{"metadata": {"vulnerability": "CVE-2025-32432", "count": 146, "kinds": {"milestone": 4, "sighting": 121, "kev": 11, "other": 10}}, "data": [{"timestamp": "2025-04-08T10:54:58.368Z", "date_only": false, "value": "2025-04-08T10:54:58.368Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2025-32432", "field": "cveMetadata.dateReserved"}, {"timestamp": "2025-04-25T15:02:53Z", "date_only": false, "value": "2025-04-25T15:02:53Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F3GW-9WW9-JMC3", "record": "GHSA-F3GW-9WW9-JMC3", "field": "published"}, {"timestamp": "2025-04-25T15:04:06.272Z", "date_only": false, "value": "2025-04-25T15:04:06.272Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2025-32432", "field": "cveMetadata.datePublished"}, {"timestamp": "2025-04-25T15:04:06.272Z", "date_only": false, "value": "2025-04-25T15:04:06.272Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2025-32432", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-25T15:15:36Z", "date_only": false, "value": "2025-04-25T15:15:36Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F3GW-9WW9-JMC3", "record": "GHSA-F3GW-9WW9-JMC3", "field": "database_specific.nvd_published_at"}, {"timestamp": "2025-04-25T15:15:36.440Z", "date_only": false, "value": "2025-04-25T15:15:36.440", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32432", "record": "FKIE_CVE-2025-32432", "field": "published"}, {"timestamp": "2025-04-25T15:45:50.918Z", "date_only": false, "value": "2025-04-25T15:45:50.918179Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/onyphe.io/post/3lnnkxcegak22", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "56516e1f-aa8d-4e97-8645-855572a87aca", "url": "https://bsky.app/profile/onyphe.io/post/3lnnkxcegak22"}, {"timestamp": "2025-04-25T16:48:14.443Z", "date_only": false, "value": "2025-04-25T16:48:14.443526Z", "kind": "sighting", "label": "Seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114399621496612469", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "1351a50b-4f5b-4f29-84f3-7a9b338a6d54", "url": "https://mastodon.social/users/CyberSignaler/statuses/114399621496612469"}, {"timestamp": "2025-04-25T18:02:30Z", "date_only": false, "value": "2025-04-25T18:02:30.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/t8K1XuU9DycjdS-BJ0HBwR2vMp2ysg1gNZKK5Q0_GJ-ZI8I", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "ed8ee3f5-4406-4bf9-8294-2115c568accf"}, {"timestamp": "2025-04-25T19:08:48.092Z", "date_only": false, "value": "2025-04-25T19:08:48.092668Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnnwc6kg2d2m", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "4dc7c9a8-a728-46da-9d2e-ab48b8c318e1", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnnwc6kg2d2m"}, {"timestamp": "2025-04-26T02:12:42.021Z", "date_only": false, "value": "2025-04-26T02:12:42.021640Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnony6qhj42b", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "ce9dcca7-bbe7-4dd8-b8d5-f32072644eec", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lnony6qhj42b"}, {"timestamp": "2025-04-26T08:20:59.979Z", "date_only": false, "value": "2025-04-26T08:20:59.979351Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lnpckqomss2n", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "f098f185-9be1-4c48-a56f-64deb27115f4", "url": "https://bsky.app/profile/shiojiri.com/post/3lnpckqomss2n"}, {"timestamp": "2025-04-26T10:03:04.544Z", "date_only": false, "value": "2025-04-26T10:03:04.544798Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lnpibbkwak2k", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "a63a4510-4228-4172-9aec-289077023d95", "url": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lnpibbkwak2k"}, {"timestamp": "2025-04-26T14:15:16Z", "date_only": false, "value": "2025-04-26T14:15:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/10684", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "9947b8a2-ff2e-44fc-90dd-eca8fafdbf18", "content": "\u26a1\ufe0fCVE-2025-32432 (CVSS 10): Craft CMS Hit by Critical RCE Flaw Exploited in the Wild.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/10684"}, {"timestamp": "2025-04-26T16:15:16Z", "date_only": false, "value": "2025-04-26T16:15:16.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/CyberBulletin/3121", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "00d4fb99-28b3-4159-94a2-14a2460e38ba", "content": "\u26a1\ufe0fCVE-2025-32432 (CVSS 10): Craft CMS Hit by Critical RCE Flaw Exploited in the Wild.\n\n#CyberBulletin", "url": "https://t.me/CyberBulletin/3121"}, {"timestamp": "2025-04-26T18:29:29.992Z", "date_only": false, "value": "2025-04-26T18:29:29.992608Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lnqektzfev2v", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "e41a9244-80f7-4b79-96da-ce47c3391032", "url": "https://bsky.app/profile/hackingne.ws/post/3lnqektzfev2v"}, {"timestamp": "2025-04-26T21:02:11.836Z", "date_only": false, "value": "2025-04-26T21:02:11.836693Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnqn3vhrgh2c", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "d607c605-839b-4f3d-a6a0-26ef76830811", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lnqn3vhrgh2c"}, {"timestamp": "2025-04-26T23:40:15Z", "date_only": false, "value": "2025-04-26T23:40:15.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34366", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "aad9c7f2-fc34-4055-9248-a06eeca8595d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCraftCMS RCE Checker (CVE-2025-32432)\nURL\uff1ahttps://github.com/Chocapikk/CVE-2025-32432\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34366"}, {"timestamp": "2025-04-27T02:18:49.838Z", "date_only": false, "value": "2025-04-27T02:18:49.838814Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnr6s3bus226", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "9bea58b5-841e-4fda-8b1f-a221df9fd44f", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lnr6s3bus226"}, {"timestamp": "2025-04-27T08:55:00Z", "date_only": false, "value": "2025-04-27T08:55:00.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34407", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "3a90b521-df5c-4a15-8151-b7e2692d2d8b", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aProof of Concept for the NTLM Hash Leak via .library-ms CVE-2025-24054\nURL\uff1ahttps://github.com/Sachinart/CVE-2025-32432\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34407"}, {"timestamp": "2025-04-27T13:10:21.366Z", "date_only": false, "value": "2025-04-27T13:10:21.366551Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cR0w/statuses/114410089366436743", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "79ddd220-493d-4cb4-9f95-237afeb2bf67", "url": "https://infosec.exchange/users/cR0w/statuses/114410089366436743"}, {"timestamp": "2025-04-27T13:32:40Z", "date_only": false, "value": "2025-04-27T13:32:40.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/34428", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "b35fb11f-b5ac-43f9-ba6b-f72dae16458d", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-32432 checker and exploit \nURL\uff1ahttps://github.com/ibrahimsql/CVE-2025-32432\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/34428"}, {"timestamp": "2025-04-27T17:00:12Z", "date_only": false, "value": "2025-04-27T17:00:12.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/kCwx96zqmTdkYxwrmGJzn8TflPgDOGN4WcwsMs0NIIpiaxk", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "05e2115a-732e-4768-936f-dd41c51452f0"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32432", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-28T00:00:00Z", "date_only": false, "value": "2025-04-28T00:00:00+00:00", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32432", "record": "FKIE_CVE-2025-32432", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-28T04:49:19Z", "date_only": false, "value": "2025-04-28T04:49:19.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/itsec_news/5879", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "f263501e-2f74-4324-8554-1ba1ee00f378", "content": "\u200b\u26a1\ufe0f\u041e\u0434\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0445\u043e\u0440\u043e\u0448\u043e, \u0430 \u0434\u0432\u0435 \u2014 \u043f\u0443\u0442\u044c \u043a \u0444\u0430\u0439\u043b\u043e\u0432\u043e\u043c\u0443 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440\u0443: \u043d\u043e\u0432\u0430\u044f \u0430\u0442\u0430\u043a\u0430 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u043d\u0430 Craft CMS\n\n\ud83d\udcac\n\u0413\u0440\u0443\u043f\u043f\u0430 \u0440\u0435\u0430\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043d\u0430 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u044b CSIRT \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Orange Cyberdefense \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0430 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u0441\u0435\u0440\u0438\u044e \u0432\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0439 \u0432 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0435 \u043d\u0430 \u0431\u0430\u0437\u0435 Craft CMS \u2014 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0435\u0431-\u0441\u0430\u0439\u0442\u043e\u0432. \u0420\u0430\u0441\u0441\u043b\u0435\u0434\u0443\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044e \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u043b\u043e\u0449\u0430\u0434\u043e\u043a, \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0432\u044b\u044f\u0432\u0438\u043b\u0438: \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0442 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044e \u0438\u0437 \u0434\u0432\u0443\u0445 \u0440\u0430\u043d\u0435\u0435 \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0431\u0440\u0435\u0448\u0435\u0439 \u0434\u043b\u044f \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u0439.\n\n\u041f\u0435\u0440\u0432\u044b\u0439 \u0438\u0437\u044a\u044f\u043d \u0432 \u0437\u0430\u0449\u0438\u0442\u0435, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0439 \u0438\u043d\u0434\u0435\u043a\u0441 CVE-2025-32432, \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430. \u0412\u0442\u043e\u0440\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0434 \u043d\u043e\u043c\u0435\u0440\u043e\u043c CVE-2024-58136 \u0442\u0430\u0438\u0442\u0441\u044f \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii, \u043b\u0435\u0436\u0430\u0449\u0435\u043c \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 Craft CMS \u2014 \u043e\u043d\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445.\n\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u044d\u0442\u0438\u0447\u043d\u043e\u0433\u043e \u0445\u0430\u043a\u0438\u043d\u0433\u0430 SensePost, \u0432\u0445\u043e\u0434\u044f\u0449\u0430\u044f \u0432 \u0441\u043e\u0441\u0442\u0430\u0432 Orange Cyberdefense, \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043a\u0430\u0440\u0442\u0438\u043d\u0443 \u043d\u0430\u043f\u0430\u0434\u0435\u043d\u0438\u044f. \u0410\u0432\u0442\u043e\u0440\u044b \u0432\u0437\u043b\u043e\u043c\u043e\u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u0431\u0430\u0433\u0438, \u0447\u0442\u043e\u0431\u044b \u0440\u0430\u0437\u043c\u0435\u0441\u0442\u0438\u0442\u044c \u043d\u0430 \u0437\u0430\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u043e\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 PHP-\u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0444\u0430\u0439\u043b\u0430\u043c\u0438.\n\n\u0412\u0442\u043e\u0440\u0436\u0435\u043d\u0438\u0435 \u0441\u0442\u0430\u0440\u0442\u0443\u0435\u0442 \u0441 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-32432: \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044c \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441 \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u043c \"return URL\". \u041f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0432 PHP-\u0444\u0430\u0439\u043b \u0441\u0435\u0441\u0441\u0438\u0438, \u0430 \u0435\u0451 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442\u0441\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0432 \u0441\u043e\u0441\u0442\u0430\u0432\u0435 \u043e\u0442\u0432\u0435\u0442\u0430 \u043d\u0430 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441.