "2026-02-03T17:41:55.155Z", "date_only": false, "value": "2026-02-03T17:41:55.155648Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/catc0n/statuses/116007928764718694", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "bcaaeb42-1537-4b2b-81b2-b3e7fb542844", "url": "https://infosec.exchange/users/catc0n/statuses/116007928764718694"}, {"timestamp": "2026-02-03T17:42:03.317Z", "date_only": false, "value": "2026-02-03T17:42:03.317885Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/tomcat/statuses/116007929306499505", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "eee7bc11-37ca-46a0-b806-15ddbc880765", "url": "https://infosec.exchange/users/tomcat/statuses/116007929306499505"}, {"timestamp": "2026-02-03T17:46:51.746Z", "date_only": false, "value": "2026-02-03T17:46:51.746082Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/edwardk/statuses/116007948186177073", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "53477356-9a1a-4120-8824-4ce307d71d61", "url": "https://infosec.exchange/users/edwardk/statuses/116007948186177073"}, {"timestamp": "2026-02-03T19:15:47.025Z", "date_only": false, "value": "2026-02-03T19:15:47.025735Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdy342t66x2p", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "3155c9e2-7a19-4f85-b77c-f96507a748d0", "url": "https://bsky.app/profile/infosecbriefly.bsky.social/post/3mdy342t66x2p"}, {"timestamp": "2026-02-03T19:33:03.644Z", "date_only": false, "value": "2026-02-03T19:33:03.644419Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3mdy42zy3ql2t", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "5da142a6-fec2-4467-9ca0-3d607b860408", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3mdy42zy3ql2t"}, {"timestamp": "2026-02-04T03:19:01.280Z", "date_only": false, "value": "2026-02-04T03:19:01.280217Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/mezbah.bsky.social/post/3mdyw3pngw22f", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "9cf40496-e932-47be-a0db-d756692a6005", "url": "https://bsky.app/profile/mezbah.bsky.social/post/3mdyw3pngw22f"}, {"timestamp": "2026-02-04T05:40:55.260Z", "date_only": false, "value": "2026-02-04T05:40:55.260794Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hakksaww.bsky.social/post/3mdz5zygall25", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "7de98975-63dc-43a1-9ab7-9f206bea2105", "url": "https://bsky.app/profile/hakksaww.bsky.social/post/3mdz5zygall25"}, {"timestamp": "2026-02-04T06:40:05Z", "date_only": false, "value": "2026-02-04T06:40:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/3f716fa80665e0268998234c174a43fe", "record": "cve-2025-11953", "field": "creation_timestamp", "uuid": "59046820-e59e-4f65-978d-04d72251924e", "url": "https://gist.github.com/alon710/3f716fa80665e0268998234c174a43fe"}, {"timestamp": "2026-02-04T10:12:23.181Z", "date_only": false, "value": "2026-02-04T10:12:23.181101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securestep9.bsky.social/post/3mdzn7e3fgk2n", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "23dfc495-f795-4b7e-90c5-c54e204d701e", "url": "https://bsky.app/profile/securestep9.bsky.social/post/3mdzn7e3fgk2n"}, {"timestamp": "2026-02-04T10:20:11.295Z", "date_only": false, "value": "2026-02-04T10:20:11.295995Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdznnde2cs2q", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "3d8a1851-1392-40b3-a5f5-67bc64c7c7bb", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdznnde2cs2q"}, {"timestamp": "2026-02-04T13:23:54.510Z", "date_only": false, "value": "2026-02-04T13:23:54.510265Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdzxvu7r4k2q", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "1af388a5-1270-44c7-8b22-94e0a1347fbb", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3mdzxvu7r4k2q"}, {"timestamp": "2026-02-04T13:31:47.211Z", "date_only": false, "value": "2026-02-04T13:31:47.211263Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hack4career.com/post/3mdzydxdba32x", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "f3883f03-d45e-4282-8880-92e37be9d655", "url": "https://bsky.app/profile/hack4career.com/post/3mdzydxdba32x"}, {"timestamp": "2026-02-04T17:48:05.494Z", "date_only": false, "value": "2026-02-04T17:48:05.494135Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3me2gobkuia2o", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "5d65431a-6e4b-4c2a-aaa3-8c4dbb1d185c", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3me2gobkuia2o"}, {"timestamp": "2026-02-04T18:36:03.515Z", "date_only": false, "value": "2026-02-04T18:36:03.515292Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3me2je24pot2n", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "84547a00-91d6-47e5-80c2-670c1573d388", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3me2je24pot2n"}, {"timestamp": "2026-02-04T22:00:09.008Z", "date_only": false, "value": "2026-02-04T22:00:09.008522Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3me2uqxr7a22e", "record": "cve-2025-11953", "field": "creation_timestamp", "uuid": "82749493-0ae3-478e-816a-9f6f95916c7b", "url": "https://bsky.app/profile/cyberveille-ch.bsky.social/post/3me2uqxr7a22e"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-11953", "field": "timestamps.asserted_at", "uuid": "672da480-cb2f-47f7-b973-568fb956a41e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": true, "value": "2026-02-05", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11953", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": true, "value": "2026-02-05", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-11953", "field": "evidence.0.details.date_added", "uuid": "672da480-cb2f-47f7-b973-568fb956a41e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-11953", "field": "timestamps.first_seen_at", "uuid": "672da480-cb2f-47f7-b973-568fb956a41e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-11953", "field": "status.status_updated_at", "uuid": "672da480-cb2f-47f7-b973-568fb956a41e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-05T00:00:00Z", "date_only": false, "value": "2026-02-05T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11953", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-02-05T15:35:40Z", "date_only": false, "value": "2026-02-05T15:35:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xakep_ru/18889", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "a528912a-aab1-4bca-ae16-3f13298ee4e1", "content": "\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Metro4Shell \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0432\u0437\u043b\u043e\u043c\u0430 \u0441\u0438\u0441\u0442\u0435\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-11953 \u0432 Metro-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 React Native, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430\u043c\u0438 \u0434\u043b\u044f Windows \u0438 Linux.\n\nhttps://xakep.ru/2026/02/05/metro4shell/", "url": "https://t.me/xakep_ru/18889"}, {"timestamp": "2026-02-05T20:27:08.192Z", "date_only": false, "value": "2026-02-05T20:27:08.192500Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/116019903016374335", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "001c5535-7c47-40e8-9aba-06ebb77a1255", "url": "https://infosec.exchange/users/DarkWebInformer/statuses/116019903016374335"}, {"timestamp": "2026-02-05T21:38:31Z", "date_only": false, "value": "2026-02-05T21:38:31Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-399J-VXMF-HJVR", "record": "GHSA-399J-VXMF-HJVR", "field": "modified"}, {"timestamp": "2026-02-06T04:01:08.090Z", "date_only": false, "value": "2026-02-06T04:01:08.090985Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3me5zffjhhj2s", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "7efaee1d-56b0-4ee6-a9b9-9f50104c022e", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3me5zffjhhj2s"}, {"timestamp": "2026-02-06T04:55:17.609Z", "date_only": false, "value": "2026-02-06T04:55:17.609697Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11953", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-02-06T04:55:17.609Z", "date_only": false, "value": "2026-02-06T04:55:17.609697Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11953", "record": "FKIE_CVE-2025-11953", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-02-06T06:12:10.650Z", "date_only": false, "value": "2026-02-06T06:12:10.650733Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3me6appnsaj2j", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "7793793f-c215-4b31-bd0b-5d2c15847c9d", "url": "https://bsky.app/profile/termsofsurrender.bsky.social/post/3me6appnsaj2j"}, {"timestamp": "2026-02-06T07:18:58Z", "date_only": false, "value": "2026-02-06T07:18:58+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-11953", "field": "timestamps.recorded_at", "uuid": "672da480-cb2f-47f7-b973-568fb956a41e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-06T07:18:58.757Z", "date_only": false, "value": "2026-02-06T07:18:58.757076Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/672da480-cb2f-47f7-b973-568fb956a41e", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "1602cc6d-32d7-4361-8881-a47b652fde84", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/672da480-cb2f-47f7-b973-568fb956a41e"}, {"timestamp": "2026-02-06T21:02:56.944Z", "date_only": false, "value": "2026-02-06T21:02:56.944605Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me7siiqjtx2q", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "759fa831-20ea-4c70-bc72-c94ac52230be", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me7siiqjtx2q"}, {"timestamp": "2026-02-07T03:06:08.334Z", "date_only": false, "value": "2026-02-07T03:06:08.334345Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3meagrxzwna2v", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "cf75ef98-45e8-4316-ae41-ac5f8a568d61", "url": "https://bsky.app/profile/opsmatters.com/post/3meagrxzwna2v"}, {"timestamp": "2026-02-09T00:14:35Z", "date_only": false, "value": "2026-02-09T00:14:35.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/wjfthomas318-rgb/4eb0cbd213e2964148921b3d50b64654", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "a3873fb2-645e-4f26-ac8f-16891ecbcbe6", "url": "https://gist.github.com/wjfthomas318-rgb/4eb0cbd213e2964148921b3d50b64654"}, {"timestamp": "2026-02-10T14:51:47.410Z", "date_only": false, "value": "2026-02-10T14:51:47.410929Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mej7mjihf72v", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "afe391c4-9cb6-47c5-bd99-59aa32272b10", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mej7mjihf72v"}, {"timestamp": "2026-02-12T02:21:24.088Z", "date_only": false, "value": "2026-02-12T02:21:24.088608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memwmhs2bs2w", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "0dae51c1-01ec-4eac-be8b-bff382f50e20", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memwmhs2bs2w"}, {"timestamp": "2026-02-12T02:24:46.767Z", "date_only": false, "value": "2026-02-12T02:24:46.767567Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memwshupnc2w", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "2d70f232-726f-4cb2-a03b-2fe32d7a7120", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memwshupnc2w"}, {"timestamp": "2026-02-12T02:27:39.968Z", "date_only": false, "value": "2026-02-12T02:27:39.968989Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memwxnuwu22w", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "b9196005-d67c-4cac-8e5d-dee80d789c4e", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memwxnuwu22w"}, {"timestamp": "2026-02-12T02:52:02.205Z", "date_only": false, "value": "2026-02-12T02:52:02.205381Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memyd4sv7k2w", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "3ee424c6-f7d3-4bb9-ac4e-3acbf4e43f8c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memyd4sv7k2w"}, {"timestamp": "2026-02-12T03:04:11.118Z", "date_only": false, "value": "2026-02-12T03:04:11.118195Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memyywn7jk2w", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "042ca6df-2215-45bc-b685-6921775189f6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3memyywn7jk2w"}, {"timestamp": "2026-02-14T04:59:19.598Z", "date_only": false, "value": "2026-02-14T04:59:19.598999Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mesaeswynf2s", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "584a7109-7530-41da-88ee-8522a7d8bb07", "url": "https://bsky.app/profile/opsmatters.com/post/3mesaeswynf2s"}, {"timestamp": "2026-02-15T01:15:50Z", "date_only": false, "value": "2026-02-15T01:15:50.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/wjfthomas318-rgb/4dea801a6d8e9d0dec287fdae5664fb9", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "77ec86b5-f589-4bbf-97c7-5903b3b74602", "url": "https://gist.github.com/wjfthomas318-rgb/4dea801a6d8e9d0dec287fdae5664fb9"}, {"timestamp": "2026-02-15T03:01:26.910Z", "date_only": false, "value": "2026-02-15T03:01:26.910884Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meukaw5qek2w", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "a57122cb-f08f-497e-80b6-7589f5403562", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meukaw5qek2w"}, {"timestamp": "2026-02-26T00:00:00Z", "date_only": true, "value": "2026-02-26", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-11953", "field": "evidence.0.details.due_date", "uuid": "672da480-cb2f-47f7-b973-568fb956a41e", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-26T17:47:39.982Z", "date_only": false, "value": "2026-02-26T17:47:39.982Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-11953", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-02-26T17:47:39.982Z", "date_only": false, "value": "2026-02-26T17:47:39.982Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-11953", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-04T01:43:40.573Z", "date_only": false, "value": "2026-03-04T01:43:40.573382Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5923000", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "13550222-5abb-4aa7-bbd0-19662d82e7fe", "url": "https://feedsin.space/feed/CISAKevBot/items/5923000"}, {"timestamp": "2026-04-02T06:40:04.622Z", "date_only": false, "value": "2026-04-02T06:40:04.622295Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackmag.com/post/3miilwa4xct2k", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "135706c1-105f-4079-896c-cff2c36afe49", "url": "https://bsky.app/profile/hackmag.com/post/3miilwa4xct2k"}, {"timestamp": "2026-05-22T00:00:00Z", "date_only": true, "value": "2026-05-22", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.9.published_at"}, {"timestamp": "2026-05-25T00:00:00Z", "date_only": true, "value": "2026-05-25", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.4.published_at"}, {"timestamp": "2026-05-26T07:46:09Z", "date_only": false, "value": "2026-05-26T07:46:09.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/d277e10b-ad25-4081-a3b6-165ec062d019", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "631483c2-d8e2-46cf-9f1a-dc101ed16121"}, {"timestamp": "2026-05-27T00:00:00Z", "date_only": true, "value": "2026-05-27", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.0.published_at"}, {"timestamp": "2026-05-28T00:00:00Z", "date_only": true, "value": "2026-05-28", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "vendor_advisories.6.published_at"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "last_revision_date"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "initial_release_date"}, {"timestamp": "2026-05-29T00:00:00Z", "date_only": false, "value": "2026-05-29T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2026-AVI-0667", "record": "CERTFR-2026-AVI-0667", "field": "revisions.0.revision_date"}, {"timestamp": "2026-06-01T10:50:27Z", "date_only": false, "value": "2026-06-01T10:50:27+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