\n\n\u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u044d\u0442\u0430\u043f\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0443\u0436\u0435 \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0430 CVE-2024-58136, \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0430\u044f JSON-\u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430, \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u044e\u0449\u0430\u044f PHP-\u043a\u043e\u0434 \u0438\u0437 \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u0440\u0430\u043d\u0435\u0435 \u0441\u0435\u0441\u0441\u0438\u043e\u043d\u043d\u043e\u0433\u043e \u0444\u0430\u0439\u043b\u0430. \u0422\u0430\u043a\u043e\u0439 \u043f\u043e\u0434\u0445\u043e\u0434 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0444\u0430\u0439\u043b\u043e\u0432\u044b\u0439 \u043c\u0435\u043d\u0435\u0434\u0436\u0435\u0440 \u0438 \u0440\u0430\u0437\u0432\u0438\u0442\u044c \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0432 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435.\n\n\u041f\u043e\u043b\u0443\u0447\u0438\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u043c, \u0432\u0437\u043b\u043e\u043c\u0449\u0438\u043a\u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u044e\u0442 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0431\u044d\u043a\u0434\u043e\u0440\u044b \u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0443\u044e\u0442 \u043a\u0430\u043d\u0430\u043b\u044b \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043e\u0440\u0442\u0430 \u043f\u043e\u0445\u0438\u0449\u0435\u043d\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \u041f\u043e\u043b\u043d\u043e\u0435 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u0447\u0443\u0442\u044c \u043f\u043e\u0437\u0436\u0435 \u0432 \u0433\u043e\u0442\u043e\u0432\u044f\u0449\u0435\u0439\u0441\u044f \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u0421\u043e\u0437\u0434\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438. \u041a\u043e\u043c\u0430\u043d\u0434\u0430 Yii \u0437\u0430\u043a\u0440\u044b\u043b\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-58136 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 2.0.52 \u043e\u0442 9 \u0430\u043f\u0440\u0435\u043b\u044f. \u041d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0439 \u0434\u0435\u043d\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Craft CMS \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f 3.9.15, 4.14.15 \u0438 5.6.17, \u043d\u0435\u0439\u0442\u0440\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0438\u0435 CVE-2025-32432.\n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u0432 Craft CMS \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f Yii 2.0.51, \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u0438 Orange \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u044e\u0442: \u043f\u043e\u0441\u043b\u0435 \u0430\u043f\u0434\u0435\u0439\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0430 \u0430\u0442\u0430\u043a \u0442\u0435\u0440\u044f\u0435\u0442 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0438\u0437\u044a\u044f\u043d \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u0441\u044f \u043d\u0435\u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n\n\u0412\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430\u043c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432 \u0441\u043e\u0432\u0435\u0442\u0443\u044e\u0442 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 \u043a\u043e\u043c\u043f\u043b\u0435\u043a\u0441 \u0437\u0430\u0449\u0438\u0442\u043d\u044b\u0445 \u043c\u0435\u0440\u043e\u043f\u0440\u0438\u044f\u0442\u0438\u0439. \u041f\u0435\u0440\u0432\u043e\u043e\u0447\u0435\u0440\u0435\u0434\u043d\u0430\u044f \u0437\u0430\u0434\u0430\u0447\u0430 \u2014 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u043c\u0430\u043d\u0434\u0443 php craft setup/security-key \u0438 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f \u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0439 CRAFT_SECURITY_KEY \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0430\u0431\u043e\u0447\u0438\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f\u0445.\n\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0430 \u0442\u0430\u043a\u0436\u0435 \u0437\u0430\u043c\u0435\u043d\u0430 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0432 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043e\u043a\u0440\u0443\u0436\u0435\u043d\u0438\u044f (\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u0430\u043c\u0438 S3, Stripe \u0438 \u0434\u0440\u0443\u0433\u0438\u043c\u0438) \u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u0440\u0435\u043a\u0432\u0438\u0437\u0438\u0442\u043e\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u0431\u0430\u0437\u0430\u043c \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u043c\u0435\u0440\u044b \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u0438\u043d\u0443\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0441\u0431\u0440\u043e\u0441 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0432\u0441\u0435\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b php craft resave/users --set passwordResetRequired --to \"fn() => true\".\n\n\u0418\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u0438\u0437\u043d\u0430\u043a\u043e\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438, \u043e\u0445\u0432\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0435\u0442\u0435\u0432\u044b\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432, \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 \u043a \u043e\u0442\u0447\u0435\u0442\u0443 SensePost . \u0415\u0449\u0435 \u0432 \u0444\u0435\u0432\u0440\u0430\u043b\u0435 \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u043b\u043e \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0434\u0440\u0443\u0433\u043e\u0439 \u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0432 Craft CMS \u0432\u0435\u0440\u0441\u0438\u0439 4 \u0438 5 \u2014 CVE-2025-23209, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434. \u0427\u0435\u0440\u0435\u0434\u0430 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u043e\u0432 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u043d\u0430 \u0440\u0430\u0441\u0442\u0443\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0435\u0441 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u043e\u0432 \u043a \u044d\u0442\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435, \u0447\u0442\u043e \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043e\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432 \u043e\u0441\u043e\u0431\u043e\u0439 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u0442\u0440\u043e\u0433\u043e\u0433\u043e \u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432.\n\n\ud83d\udd14 ITsec NEWS", "url": "https://t.me/itsec_news/5879"}, {"timestamp": "2025-04-28T05:42:11.721Z", "date_only": false, "value": "2025-04-28T05:42:11.721890Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3lnu2mnja672d", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "44684f7c-7b6a-4933-8e21-731d66320108", "url": "https://bsky.app/profile/cyberhub.blog/post/3lnu2mnja672d"}, {"timestamp": "2025-04-28T09:24:24.341Z", "date_only": false, "value": "2025-04-28T09:24:24.341652Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lnugzwrqe226", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "94ab2385-eca3-43c6-8aff-639d8473e14d", "url": "https://bsky.app/profile/andranglin.bsky.social/post/3lnugzwrqe226"}, {"timestamp": "2025-04-28T09:54:36.706Z", "date_only": false, "value": "2025-04-28T09:54:36.706233Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/shiojiri.com/post/3lnuipythkc2r", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "01336484-3828-4a9c-b80d-032b4fec7940", "url": "https://bsky.app/profile/shiojiri.com/post/3lnuipythkc2r"}, {"timestamp": "2025-04-28T10:03:13.442Z", "date_only": false, "value": "2025-04-28T10:03:13.442763Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hackingne.ws/post/3lnuj7finrt2f", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "7b0e508d-59a9-4af4-a7d4-9ab1556dc7ae", "url": "https://bsky.app/profile/hackingne.ws/post/3lnuj7finrt2f"}, {"timestamp": "2025-04-28T11:03:08.872Z", "date_only": false, "value": "2025-04-28T11:03:08.872281Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3lnumkjrsuu2e", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "d6f14e5c-0186-4bb7-898b-2e090728bc5c", "url": "https://bsky.app/profile/securityrss.bsky.social/post/3lnumkjrsuu2e"}, {"timestamp": "2025-04-28T14:58:11.666Z", "date_only": false, "value": "2025-04-28T14:58:11.666410Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lnuzospwqr2g", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "dfc2e78d-76f7-4ad9-87ec-f4ab92a277c8", "url": "https://bsky.app/profile/nimblenerd.social/post/3lnuzospwqr2g"}, {"timestamp": "2025-04-28T15:10:37Z", "date_only": false, "value": "2025-04-28T15:10:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/6991", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "80ed5fdc-b005-4daa-8dc4-7abf7a393a43", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u044f\u043b\u043e\u0441\u044c \u0437\u0430 Craft CMS, \u0443\u0441\u043f\u0435\u0432, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 0-day \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0410\u0442\u0430\u043a\u0438, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 Orange Cyberdefense SensePost 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n- CVE-2024-58136\u00a0(CVSS: 9,0): \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii PHP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c Craft CMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0438\u043b\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c (\u0440\u0435\u0433\u0440\u0435\u0441\u0441 CVE-2024-4990).\n\n- CVE-2025-32432\u00a0(CVSS: 10,0): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Craft CMS (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.9.15, 4.14.15 \u0438 5.6.17).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, CVE-2025-32432 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435.\n\nCVE-2025-32432 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 POST \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0437\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 POST \u0431\u0443\u0434\u0443\u0442 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.x Craft CMS \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 4.x \u0438 5.x \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440  \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0434\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0441 \u043a\u0430\u0436\u0434\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 Craft CMS, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430.\n\n\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 Craft CMS \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0441\u043f\u043e\u0441\u043e\u0431\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 \u0430\u043a\u0442\u0438\u0432\u0443 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043a\u0440\u0438\u043f\u0442 Python, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f PHP-\u0444\u0430\u0439\u043b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f GitHub.\n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 10 \u043f\u043e 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0442\u0442\u043e\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 filemanager.php \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 Python. \n\n\u0424\u0430\u0439\u043b filemanager.php \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d \u0432 autoload_classmap.php 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 18 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 13\u00a0000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Craft CMS, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043a\u043e\u043b\u043e 300 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Craft CMS, \u0435\u0441\u043b\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0430\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b POST \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Craft actions/assets/generate-transform, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043e \u0441\u0442\u0440\u043e\u043a\u043e\u0439 __class \u0432 \u0442\u0435\u043b\u0435, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u0430\u0439\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0446\u0435\u043b\u044f\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.", "url": "https://t.me/true_secator/6991"}, {"timestamp": "2025-04-28T17:52:18Z", "date_only": false, "value": "2025-04-28T17:52:18.000000Z", "kind": "sighting", "label": "Confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-32432.yaml", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "3e2334b0-68f9-4019-a892-0052f2ffb1a0", "url": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-32432.yaml"}, {"timestamp": "2025-04-28T18:02:47Z", "date_only": false, "value": "2025-04-28T18:02:47.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/S_E_Reborn/5584", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "927d78c4-80f6-45b7-b33b-6540434adffa", "content": "\u041a\u0438\u0431\u0435\u0440\u043f\u043e\u0434\u043f\u043e\u043b\u044c\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0432\u0437\u044f\u043b\u043e\u0441\u044c \u0437\u0430 Craft CMS, \u0443\u0441\u043f\u0435\u0432, \u043f\u043e \u0432\u0441\u0435\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u043e\u0442\u043d\u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043d\u0430\u0446\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u0430 \u0434\u0432\u0435 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 0-day \u0430\u0442\u0430\u043a \u0441 \u0446\u0435\u043b\u044c\u044e \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\n\u0410\u0442\u0430\u043a\u0438, \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 Orange Cyberdefense SensePost 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439:\n\n- CVE-2024-58136\u00a0(CVSS: 9,0): \u043d\u0435\u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u043e\u0448\u0438\u0431\u043a\u0438 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii PHP, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c Craft CMS, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0430 \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u043d\u044b\u043c \u0444\u0443\u043d\u043a\u0446\u0438\u044f\u043c \u0438\u043b\u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c (\u0440\u0435\u0433\u0440\u0435\u0441\u0441 CVE-2024-4990).\n\n- CVE-2025-32432\u00a0(CVSS: 10,0): \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0432 Craft CMS (\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.9.15, 4.14.15 \u0438 5.6.17).\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, CVE-2025-32432 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0441\u0430\u0439\u0442\u043e\u0432 \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u0442\u044c \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u043c \u0444\u043e\u0440\u043c\u0430\u0442\u0435.\n\nCVE-2025-32432 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0437\u0430\u043f\u0440\u043e\u0441 POST \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u0443\u044e \u0442\u043e\u0447\u043a\u0443, \u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0437\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0438\u0437\u043e\u0431\u0440\u0430\u0436\u0435\u043d\u0438\u044f, \u0438 \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 POST \u0431\u0443\u0434\u0443\u0442 \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\n\n\u0412 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 3.x Craft CMS \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u0434\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043e\u0431\u044a\u0435\u043a\u0442\u0430 \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0442\u043e\u0433\u0434\u0430 \u043a\u0430\u043a \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 4.x \u0438 5.x \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440  \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0441\u043b\u0435.\n\n\u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0434\u043b\u044f \u0442\u043e\u0433\u043e \u0447\u0442\u043e\u0431\u044b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0441 \u043a\u0430\u0436\u0434\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0435\u0439 Craft CMS, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043d\u0430\u0439\u0442\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430.\n\n\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 Craft CMS \u043e\u0442\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a \u0441\u043f\u043e\u0441\u043e\u0431\u0443 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0444\u0430\u0439\u043b\u0430\u043c\u0438 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0438 \u043c\u0435\u0434\u0438\u0430\u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043a\u0430\u0436\u0434\u043e\u043c\u0443 \u0430\u043a\u0442\u0438\u0432\u0443 \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u0437\u0430 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0435\u0439, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u044e\u0442 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e POST-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u0431\u0443\u0434\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 \u0430\u043a\u0442\u0438\u0432\u0430, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442\u0441\u044f \u0441\u043a\u0440\u0438\u043f\u0442 Python, \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u044f PHP-\u0444\u0430\u0439\u043b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0438\u0437 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f GitHub.\n\n\u0412 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 10 \u043f\u043e 11 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0437\u0430\u043c\u0435\u0442\u043d\u043e \u043e\u0442\u0442\u043e\u0447\u0438\u043b\u0438 \u0441\u0432\u043e\u0438 \u0441\u043a\u0440\u0438\u043f\u0442\u044b, \u043c\u043d\u043e\u0433\u043e\u043a\u0440\u0430\u0442\u043d\u043e \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 filemanager.php \u043d\u0430 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043a\u0440\u0438\u043f\u0442\u0430 Python. \n\n\u0424\u0430\u0439\u043b filemanager.php \u0431\u044b\u043b \u043f\u0435\u0440\u0435\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d \u0432 autoload_classmap.php 12 \u0444\u0435\u0432\u0440\u0430\u043b\u044f \u0438 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0431\u044b\u043b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d 14 \u0444\u0435\u0432\u0440\u0430\u043b\u044f.\n\n\u041f\u043e \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u044e \u043d\u0430 18 \u0430\u043f\u0440\u0435\u043b\u044f 2025 \u0433\u043e\u0434\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043e\u043a\u043e\u043b\u043e 13\u00a0000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 Craft CMS, \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043e\u043a\u043e\u043b\u043e 300 \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0431\u044b\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u044b.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Craft CMS, \u0435\u0441\u043b\u0438 \u043f\u0440\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430 \u0438\u043b\u0438 \u0432\u0435\u0431-\u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0430\u0442\u0441\u044f \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b POST \u043a \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Craft actions/assets/generate-transform, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0441\u043e \u0441\u0442\u0440\u043e\u043a\u043e\u0439 __class \u0432 \u0442\u0435\u043b\u0435, \u0442\u043e \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u043b\u0430\u0433\u0430\u0442\u044c, \u0447\u0442\u043e \u0441\u0430\u0439\u0442 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b\u0441\u044f \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u041f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0431\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445, \u0441\u0431\u0440\u043e\u0441\u0438\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \u0446\u0435\u043b\u044f\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u043e\u0440\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 \u0431\u0440\u0430\u043d\u0434\u043c\u0430\u0443\u044d\u0440\u0430.", "url": "https://t.me/S_E_Reborn/5584"}, {"timestamp": "2025-04-28T22:01:50.962Z", "date_only": false, "value": "2025-04-28T22:01:50.962467Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnvrea65pc2y", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "2379692d-a729-479e-8721-2655a59fb18c", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnvrea65pc2y"}, {"timestamp": "2025-04-28T22:44:52.488Z", "date_only": false, "value": "2025-04-28T22:44:52.488840Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnvtraear22y", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "f5f988b7-e49e-4c12-973f-17302d5718c7", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnvtraear22y"}, {"timestamp": "2025-04-29T02:15:35.545Z", "date_only": false, "value": "2025-04-29T02:15:35.545847Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3lnw7k4t3fq24", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "2c436a37-8221-4b1c-aa84-e6d03dcf6adb", "url": "https://bsky.app/profile/pmloik.bsky.social/post/3lnw7k4t3fq24"}, {"timestamp": "2025-04-29T04:11:16Z", "date_only": false, "value": "2025-04-29T04:11:16.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/13769", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "930bfcd7-e8cb-4cd3-853f-ae6429ecd396", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-32432\n\ud83d\udd25 CVSS Score: 10 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L)\n\ud83d\udd39 Description: Craft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.\n\ud83d\udccf Published: 2025-04-25T15:04:06.272Z\n\ud83d\udccf Modified: 2025-04-29T03:55:14.713Z\n\ud83d\udd17 References:\n1. https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3\n2. https://github.com/craftcms/cms/commit/e1c85441fa47eeb7c688c2053f25419bc0547b47\n3. https://github.com/craftcms/cms/blob/3.x/CHANGELOG.md#3915---2025-04-10-critical\n4. https://github.com/craftcms/cms/blob/4.x/CHANGELOG.md#41415---2025-04-10-critical\n5. https://github.com/craftcms/cms/blob/5.x/CHANGELOG.md#5617---2025-04-10-critical", "url": "https://t.me/DarkWebInformer_CVEAlerts/13769"}, {"timestamp": "2025-04-29T07:53:36.422Z", "date_only": false, "value": "2025-04-29T07:53:36.422444Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnwseuzbx272", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "e1beda28-6bac-4c41-8a19-44101d4eeaf8", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnwseuzbx272"}, {"timestamp": "2025-04-29T14:30:38.338Z", "date_only": false, "value": "2025-04-29T14:30:38.338518Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lnxilz3tmcu2", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "cff0b03a-3938-4e84-9376-6e6ca4e6e461", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lnxilz3tmcu2"}, {"timestamp": "2025-04-30T05:58:21Z", "date_only": false, "value": "2025-04-30T05:58:21.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberbannews_ir/16505", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "df902433-ea79-4010-9b25-6a34e7a51ef3", "content": "\ud83e\ude99 \u06a9\u0634\u0641 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 Craft CMS\n\n\ud83d\udd3a\u0633\u06cc\u0633\u062a\u0645 Craft CMS\u00a0\u06cc\u06a9 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0645\u062d\u062a\u0648\u0627\u06cc \u067e\u06cc\u0634\u0631\u0641\u062a\u0647 \u0648 \u0627\u0646\u0639\u0637\u0627\u0641\u200c\u067e\u0630\u06cc\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0647 \u06a9\u0633\u0628\u200c\u0648\u06a9\u0627\u0631\u0647\u0627 \u0648 \u062a\u0648\u0633\u0639\u0647\u200c\u062f\u0647\u0646\u062f\u06af\u0627\u0646 \u06a9\u0645\u06a9 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0648\u0628\u200c\u0633\u0627\u06cc\u062a\u200c\u0647\u0627 \u0648 \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646 \u0645\u0646\u062d\u0635\u0631\u0628\u0647\u200c\u0641\u0631\u062f \u0648 \u0645\u062a\u0646\u0627\u0633\u0628 \u0628\u0627 \u0646\u06cc\u0627\u0632\u0647\u0627\u06cc \u062e\u0648\u062f \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u0646\u062f. \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0645\u062d\u0628\u0648\u0628\u06cc\u062a \u0627\u06cc\u0646 \u067e\u0644\u062a\u0641\u0631\u0645 \u062f\u0631 \u067e\u0631\u0648\u0698\u0647\u200c\u0647\u0627\u06cc \u0633\u0627\u0632\u0645\u0627\u0646\u06cc \u0648 \u062a\u062c\u0627\u0631\u06cc\u060c \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0622\u0646 \u0627\u0647\u0645\u06cc\u062a \u0628\u0627\u0644\u0627\u06cc\u06cc \u062f\u0627\u0631\u062f.