-11953", "field": "timestamps.asserted_at", "uuid": "91b5ef61-ee64-4bc7-bbd5-26839f32a6bb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:50:27Z", "date_only": false, "value": "2026-06-01T10:50:27+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-11953", "field": "timestamps.first_seen_at", "uuid": "91b5ef61-ee64-4bc7-bbd5-26839f32a6bb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:50:27Z", "date_only": false, "value": "2026-06-01T10:50:27+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-11953", "field": "status.status_updated_at", "uuid": "91b5ef61-ee64-4bc7-bbd5-26839f32a6bb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T10:50:27.842Z", "date_only": false, "value": "2026-06-01T10:50:27.842Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-11953", "field": "evidence.0.details.added_date", "uuid": "91b5ef61-ee64-4bc7-bbd5-26839f32a6bb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-17T08:31:28.530Z", "date_only": false, "value": "2026-06-17T08:31:28.530", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-11953", "record": "FKIE_CVE-2025-11953", "field": "lastModified"}, {"timestamp": "2026-06-19T12:45:18.211Z", "date_only": false, "value": "2026-06-19T12:45:18.211561Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6720f93b-4076-471b-9cab-57d269d19001", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "36f22021-2277-4b7a-8790-36c051be6c00", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6720f93b-4076-471b-9cab-57d269d19001"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-11953", "field": "timestamps.recorded_at", "uuid": "91b5ef61-ee64-4bc7-bbd5-26839f32a6bb", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:44.180Z", "date_only": false, "value": "2026-06-23T14:03:44.180814Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91b5ef61-ee64-4bc7-bbd5-26839f32a6bb", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "72e5d402-871d-41e3-9681-decda3e4dc54", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/91b5ef61-ee64-4bc7-bbd5-26839f32a6bb"}, {"timestamp": "2026-08-19T23:00:04.015Z", "date_only": false, "value": "2026-08-19T23:00:04.015404Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/bQaE4Tl1jMB0Pw8QHsNBTvvLYUlr6qr9J3dwxMpZjxQW", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "0e90fdc9-7e20-4ce0-b3d3-01dcbaba99f3"}, {"timestamp": "2026-08-29T20:00:22.298Z", "date_only": false, "value": "2026-08-29T20:00:22.298604Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/CyberDispatch/667", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "2def045d-37eb-43c2-b6f9-d9df1f953cf8", "content": "Researchers detect active exploitation of a critical React Native CLI flaw.\n\nCVE-2025-11953 allows unauthenticated OS command execution on exposed Metro dev servers, with attacks deploying PowerShell and a Rust payload.", "url": "https://t.me/CyberDispatch/667"}, {"timestamp": "2026-08-31T00:00:12.417Z", "date_only": false, "value": "2026-08-31T00:00:12.417806Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberDispatch/667", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "08e8070c-f3f0-4aa6-b82a-5c0593c663fc", "content": "Researchers detect active exploitation of a critical React Native CLI flaw.\n\nCVE-2025-11953 allows unauthenticated OS command execution on exposed Metro dev servers, with attacks deploying PowerShell and a Rust payload.", "url": "https://t.me/CyberDispatch/667"}, {"timestamp": "2026-09-09T05:00:16.412Z", "date_only": false, "value": "2026-09-09T05:00:16.412119Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Intel_Encyclopedia/1673", "record": "CVE-2025-11953", "field": "creation_timestamp", "uuid": "3e5b599d-fb53-494c-b30b-b18d0fc1705f", "content": "\u2728 General Cyber News \u2728\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043c\u043e\u0434\u0443\u043b\u0435 React Native \u0443\u0433\u0440\u043e\u0436\u0430\u0435\u0442 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432\n\n\u2014\n\nSummary:\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 JFrog \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u043f\u0430\u043a\u0435\u0442\u0435 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043c\u043e\u0431\u0438\u043b\u044c\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 React Native. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-11953 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u043a\u0435\u0442 @react-native-community/cli-server-api, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e \u0434\u0432\u0443\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437, \u0447\u0442\u043e \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043b\u044f \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u043e\u0432 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443. \u0414\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u0443\u044e \u043e\u0446\u0435\u043d\u043a\u0443 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS - 9.8 \u0431\u0430\u043b\u043b\u043e\u0432,...\n\n\u2014\n\nSource: SEC-1275-1\nPublished: 2025-11-06 12:37 | Author: Vulner Queen\n\n#native #general_cyber_news #react\n\nhttps://1275.ru/vulnerability/kriticheskaya-uyazvimost-v-populyarnom-module-react-native-ugrozhaet-sistemam-razrabotchikov_16041", "url": "https://t.me/Intel_Encyclopedia/1673"}]}