\n\n\ud83d\udd3b\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc CVE-2025-32432 \u06a9\u0647 \u0627\u062e\u06cc\u0631\u0627\u064b \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a\u060c Craft CMS \u0631\u0627 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a \u0627\u062c\u0631\u0627\u06cc \u06a9\u062f \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0627\u06cc\u0646\u06a9\u0647 \u0634\u062f\u062a \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc 10 \u0627\u0633\u062a\u060c \u0631\u0641\u0639 \u0633\u0631\u06cc\u0639 \u0622\u0646 \u0636\u0631\u0648\u0631\u06cc \u0645\u06cc\u200c\u0628\u0627\u0634\u062f.\n\n#\u0622\u0633\u06cc\u0628_\u067e\u0630\u06cc\u0631\u06cc #\u0648\u0631\u062f_\u067e\u0631\u0633\n\n\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\ud83d\udd38\n\ud83d\udd39\ud83d\udd39 @cyberbannews_ir", "url": "https://t.me/cyberbannews_ir/16505"}, {"timestamp": "2025-05-01T05:30:42.149Z", "date_only": false, "value": "2025-05-01T05:30:42.149077Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/kriware.bsky.social/post/3lo3leueicp2g", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "25eea6bc-b878-4920-a251-b4777724cc2d", "url": "https://bsky.app/profile/kriware.bsky.social/post/3lo3leueicp2g"}, {"timestamp": "2025-05-01T11:52:11Z", "date_only": false, "value": "2025-05-01T11:52:11.000000Z", "kind": "sighting", "label": "Seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_preauth_rce_cve_2025_32432.rb", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "4e5ad1cc-6484-4a53-8999-6f7967734104", "url": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/craftcms_preauth_rce_cve_2025_32432.rb"}, {"timestamp": "2025-05-01T21:03:09.778Z", "date_only": false, "value": "2025-05-01T21:03:09.778756Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo57i2urhi23", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "5a104e82-1eee-4812-b832-c8c5f4521583", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo57i2urhi23"}, {"timestamp": "2025-05-02T14:06:21Z", "date_only": false, "value": "2025-05-02T14:06:21.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/liwaamohammad/1925", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "9bec1c24-57e2-42e3-99e5-329e340887a5", "content": "https://github.com/Chocapikk/CVE-2025-32432\n\nCheck for CVE-2025-32432 vulnerability\n#github #exploit", "url": "https://t.me/liwaamohammad/1925"}, {"timestamp": "2025-05-02T18:20:15.310Z", "date_only": false, "value": "2025-05-02T18:20:15.310059Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/3929485", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "749194c4-a19c-4450-9514-b2d65fdc7294", "url": "https://feedsin.space/feed/CISAKevBot/items/3929485"}, {"timestamp": "2025-05-02T21:02:26.763Z", "date_only": false, "value": "2025-05-02T21:02:26.763554Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo7pvri64s2q", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "57e039aa-ecf4-4683-801e-47c90159d8d4", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lo7pvri64s2q"}, {"timestamp": "2025-05-05T10:30:13Z", "date_only": false, "value": "2025-05-05T10:30:13.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSec/290", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "65002ae3-e8d1-4290-8f49-3f006e1ac444", "content": "1. https://github.com/Sachinart/CVE-2025-32432\nCheck for CVE-2025-32432 vulnerability\n#github #exploit\n\n\n2. https://github.com/helidem/CVE-2025-24054-PoC\nProof of Concept for NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n3. https://github.com/ajdumanhug/CVE-2023-46818\nCVE-2023-46818 Python3 Exploit for ISPConfig <= 3.2.11 PHP Code Injection\n#github #exploit\n\n\n4. https://github.com/0x6rss/CVE-2025-24071_PoC\nNTLM hash leak via .library-ms inside ZIP/RAR (CVE-2025-24071)\n#github #poc\n\n\n5. https://github.com/trickest/cve/blob/main/2022/CVE-2022-42092.md\nCVE-2022-42092 \u2013 Backdrop CMS RCE PoC\n#github #exploit\n\n\n6. https://github.com/nomi-sec/PoC-in-GitHub\nAggregated CVE Exploits and PoCs from GitHub\n#github #tool\n\n\n7. https://github.com/SofianeHamlaoui/CVE-2022-0492-Checker\nLinux Container Escape CVE-2022-0492 vulnerability checker\n#github #exploit\n\n\n8. https://github.com/xigney/CVE-2025-24054_PoC\nAlternate NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n9. https://github.com/bipbopbup/CVE-2023-46818-python-exploit\nPython PoC for CVE-2023-46818 in ISPConfig\n#github #exploit\n\n\n10. https://github.com/Marcejr117/CVE-2025-24071_PoC\nNTLM Hash Leak using .library-ms via ZIP trick (CVE-2025-24071)\n#github #poc\n\n\n11. https://github.com/Ostorlab/KEV\nKnown Exploited Vulnerabilities Detector\n#github #scanner\n\n\n12. https://github.com/edoardottt/missing-cve-nuclei-templates\nMissing CVE Detection via Nuclei Templates\n#github #scanner\n\n\n13. https://github.com/hyp3rlinx/Advisories\nZero-Day Security Advisories and Exploits by Hyp3rlinx\n#github #exploit\n\n\n14. https://github.com/Kubashok/apple-cve-repos\nApple CVE Database Links Repository\n#github #cve\n\n\n15. https://github.com/esnet/Seccubus_v2\nSeccubus Test Data for Vulnerability Scanners\n#github #tool\n\n\n16. https://github.com/skordemir/Xml2Ontology\nNessus XML Vulnerability Report Samples\n#github #data\n\n\n17. https://github.com/madirish/hector\nHector: Vulnerability Management Tool with Sample Nessus Reports\n#github #tool\n\n\n18. https://github.com/projectdiscovery/nuclei-templates/issues/8804\nNuclei Template request for ISPConfig CVE-2023-46818\n#github #scanner\n\n\n19. https://github.com/projectdiscovery/nuclei-templates/issues/12020\nNuclei Template PoC Request for CraftCMS CVE-2025-32432\n#github #scanner\n\n\n20. https://github.com/tanjiti/sec_profile\nSecurity Profile Aggregator \u2013 CVE, CISA, NVD, etc.\n#github #intel\n\n\n21. https://github.com/cube0x0/CVE-2021-1675\nPrintNightmare Exploit PoC (CVE-2021-1675 / CVE-2021-34527)\n#github #exploit\n\n22. https://github.com/Maldev-Academy/LsassHijackingViaReg\n\nInjecting DLL into LSASS at boot\n#github #tools\n\n\nOpen-source tools and proof-of-concept (PoC) repositories related to recent CVEs, exploits, and security research. These resources are valuable for educational purposes and can aid students in understanding real-world vulnerabilities and exploitation techniques.", "url": "https://t.me/NinjaSec/290"}, {"timestamp": "2025-05-23T19:56:12.610Z", "date_only": false, "value": "2025-05-23T19:56:12.610899Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/rollinstudios.bsky.social/post/3lpufymdmns2t", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "7d33531d-520a-4181-add0-b719606da84f", "url": "https://bsky.app/profile/rollinstudios.bsky.social/post/3lpufymdmns2t"}, {"timestamp": "2025-05-27T12:02:45.232Z", "date_only": false, "value": "2025-05-27T12:02:45.232682Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lq5nftphue2a", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "0235a572-37e3-4383-9047-a71047522a94", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3lq5nftphue2a"}, {"timestamp": "2025-05-28T09:00:00Z", "date_only": false, "value": "2025-05-28T09:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://thehackernews.com/2025/05/mimo-hackers-exploit-cve-2025-32432-in.html", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "dc0b3d46-8c11-479e-bf52-c1857df201f7", "url": "https://thehackernews.com/2025/05/mimo-hackers-exploit-cve-2025-32432-in.html"}, {"timestamp": "2025-05-28T09:35:27.302Z", "date_only": false, "value": "2025-05-28T09:35:27.302803Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/virusbtn.bsky.social/post/3lq7vn4kk3c2k", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "e24a278c-4288-4b3d-be0f-dcfac2e50c5c", "url": "https://bsky.app/profile/virusbtn.bsky.social/post/3lq7vn4kk3c2k"}, {"timestamp": "2025-05-28T11:21:01Z", "date_only": false, "value": "2025-05-28T11:21:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/DarkWebInformer_News/4915", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "711b3751-1cc1-42cd-9556-da29e7a2d303", "content": "\ud83d\udea8 News Alert!\n\nSource: The Hacker News\nTitle: Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware\nLink: https://thehackernews.com/2025/05/mimo-hackers-exploit-cve-2025-32432-in.html", "url": "https://t.me/DarkWebInformer_News/4915"}, {"timestamp": "2025-05-28T11:40:37.736Z", "date_only": false, "value": "2025-05-28T11:40:37.736706Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lqa4mwykjwn2", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "ebb285e7-ff3e-41ec-b0f6-284e51033e57", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lqa4mwykjwn2"}, {"timestamp": "2025-05-28T11:41:10.076Z", "date_only": false, "value": "2025-05-28T11:41:10.076887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lqa4nccaehn2", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "9fa55a61-64de-45d6-bce8-ac0ae5d4179f", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lqa4nccaehn2"}, {"timestamp": "2025-05-28T11:42:21.348Z", "date_only": false, "value": "2025-05-28T11:42:21.348617Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/cti-news.bsky.social/post/3lqa4qbu62l2w", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "2af79c49-361b-4751-8538-2bfc4b04d7f5", "url": "https://bsky.app/profile/cti-news.bsky.social/post/3lqa4qbu62l2w"}, {"timestamp": "2025-05-28T11:47:48.481Z", "date_only": false, "value": "2025-05-28T11:47:48.481887Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/montxt.bsky.social/post/3lqa4zznda52t", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "6b1d0761-efbf-4aae-a2ab-ae163dc621f0", "url": "https://bsky.app/profile/montxt.bsky.social/post/3lqa4zznda52t"}, {"timestamp": "2025-05-28T11:51:03.265Z", "date_only": false, "value": "2025-05-28T11:51:03.265080Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqa57k3rmen2", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "dc2bf2a6-4b5b-4cce-afc5-ee6ef106174c", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqa57k3rmen2"}, {"timestamp": "2025-05-28T11:57:31.675Z", "date_only": false, "value": "2025-05-28T11:57:31.675986Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lqa5lfljdm24", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "ad7268de-058b-44fa-b899-ad7f4c1ccec7", "url": "https://bsky.app/profile/nimblenerd.social/post/3lqa5lfljdm24"}, {"timestamp": "2025-05-28T12:03:33Z", "date_only": false, "value": "2025-05-28T12:03:33.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/TengkorakCyberCrewzz/2609", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "33cc3f13-981a-40e8-b7d9-1a58efb4c5c4", "content": "Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware \u2013 thehackernews.com\n\nWed, 28 May 2025 19:00:00", "url": "https://t.me/TengkorakCyberCrewzz/2609"}, {"timestamp": "2025-05-28T12:04:16.605Z", "date_only": false, "value": "2025-05-28T12:04:16.605177Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqa5xhlpiz2u", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "601fd4b3-2e84-4ec6-a05b-31f84c7fdb7c", "url": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lqa5xhlpiz2u"}, {"timestamp": "2025-05-28T13:07:12Z", "date_only": false, "value": "2025-05-28T13:07:12.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/thehackernews/6901", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "642c0f38-2ad1-4366-8c6a-371f4b6331d3", "content": "\ud83d\udea8 A new zero-day is under attack \u2014 and it\u2019s making money off your CMS.\n\nHackers are hijacking Craft CMS via a fresh zero-day to mine crypto and sell your bandwidth \u2014 all with stealthy new tools. One odd Python trick might help you spot them.\n\nLearn more: https://thehackernews.com/2025/05/mimo-hackers-exploit-cve-2025-32432-in.html", "url": "https://t.me/thehackernews/6901"}, {"timestamp": "2025-05-28T14:03:33Z", "date_only": false, "value": "2025-05-28T14:03:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/13491", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "b9a3aab4-302a-4d08-a29f-a09db05ce4ed", "content": "Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware \u2013 thehackernews.com\n\nWed, 28 May 2025 19:00:00", "url": "https://t.me/MalaysiaHacktivistz/13491"}, {"timestamp": "2025-05-28T14:03:33Z", "date_only": false, "value": "2025-05-28T14:03:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/MalaysiaHacktivistz/4468", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "00996675-c2cd-4b01-b51b-b6a0a245b5ce", "content": "Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware \u2013 thehackernews.com\n\nWed, 28 May 2025 19:00:00", "url": "https://t.me/MalaysiaHacktivistz/4468"}, {"timestamp": "2025-05-28T14:03:33Z", "date_only": false, "value": "2025-05-28T14:03:33.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/TengkorakCyberCrewzz/31497", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "e96a750c-b8f0-4688-92f7-5a08096ad20b", "content": "Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware \u2013 thehackernews.com\n\nWed, 28 May 2025 19:00:00", "url": "https://t.me/TengkorakCyberCrewzz/31497"}, {"timestamp": "2025-05-28T14:14:01Z", "date_only": false, "value": "2025-05-28T14:14:01.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/-p1nygxBVmj-BMsr-NAuovMG6kSRpBR8Vd-csW-0KhQ_MQ", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "a1eb77d2-4dda-4e4e-b6c4-adcfa0e43990"}, {"timestamp": "2025-05-28T14:41:20Z", "date_only": false, "value": "2025-05-28T14:41:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/crw_-P57cZToeFN7u8-b6BVyp3Xb7yw8qMjnnUlxQtrsKbI", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "668eb20e-ab67-4903-b306-b687e7ec0691"}, {"timestamp": "2025-05-28T15:03:25.428Z", "date_only": false, "value": "2025-05-28T15:03:25.428037Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/techit.bsky.social/post/3lqahxsolu42m", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "7851d4ae-f197-435d-b242-d8b36f6acba7", "url": "https://bsky.app/profile/techit.bsky.social/post/3lqahxsolu42m"}, {"timestamp": "2025-05-28T15:37:35.192Z", "date_only": false, "value": "2025-05-28T15:37:35.192881Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.bsky.social/post/3lqajurc2yc27", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "2c448197-3a2f-4a4b-8616-920e882327e5", "url": "https://bsky.app/profile/thedailytechfeed.bsky.social/post/3lqajurc2yc27"}, {"timestamp": "2025-05-28T17:27:25Z", "date_only": false, "value": "2025-05-28T17:27:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/85117", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "1ee2c320-df35-47b0-9ea3-a4022f9946eb", "content": "\ud83d\udd8b\ufe0f Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware \ud83d\udd8b\ufe0f\n\nA financially motivated threat actor has been observed exploiting a recently disclosed remote code execution flaw affecting the Craft Content Management System CMS to deploy multiple payloads, including a cryptocurrency miner, a loader dubbed Mimo Loader, and residential proxyware. The vulnerability in question is CVE202532432, a maximum severity flaw in Craft CMS that was patched in.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/85117"}, {"timestamp": "2025-05-28T17:27:25Z", "date_only": false, "value": "2025-05-28T17:27:25.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/85118", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "cf2c19fa-672d-43b3-941f-387d853786e3", "content": "\ud83d\udd8b\ufe0f Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware \ud83d\udd8b\ufe0f\n\nA financially motivated threat actor has been observed exploiting a recently disclosed remote code execution flaw affecting the Craft Content Management System CMS to deploy multiple payloads, including a cryptocurrency miner, a loader dubbed Mimo Loader, and residential proxyware. The vulnerability in question is CVE202532432, a maximum severity flaw in Craft CMS that was patched in.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/85118"}, {"timestamp": "2025-05-28T21:27:06.186Z", "date_only": false, "value": "2025-05-28T21:27:06.186654Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lqb5d5wp6fa2", "record": "cve-2025-32432", "field": "creation_timestamp", "uuid": "f2e5db84-dce9-48bb-b9e8-5e96c2c23b4f", "url": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3lqb5d5wp6fa2"}, {"timestamp": "2025-05-28T22:43:38Z", "date_only": false, "value": "2025-05-28T22:43:38.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/85088", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "9cf97828-ab71-4ef2-8ac7-b8095ad8e870", "content": "\ud83d\udd8b\ufe0f Mimo Hackers Exploit CVE-2025-32432 in Craft CMS to Deploy Cryptominer and Proxyware \ud83d\udd8b\ufe0f\n\nA financially motivated threat actor has been observed exploiting a recently disclosed remote code execution flaw affecting the Craft Content Management System CMS to deploy multiple payloads, including a cryptocurrency miner, a loader dubbed Mimo Loader, and residential proxyware. The vulnerability in question is CVE202532432, a maximum severity flaw in Craft CMS that was patched in.\n\n\ud83d\udcd6 Read more.\n\n\ud83d\udd17 Via \"The Hacker News\"\n\n----------\n\ud83d\udc41\ufe0f Seen on @cibsecurity", "url": "https://t.me/cibsecurity/85088"}, {"timestamp": "2025-05-28T23:12:32.660Z", "date_only": false, "value": "2025-05-28T23:12:32.660588Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/ninjaowl.ai/post/3lqbdcgfxm52m", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "15b4a516-6b89-4f59-9e5f-857315b43b38", "url": "https://bsky.app/profile/ninjaowl.ai/post/3lqbdcgfxm52m"}, {"timestamp": "2025-05-29T07:13:48.576Z", "date_only": false, "value": "2025-05-29T07:13:48.576564Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqc66ym5zs2k", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "dd201873-abbf-4d38-bb19-85c0aad994f6", "url": "https://bsky.app/profile/hacker.at.thenote.app/post/3lqc66ym5zs2k"}, {"timestamp": "2025-06-02T17:59:18.059Z", "date_only": false, "value": "2025-06-02T17:59:18.059053Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4135365", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "12316594-dc1e-4de9-a169-74fa5fe4b9e7", "url": "https://feedsin.space/feed/CISAKevBot/items/4135365"}, {"timestamp": "2025-07-08T03:22:16.437Z", "date_only": false, "value": "2025-07-08T03:22:16.437212Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/dasgeldco.bsky.social/post/3ltgdvsqejf2p", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "1467772d-020f-4bdc-be0d-2745e27aea81", "url": "https://bsky.app/profile/dasgeldco.bsky.social/post/3ltgdvsqejf2p"}, {"timestamp": "2025-07-16T09:27:49Z", "date_only": false, "value": "2025-07-16T09:27:49.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/44221", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "b099cec8-12a3-4da3-8dca-910ec0d238ab", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-32432\nURL\uff1ahttps://github.com/B1ack4sh/Blackash-CVE-2025-32432\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/44221"}, {"timestamp": "2025-07-16T15:00:06Z", "date_only": false, "value": "2025-07-16T15:00:06.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/-eVtmnn41aX142EGm4PDd1vAvsYrV5qccUCeh8-YPAmHevg", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "9e512130-135f-4cfe-8867-7f9d44f2a6f7"}, {"timestamp": "2025-08-03T21:02:53.454Z", "date_only": false, "value": "2025-08-03T21:02:53.454262Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbwrzi32f", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "b81891af-b0e5-470c-a882-188ec8111b43", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbwrzi32f"}, {"timestamp": "2025-09-23T06:24:57Z", "date_only": false, "value": "2025-09-23T06:24:57.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/52739", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "0ee42686-c987-4e88-b7c3-728c3bccbf6c", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aAI\u4fee\u590d\u751f\u6210\u7684CVE-2025-32432\u7684poc\nURL\uff1ahttps://github.com/bambooqj/CVE-2025-32432\n\n\u6807\u7b7e\uff1a#CVE-2025", "url": "https://t.me/GithubRedTeam/52739"}, {"timestamp": "2025-09-23T09:00:05Z", "date_only": false, "value": "2025-09-23T09:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/zQWZRmlZZJlnuRGMIjUF1jUVSyI94XK8md6pgqoM1JwlMZE", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "849bba86-1047-4efc-b723-a25a99743048"}, {"timestamp": "2025-10-23T21:13:04Z", "date_only": false, "value": "2025-10-23T21:13:04.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "817dbe7f-2194-472e-ac8b-69609ef4005f"}, {"timestamp": "2026-01-12T14:00:53.551Z", "date_only": false, "value": "2026-01-12T14:00:53.551101Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/alexandreborges.bsky.social/post/3mca7arbp6k2o", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "981769b6-36c7-40a8-bf7a-56bed8d30578", "url": "https://bsky.app/profile/alexandreborges.bsky.social/post/3mca7arbp6k2o"}, {"timestamp": "2026-01-24T21:30:29Z", "date_only": false, "value": "2026-01-24T21:30:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/9ae22252a01711933c801903c50fff8f", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "476db8ad-a2cd-49fa-bcd8-1c9cc117366d", "url": "https://gist.github.com/alon710/9ae22252a01711933c801903c50fff8f"}, {"timestamp": "2026-01-24T21:30:30Z", "date_only": false, "value": "2026-01-24T21:30:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/e589cf0bc7a54574edafd652b4a30658", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "40cabca0-d71c-43db-98ca-ae0c28fbfe17", "url": "https://gist.github.com/alon710/e589cf0bc7a54574edafd652b4a30658"}, {"timestamp": "2026-01-24T22:42:31Z", "date_only": false, "value": "2026-01-24T22:42:31.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/alon710/d7aaf1c76ca3b28f6e9c13a27aff2873", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "05e8576c-1cd6-4201-b4bb-88b751bf767f", "url": "https://gist.github.com/alon710/d7aaf1c76ca3b28f6e9c13a27aff2873"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2025-32432", "field": "timestamps.asserted_at", "uuid": "6e3ce59b-1090-48f9-b214-2ccdb4a34d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": true, "value": "2026-03-20", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32432", "field": "containers.adp.0.metrics.1.other.content.dateAdded"}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": true, "value": "2026-03-20", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2025-32432", "field": "evidence.0.details.date_added", "uuid": "6e3ce59b-1090-48f9-b214-2ccdb4a34d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2025-32432", "field": "timestamps.first_seen_at", "uuid": "6e3ce59b-1090-48f9-b214-2ccdb4a34d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2025-32432", "field": "status.status_updated_at", "uuid": "6e3ce59b-1090-48f9-b214-2ccdb4a34d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T00:00:00Z", "date_only": false, "value": "2026-03-20T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32432", "field": "containers.adp.0.timeline.0.time"}, {"timestamp": "2026-03-20T12:00:00Z", "date_only": false, "value": "2026-03-20T12:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.cisa.gov/news-events/alerts/2026/03/20/cisa-adds-five-known-exploited-vulnerabilities-catalog", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "5c02e9b9-e1c5-4116-a82c-b4802271dcde", "url": "https://www.cisa.gov/news-events/alerts/2026/03/20/cisa-adds-five-known-exploited-vulnerabilities-catalog"}, {"timestamp": "2026-03-20T16:00:01Z", "date_only": false, "value": "2026-03-20T16:00:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2025-32432", "field": "timestamps.recorded_at", "uuid": "6e3ce59b-1090-48f9-b214-2ccdb4a34d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-03-20T16:00:10.057Z", "date_only": false, "value": "2026-03-20T16:00:10.057861Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e3ce59b-1090-48f9-b214-2ccdb4a34d1b", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "025782bd-92dc-4987-88c9-db20c8b3c4fa", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6e3ce59b-1090-48f9-b214-2ccdb4a34d1b"}, {"timestamp": "2026-03-20T16:01:16.685Z", "date_only": false, "value": "2026-03-20T16:01:16.685463Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/AAKL/statuses/116262336964134871", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "932771af-f21a-44a7-be71-86251598e4bb", "url": "https://infosec.exchange/users/AAKL/statuses/116262336964134871"}, {"timestamp": "2026-03-20T16:01:38.238Z", "date_only": false, "value": "2026-03-20T16:01:38.238958Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhivagfufo2k", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "7e53b494-8b0d-4e4d-bfaf-37283d974b18", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhivagfufo2k"}, {"timestamp": "2026-03-20T16:07:02.580Z", "date_only": false, "value": "2026-03-20T16:07:02.580141Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/6059882", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "ad938880-b3de-48e6-afa9-7a23417980fd", "url": "https://feedsin.space/feed/CISAKevBot/items/6059882"}, {"timestamp": "2026-03-20T21:28:37Z", "date_only": false, "value": "2026-03-20T21:28:37Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F3GW-9WW9-JMC3", "record": "GHSA-F3GW-9WW9-JMC3", "field": "modified"}, {"timestamp": "2026-03-21T04:00:57.147Z", "date_only": false, "value": "2026-03-21T04:00:57.147Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2025-32432", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-03-21T04:00:57.147Z", "date_only": false, "value": "2026-03-21T04:00:57.147Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2025-32432", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-03-21T21:03:05.143Z", "date_only": false, "value": "2026-03-21T21:03:05.143760Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwkasrca2h", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "cd833243-f5d8-46ec-8193-ab7cf55e065e", "url": "https://bsky.app/profile/beikokucyber.bsky.social/post/3mhlwkasrca2h"}, {"timestamp": "2026-03-22T19:33:04.432Z", "date_only": false, "value": "2026-03-22T19:33:04.432228Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/riskscore.bsky.social/post/3mhobye4xdu23", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "8e5d2e0e-d810-467b-9191-abd6a536163d", "url": "https://bsky.app/profile/riskscore.bsky.social/post/3mhobye4xdu23"}, {"timestamp": "2026-03-22T22:00:15.435Z", "date_only": false, "value": "2026-03-22T22:00:15.435336Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/riskscore.bsky.social/post/3mhok7jz3kh2s", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "a66954a1-7935-44da-b554-bdfadaa7832e", "url": "https://bsky.app/profile/riskscore.bsky.social/post/3mhok7jz3kh2s"}, {"timestamp": "2026-03-23T11:30:29.338Z", "date_only": false, "value": "2026-03-23T11:30:29.338138Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhpxi6agt252", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "adef3943-3a0b-47cd-b235-64c22c3a4752", "url": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mhpxi6agt252"}, {"timestamp": "2026-03-23T14:03:19.167Z", "date_only": false, "value": "2026-03-23T14:03:19.167086Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mhq7zmhtk72z", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "0511edcf-575c-496b-a0fc-02ca855ec9ec", "url": "https://bsky.app/profile/undercode.bsky.social/post/3mhq7zmhtk72z"}, {"timestamp": "2026-03-23T14:35:40Z", "date_only": false, "value": "2026-03-23T14:35:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://cyber.gc.ca/en/alerts-advisories/craft-cms-security-advisory-av25-300", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "e0bd6cc8-bcfe-4146-aabc-5e112b2487c2", "url": "https://cyber.gc.ca/en/alerts-advisories/craft-cms-security-advisory-av25-300"}, {"timestamp": "2026-03-23T16:06:15.563Z", "date_only": false, "value": "2026-03-23T16:06:15.563591Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhqgvhjmb32r", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "4ede67e4-d152-4400-8461-3ce18149a899", "url": "https://bsky.app/profile/pigondrugs.bsky.social/post/3mhqgvhjmb32r"}, {"timestamp": "2026-03-24T16:15:26.540Z", "date_only": false, "value": "2026-03-24T16:15:26.540803Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mhsxurvh4325", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "3609c0e8-8026-437c-893c-527052f04c31", "url": "https://bsky.app/profile/thedailytechfeed.com/post/3mhsxurvh4325"}, {"timestamp": "2026-03-25T21:38:02.033Z", "date_only": false, "value": "2026-03-25T21:38:02.033541Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw2ejbcj22z", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "15b759b0-76a1-4c20-bb2a-11d0046a40c6", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw2ejbcj22z"}, {"timestamp": "2026-03-25T22:03:45.971Z", "date_only": false, "value": "2026-03-25T22:03:45.971743Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw3shrp722z", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "711e2483-03d9-4e75-80be-0fc70b9e4601", "url": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mhw3shrp722z"}, {"timestamp": "2026-04-03T00:00:00Z", "date_only": true, "value": "2026-04-03", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2025-32432", "field": "evidence.0.details.due_date", "uuid": "6e3ce59b-1090-48f9-b214-2ccdb4a34d1b", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-04-23T06:43:54Z", "date_only": false, "value": "2026-04-23T06:43:54.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/codeby_sec/10020", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "4472fb72-e636-4685-b5d7-c2306dc5cc0c", "content": "RCE \u0437\u0430 \u0442\u0440\u0438 \u0448\u0430\u0433\u0430: \u043a\u0430\u043a \u0447\u0438\u0442\u0430\u0442\u044c CVE advisory \u0438 \u043d\u0435 \u043e\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0442\u044c\u0441\u044f \u043d\u0430 CVSS-\u0431\u0430\u043b\u043b\u0435\n\n\u0411\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0435\u043d\u0442\u0435\u0441\u0442\u0435\u0440\u043e\u0432 \u0441\u043c\u043e\u0442\u0440\u044f\u0442 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e CVE, \u0437\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u044e\u0442 \u0446\u0438\u0444\u0440\u0443 9.8 \u0438 \u0438\u0434\u0443\u0442 \u0434\u0430\u043b\u044c\u0448\u0435. \u041c\u0435\u0436\u0434\u0443 \u0442\u0435\u043c \u0432 \u0442\u0435\u043a\u0441\u0442\u0435 advisory \u0443\u0436\u0435 \u043b\u0435\u0436\u0438\u0442 \u0433\u043e\u0442\u043e\u0432\u044b\u0439 \u0440\u0435\u0446\u0435\u043f\u0442 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u2014 \u0435\u0441\u043b\u0438 \u0437\u043d\u0430\u0442\u044c, \u043a\u0443\u0434\u0430 \u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c.\n\n\ud83d\udd0d \u0422\u0440\u0438 \u0444\u0430\u0437\u044b \u0434\u043b\u044f \u043b\u044e\u0431\u043e\u0433\u043e PHP/JS-\u0441\u0442\u0435\u043a\u0430:\n\n1. \u0414\u0435\u043a\u043e\u043c\u043f\u043e\u0437\u0438\u0446\u0438\u044f advisory \u2014 \u0447\u0438\u0442\u0430\u0442\u044c NVD, GHSA \u0438 CISA KEV. \u0412\u0435\u043a\u0442\u043e\u0440 AV:N/AC:L/PR:N/UI:N \u0441\u0440\u0430\u0437\u0443 \u0433\u043e\u0432\u043e\u0440\u0438\u0442: pre-auth RCE, \u043c\u0430\u043a\u0441\u0438\u043c\u0430\u043b\u044c\u043d\u044b\u0439 \u043f\u0440\u0438\u043e\u0440\u0438\u0442\u0435\u0442\n2. Patch diffing \u2014 \u043a\u043e\u043c\u043c\u0438\u0442 \u0438\u0437 GHSA \u043f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 \u0442\u043e\u0447\u043a\u0443 \u0432\u0445\u043e\u0434\u0430. \u0417\u0430\u043c\u0435\u043d\u0430 unserialize() \u0438\u043b\u0438 dol_eval() \u2014 \u0432\u0430\u0448 \u043c\u0430\u044f\u043a\n3. \u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0434\u043e PoC \u2014 CWE-\u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f \u043a\u0430\u043a \u043a\u0430\u0440\u0442\u0430: CWE-502 \u2192 gadget chain, CWE-22 \u2192 \u0434\u043e\u0441\u0442\u0430\u0432\u043a\u0430 payload\n\n\u0420\u0430\u0437\u043e\u0431\u0440\u0430\u043d\u044b CVE-2025-32432 \u0432 Craft CMS (CVSS 10.0, CISA KEV) \u0438 CVE-2025-55182 \u0432 React Server Components \u2014 \u043e\u0442 advisory \u0434\u043e \u0448\u0435\u043b\u043b\u0430.\n\nhttps://codeby.net/threads/ekspluatatsiya-cve-v-veb-prilozheniyakh-ot-chteniya-advisory-do-rce-za-tri-shaga.92809/", "url": "https://t.me/codeby_sec/10020"}, {"timestamp": "2026-04-29T11:11:09.838Z", "date_only": false, "value": "2026-04-29T11:11:09.838016Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmxnu7ptt2v", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "779367f0-091d-460e-ac3d-5194f284dae7", "content": "\ud83d\udea8 New Exploit: Craft CMS 5.6.16 - RCE\n\ud83d\udccb CVE: CVE-2025-32432\n\ud83d\udc64 Author: banyamer\n\n\ud83d\udd17 https://www.exploit-db.com/exploits/52525\n\n#ExploitDB #InfoSec #CyberSecurity #CVE-2025-32432", "url": "https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmxnu7ptt2v"}, {"timestamp": "2026-05-15T21:00:05Z", "date_only": false, "value": "2026-05-15T21:00:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/bDRsekGT6KsUOKSAQI-KSXDhypQzzgL-gjqbTcCXe2h_h6A", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "0af7d054-3338-4485-a5d4-22b94f1ad72d"}, {"timestamp": "2026-06-01T12:10:33Z", "date_only": false, "value": "2026-06-01T12:10:33+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2025-32432", "field": "timestamps.asserted_at", "uuid": "55223c86-43fd-41fc-b7a2-0c21cc499868", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T12:10:33Z", "date_only": false, "value": "2026-06-01T12:10:33+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2025-32432", "field": "timestamps.first_seen_at", "uuid": "55223c86-43fd-41fc-b7a2-0c21cc499868", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T12:10:33Z", "date_only": false, "value": "2026-06-01T12:10:33+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2025-32432", "field": "status.status_updated_at", "uuid": "55223c86-43fd-41fc-b7a2-0c21cc499868", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-01T12:10:33.975Z", "date_only": false, "value": "2026-06-01T12:10:33.975Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2025-32432", "field": "evidence.0.details.added_date", "uuid": "55223c86-43fd-41fc-b7a2-0c21cc499868", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-19T12:45:14.540Z", "date_only": false, "value": "2026-06-19T12:45:14.540688Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b30cc2f-35fc-4da2-94cb-01d3ddd9b84b", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "992363ed-bdcf-4a13-a06c-fa1b79fe9d61", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5b30cc2f-35fc-4da2-94cb-01d3ddd9b84b"}, {"timestamp": "2026-06-23T14:02:37Z", "date_only": false, "value": "2026-06-23T14:02:37+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2025-32432", "field": "timestamps.recorded_at", "uuid": "55223c86-43fd-41fc-b7a2-0c21cc499868", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T14:03:41.179Z", "date_only": false, "value": "2026-06-23T14:03:41.179051Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55223c86-43fd-41fc-b7a2-0c21cc499868", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "c71e06f8-3da1-45b8-bcd8-8de09728a253", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55223c86-43fd-41fc-b7a2-0c21cc499868"}, {"timestamp": "2026-07-09T03:00:08.468Z", "date_only": false, "value": "2026-07-09T03:00:08.468987Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/brutsecurity/1837", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "ef0144bb-f4a5-451f-840f-74570286e79d", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "url": "https://t.me/brutsecurity/1837"}, {"timestamp": "2026-07-11T13:00:05.416Z", "date_only": false, "value": "2026-07-11T13:00:05.416208Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/brutsecurity/1837", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "15b2cb3e-7d9f-4b31-90cd-4e236c830239", "content": "CVE-2025-32432: RCE in CraftCMS, 10.0 rating \ud83d\udd25\ud83d\udd25\ud83d\udd25\n\n0-day vulnerability makes some versions of CraftCMS vulnerable to RCE. Used in the wild in combination with CVE-2024-58136.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/XVVPd\n\ud83d\udc49 Dork: http.headers.x_powered_by:\"Craft CMS\"\n\nVendor's advisory: https://github.com/craftcms/cms/security/advisories/GHSA-f3gw-9ww9-jmc3", "url": "https://t.me/brutsecurity/1837"}, {"timestamp": "2026-07-16T19:00:29.981Z", "date_only": false, "value": "2026-07-16T19:00:29.981058Z", "kind": "sighting", "label": "Seen", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "6aa216a9-8eb6-4802-b55e-72c445718c62"}, {"timestamp": "2026-07-18T02:00:05.728Z", "date_only": false, "value": "2026-07-18T02:00:05.728133Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/nGUef-_pYu8KO-rMrIwqVNvY0EtG-w43zRe8aDF3SYsHftA", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "9820bc1f-fb08-470b-87de-2edbf28490c4"}, {"timestamp": "2026-07-22T17:00:04.504Z", "date_only": false, "value": "2026-07-22T17:00:04.504961Z", "kind": "sighting", "label": "Seen", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "72289437-c56e-4976-97fc-4c3a72512bac"}, {"timestamp": "2026-07-23T00:00:09.656Z", "date_only": false, "value": "2026-07-23T00:00:09.656543Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/WRVd5yOWBdxKpqesnEO3eRKAwr-Rlmtkgf90pSpwV55ICCw", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "bdc86724-4b72-44e1-9979-1ba09a431705"}, {"timestamp": "2026-08-04T13:00:22.654Z", "date_only": false, "value": "2026-08-04T13:00:22.654210Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/111", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "631af2dd-05ba-4159-a2d5-6fb747ff8dbc", "content": "\u26a0\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Yii 2 Framework (CVE-2024-58136)\n\n\u0412 \u0430\u043f\u0440\u0435\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-58136 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c \u0431\u0430\u043b\u043b\u043e\u043c CVSS 9.0, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u044e \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 CVE-2024-4990 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0439 (behaviors) \u043a \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 class array key.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u043c\u0430\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043c\u0435\u0442\u043e\u0434\u0435 set() \u043a\u043b\u0430\u0441\u0441\u0430 yii\\base\\Component \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u0430 \"as \". \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0430\u0442\u0447 CVE-2024-4990, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \"class\" \u0441 \u0441\u0441\u044b\u043b\u043a\u043e\u0439 \u043d\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 Behavior \u043a\u043b\u0430\u0441\u0441, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0438 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83c\udfaf \u0423\u0441\u043b\u043e\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\u2022 \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON. \n\u2022 \u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u0432, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c \"as \". \n\u2022 \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0434\u043b\u044f \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \n\n\ud83d\udca5 \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f: \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2025-32432 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 CraftCMS-\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439, \u043e \u0447\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a. \n\n\u203c\ufe0f \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\u2022 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Yii 2 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.52 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439. \n\u2022 \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \"as \". \n\u2022 \u0420\u0435\u0430\u043b\u0438\u0437\u0443\u0439\u0442\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044e \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 JSON. \n\u2022 \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0434\u043b\u044f \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0441\u044b \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0439. \n\n\ud83d\udd0e \u0424\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a Yii 2 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445. \u0412 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u043c\u0443, \u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u0440\u0430\u0445 \u0420\u0443\u043d\u0435\u0442\u0430 \u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 5 \u0442\u044b\u0441\u044f\u0447 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439 \u044d\u0442\u043e\u0433\u043e \u041f\u041e. \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0430 45% \u0445\u043e\u0441\u0442\u043e\u0432, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043c\u044b \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u043c, \u0447\u0442\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.", "url": "https://t.me/cyberok_news/111"}, {"timestamp": "2026-08-04T13:00:22.833Z", "date_only": false, "value": "2026-08-04T13:00:22.833202Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberok_news/95", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "5845365e-5370-4192-8e51-83dfbb3c51fe", "content": "\ud83d\udea8 \u0412\u0430\u0436\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435: \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b CraftCMS\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-58136 (CVSS: 9,0) \u0438 CVE-2025-32432 (CVSS: 10,0) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c CraftCMS. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c (API-\u043a\u043b\u044e\u0447\u0438, \u043f\u0430\u0440\u043e\u043b\u0438) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e \u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u26a0\ufe0f \u0427\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e:\n\nCVE-2024-58136 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii PHP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 (\u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u044f CVE-2024-4990).\n\nCVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 CraftCMS 3.9.15, 4.14.15 \u0438 5.6.17.\n\n\ud83d\udd0d \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0421\u041a\u0418\u041f\u0410 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 10 000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 CraftCMS \u043f\u043e \u043c\u0438\u0440\u0443. \u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043c\u0435\u043d\u0435\u0435 200 \u0442\u0430\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u2014 \u044d\u0442\u043e \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438, \u043d\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\n\u2714\ufe0f \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 CraftCMS \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\u2714\ufe0f \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\u2714\ufe0f \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0421\u041a\u0418\u041f\u0410 PentOps \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0443\u0433\u0440\u043e\u0437.\n\n\u26d4\ufe0f \u041d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u043e\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 CMS 1C-Bitrix \u0432 2023 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b!\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a", "url": "https://t.me/cyberok_news/95"}, {"timestamp": "2026-08-05T15:00:07.279Z", "date_only": false, "value": "2026-08-05T15:00:07.279664Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/96768", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "46767893-94b0-48b0-b56f-6419920f1b11", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a craftcms-cve-2025-32432-rce\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a PsyGuy007-sys\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-05 14:04:05\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCraft CMS CVE-2025-32432 command runner adapted from Nicolas Bourras and Orange Cyberdefense research\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/96768"}, {"timestamp": "2026-08-06T00:00:47.123Z", "date_only": false, "value": "2026-08-06T00:00:47.123926Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberok_news/95", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "5734d1fa-7d4e-4d1e-bb5c-8813898257a1", "content": "\ud83d\udea8 \u0412\u0430\u0436\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435: \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u044b CraftCMS\n\n\u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0437\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u0443\u044e \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 CVE-2024-58136 (CVSS: 9,0) \u0438 CVE-2025-32432 (CVSS: 10,0) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u043e\u043c CraftCMS. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c (API-\u043a\u043b\u044e\u0447\u0438, \u043f\u0430\u0440\u043e\u043b\u0438) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u0447\u0442\u043e \u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0430\u0439\u0442\u043e\u0432 \u0438 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b.\n\n\u26a0\ufe0f \u0427\u0442\u043e \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e:\n\nCVE-2024-58136 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii PHP, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u0430\u043b\u044c\u0442\u0435\u0440\u043d\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u043f\u0443\u0442\u0435\u0439 (\u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u044f CVE-2024-4990).\n\nCVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE), \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 CraftCMS 3.9.15, 4.14.15 \u0438 5.6.17.\n\n\ud83d\udd0d \u0421\u0438\u0441\u0442\u0435\u043c\u0430 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0421\u041a\u0418\u041f\u0410 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442 \u0431\u043e\u043b\u0435\u0435 10 000 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u044d\u043a\u0437\u0435\u043c\u043f\u043b\u044f\u0440\u043e\u0432 CraftCMS \u043f\u043e \u043c\u0438\u0440\u0443. \u0412 \u0420\u043e\u0441\u0441\u0438\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e \u043c\u0435\u043d\u0435\u0435 200 \u0442\u0430\u043a\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u2014 \u044d\u0442\u043e \u0441\u043d\u0438\u0436\u0430\u0435\u0442 \u0440\u0438\u0441\u043a\u0438, \u043d\u043e \u043d\u0435 \u043e\u0442\u043c\u0435\u043d\u044f\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\n\u2714\ufe0f \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 CraftCMS \u0434\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439.\n\u2714\ufe0f \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043d\u0430 \u043d\u0430\u043b\u0438\u0447\u0438\u0435 \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430.\n\u2714\ufe0f \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0439\u0442\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u044b \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a\u0438\u0435 \u043a\u0430\u043a \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a \u0421\u041a\u0418\u041f\u0410 PentOps \u0434\u043b\u044f \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433\u0430 \u0443\u0433\u0440\u043e\u0437.\n\n\u26d4\ufe0f \u041d\u0430\u043f\u043e\u043c\u0438\u043d\u0430\u0435\u043c, \u0447\u0442\u043e \u043f\u0440\u043e\u043c\u0435\u0434\u043b\u0435\u043d\u0438\u0435 \u0441 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f\u043c, \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u043c \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u043c \u0430\u0442\u0430\u043a\u0430\u043c \u043d\u0430 CMS 1C-Bitrix \u0432 2023 \u0433\u043e\u0434\u0443, \u043a\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u0438 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0438\u0441\u0442\u0435\u043c.\n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b!\n\u041a\u043e\u043c\u0430\u043d\u0434\u0430 \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a", "url": "https://t.me/cyberok_news/95"}, {"timestamp": "2026-08-06T00:00:47.419Z", "date_only": false, "value": "2026-08-06T00:00:47.419823Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cyberok_news/111", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "e7a1c6d7-4f18-45d2-80d8-69f4998dba3e", "content": "\u26a0\ufe0f \u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Yii 2 Framework (CVE-2024-58136)\n\n\u0412 \u0430\u043f\u0440\u0435\u043b\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2 \u0431\u044b\u043b\u0430 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2024-58136 \u0441 \u0431\u0430\u0437\u043e\u0432\u044b\u043c \u0431\u0430\u043b\u043b\u043e\u043c CVSS 9.0, \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0430\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430. \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u044e \u0440\u0430\u043d\u0435\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439 CVE-2024-4990 \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0439 (behaviors) \u043a \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u043c \u0447\u0435\u0440\u0435\u0437 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0443 class array key.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432 \u043c\u0430\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u043c \u043c\u0435\u0442\u043e\u0434\u0435 set() \u043a\u043b\u0430\u0441\u0441\u0430 yii\\base\\Component \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432, \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0449\u0438\u0445\u0441\u044f \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u0430 \"as \". \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0430\u0442\u0447 CVE-2024-4990, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \"class\" \u0441 \u0441\u0441\u044b\u043b\u043a\u043e\u0439 \u043d\u0430 \u043b\u0435\u0433\u0438\u0442\u0438\u043c\u043d\u044b\u0439 Behavior \u043a\u043b\u0430\u0441\u0441, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u0438 \u0434\u043e\u0441\u0442\u0438\u0447\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE).\n\n\ud83c\udfaf \u0423\u0441\u043b\u043e\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438:\n\u2022 \u041f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u0438\u0439 \u0432\u0432\u043e\u0434 \u0432 \u0444\u043e\u0440\u043c\u0430\u0442\u0435 JSON. \n\u2022 \u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u043e\u0432, \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u044e\u0449\u0438\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441 \u043f\u0440\u0435\u0444\u0438\u043a\u0441\u043e\u043c \"as \". \n\u2022 \u0414\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0434\u043b\u044f \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f. \n\n\ud83d\udca5 \u0410\u043a\u0442\u0438\u0432\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f: \n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445 \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 CVE-2025-32432 \u0434\u043b\u044f \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 CraftCMS-\u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439, \u043e \u0447\u0435\u043c \u0440\u0430\u043d\u0435\u0435 \u0441\u043e\u043e\u0431\u0449\u0430\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u0421\u0430\u0439\u0431\u0435\u0440\u041e\u041a. \n\n\u203c\ufe0f \u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438:\n\u2022 \u041d\u0435\u043c\u0435\u0434\u043b\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 Yii 2 \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 2.0.52 \u0438\u043b\u0438 \u0431\u043e\u043b\u0435\u0435 \u043f\u043e\u0437\u0434\u043d\u0435\u0439. \n\u2022 \u041f\u0440\u043e\u0432\u0435\u0440\u044c\u0442\u0435 \u043b\u043e\u0433\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u043f\u043e\u0434\u043e\u0437\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0441 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438 \"as \". \n\u2022 \u0420\u0435\u0430\u043b\u0438\u0437\u0443\u0439\u0442\u0435 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u0443\u044e \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u044e \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 JSON. \n\u2022 \u041e\u0433\u0440\u0430\u043d\u0438\u0447\u044c\u0442\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u0435 \u0434\u043b\u044f \u0438\u043d\u0441\u0442\u0430\u043d\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043b\u0430\u0441\u0441\u044b \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\n\u2022 \u0420\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u0442\u0435 \u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e\u0435 \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043a\u0440\u0435\u043f\u043b\u0435\u043d\u0438\u044f \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0439. \n\n\ud83d\udd0e \u0424\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a Yii 2 \u0448\u0438\u0440\u043e\u043a\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f\u0445. \u0412 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u0435 \u044d\u0442\u043e\u043c\u0443, \u043d\u0430 \u043f\u0440\u043e\u0441\u0442\u043e\u0440\u0430\u0445 \u0420\u0443\u043d\u0435\u0442\u0430 \u0421\u041a\u0418\u041f\u0410 \u0444\u0438\u043a\u0441\u0438\u0440\u0443\u0435\u0442 \u043e\u043a\u043e\u043b\u043e 5 \u0442\u044b\u0441\u044f\u0447 \u0443\u043d\u0438\u043a\u0430\u043b\u044c\u043d\u044b\u0445 \u0438\u043d\u0441\u0442\u0430\u043b\u043b\u044f\u0446\u0438\u0439 \u044d\u0442\u043e\u0433\u043e \u041f\u041e. \n\n\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 \u041f\u041e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u043d\u0430 45% \u0445\u043e\u0441\u0442\u043e\u0432, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b \u0434\u043b\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043c\u044b \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u043c, \u0447\u0442\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u0435\u043d\u044c\u0448\u0435.", "url": "https://t.me/cyberok_news/111"}, {"timestamp": "2026-08-07T10:17:15.264Z", "date_only": false, "value": "2026-08-07T10:17:15.264051Z", "kind": "sighting", "label": "Seen", "source": "Telegram/93z-LIlEULZWbnwEzYtTEAqd1z1QFNuHcbWGMZMdxRz5WQ4", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "a5e33da7-b01d-4e4e-8bd7-0b4e5a257cb5"}, {"timestamp": "2026-08-08T00:02:15.137Z", "date_only": false, "value": "2026-08-08T00:02:15.137624Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/97088", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "432ffc08-2f27-482a-b0c4-7734266fa68f", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE #POC #Remote Code Execution\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-32432-PoC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a EzraMansor\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Go\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-08-07 21:21:30\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA simple PoC on the Remote Code Execution (RCE) Vulnerability of CraftCMS designated as CVE-2025-32432 written in Go\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/97088"}, {"timestamp": "2026-08-09T00:18:54.317Z", "date_only": false, "value": "2026-08-09T00:18:54.317142Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/wFizrrbAMDFnDVCm6fOMsyo-M7GcVmnQt0S9VRUliYzF6W4", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "ff110fac-6d7d-4793-a412-dbcc2d7193a8"}, {"timestamp": "2026-08-14T16:00:16.779Z", "date_only": false, "value": "2026-08-14T16:00:16.779098Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/purp_sec/576", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "d93b5e0a-1694-4e2f-902b-41726d35c12a", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-43859 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 h11, \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u044e\u0449\u0435\u0439 HTTP/1.1. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c request smuggling \u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-3935 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ConnectWise ScreenConnect, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u0433\u0434\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u044d\u0442\u043e\u0442 \u043f\u0440\u043e\u0434\u0443\u043a\u0442. \u0421\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 ViewState, \u0431\u043b\u0430\u0433\u043e\u0434\u0430\u0440\u044f \u0447\u0435\u043c\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043c\u043e\u0436\u0435\u0442 \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-46271, CVE-2025-46274, CVE-2025-46272, CVE-2025-46275 \u0438 CVE-2025-46273 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u0430\u0445 Planet Technology, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-31324 \u2014 \u0431\u0430\u0433 \u0432 SAP NetWeaver Visual Composer Metadata Uploader, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u0431\u0435\u0437 \u043d\u0430\u0434\u043b\u0435\u0436\u0430\u0449\u0438\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438.\n\n\ud83d\udd35 CVE-2025-32432 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Craft CMS. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c \u0438 \u0440\u0435\u0441\u0443\u0440\u0441\u0430\u043c \u043f\u0440\u0438 \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0438 \u0441 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c.\n\n#blue_team #CVE_\u0434\u043d\u044f", "url": "https://t.me/purp_sec/576"}, {"timestamp": "2026-08-19T21:00:04.282Z", "date_only": false, "value": "2026-08-19T21:00:04.282950Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/NinjaSecurity/90", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "094f2ba1-060a-4202-9715-575af03d2d29", "content": "1. https://github.com/Sachinart/CVE-2025-32432\nCheck for CVE-2025-32432 vulnerability\n#github #exploit\n\n\n2. https://github.com/helidem/CVE-2025-24054-PoC\nProof of Concept for NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n3. https://github.com/ajdumanhug/CVE-2023-46818\nCVE-2023-46818 Python3 Exploit for ISPConfig <= 3.2.11 PHP Code Injection\n#github #exploit\n\n\n4. https://github.com/0x6rss/CVE-2025-24071_PoC\nNTLM hash leak via .library-ms inside ZIP/RAR (CVE-2025-24071)\n#github #poc\n\n\n5. https://github.com/trickest/cve/blob/main/2022/CVE-2022-42092.md\nCVE-2022-42092 \u2013 Backdrop CMS RCE PoC\n#github #exploit\n\n\n6. https://github.com/nomi-sec/PoC-in-GitHub\nAggregated CVE Exploits and PoCs from GitHub\n#github #tool\n\n\n7. https://github.com/SofianeHamlaoui/CVE-2022-0492-Checker\nLinux Container Escape CVE-2022-0492 vulnerability checker\n#github #exploit\n\n\n8. https://github.com/xigney/CVE-2025-24054_PoC\nAlternate NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n9. https://github.com/bipbopbup/CVE-2023-46818-python-exploit\nPython PoC for CVE-2023-46818 in ISPConfig\n#github #exploit\n\n\n10. https://github.com/Marcejr117/CVE-2025-24071_PoC\nNTLM Hash Leak using .library-ms via ZIP trick (CVE-2025-24071)\n#github #poc\n\n\n11. https://github.com/Ostorlab/KEV\nKnown Exploited Vulnerabilities Detector\n#github #scanner\n\n\n12. https://github.com/edoardottt/missing-cve-nuclei-templates\nMissing CVE Detection via Nuclei Templates\n#github #scanner\n\n\n13. https://github.com/hyp3rlinx/Advisories\nZero-Day Security Advisories and Exploits by Hyp3rlinx\n#github #exploit\n\n\n14. https://github.com/Kubashok/apple-cve-repos\nApple CVE Database Links Repository\n#github #cve\n\n\n15. https://github.com/esnet/Seccubus_v2\nSeccubus Test Data for Vulnerability Scanners\n#github #tool\n\n\n16. https://github.com/skordemir/Xml2Ontology\nNessus XML Vulnerability Report Samples\n#github #data\n\n\n17. https://github.com/madirish/hector\nHector: Vulnerability Management Tool with Sample Nessus Reports\n#github #tool\n\n\n18. https://github.com/projectdiscovery/nuclei-templates/issues/8804\nNuclei Template request for ISPConfig CVE-2023-46818\n#github #scanner\n\n\n19. https://github.com/projectdiscovery/nuclei-templates/issues/12020\nNuclei Template PoC Request for CraftCMS CVE-2025-32432\n#github #scanner\n\n\n20. https://github.com/tanjiti/sec_profile\nSecurity Profile Aggregator \u2013 CVE, CISA, NVD, etc.\n#github #intel\n\n\n21. https://github.com/cube0x0/CVE-2021-1675\nPrintNightmare Exploit PoC (CVE-2021-1675 / CVE-2021-34527)\n#github #exploit\n\n22. https://github.com/Maldev-Academy/LsassHijackingViaReg\n\nInjecting DLL into LSASS at boot\n#github #tools\n\n\nOpen-source tools and proof-of-concept (PoC) repositories related to recent CVEs, exploits, and security research. These resources are valuable for educational purposes and can aid students in understanding real-world vulnerabilities and exploitation techniques.", "url": "https://t.me/NinjaSecurity/90"}, {"timestamp": "2026-08-20T00:00:06.815Z", "date_only": false, "value": "2026-08-20T00:00:06.815111Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/NinjaSecurity/90", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "137a8ada-1ca5-4378-b890-01f8a6a75afd", "content": "1. https://github.com/Sachinart/CVE-2025-32432\nCheck for CVE-2025-32432 vulnerability\n#github #exploit\n\n\n2. https://github.com/helidem/CVE-2025-24054-PoC\nProof of Concept for NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n3. https://github.com/ajdumanhug/CVE-2023-46818\nCVE-2023-46818 Python3 Exploit for ISPConfig <= 3.2.11 PHP Code Injection\n#github #exploit\n\n\n4. https://github.com/0x6rss/CVE-2025-24071_PoC\nNTLM hash leak via .library-ms inside ZIP/RAR (CVE-2025-24071)\n#github #poc\n\n\n5. https://github.com/trickest/cve/blob/main/2022/CVE-2022-42092.md\nCVE-2022-42092 \u2013 Backdrop CMS RCE PoC\n#github #exploit\n\n\n6. https://github.com/nomi-sec/PoC-in-GitHub\nAggregated CVE Exploits and PoCs from GitHub\n#github #tool\n\n\n7. https://github.com/SofianeHamlaoui/CVE-2022-0492-Checker\nLinux Container Escape CVE-2022-0492 vulnerability checker\n#github #exploit\n\n\n8. https://github.com/xigney/CVE-2025-24054_PoC\nAlternate NTLM Hash Leak via .library-ms CVE-2025-24054\n#github #poc\n\n\n9. https://github.com/bipbopbup/CVE-2023-46818-python-exploit\nPython PoC for CVE-2023-46818 in ISPConfig\n#github #exploit\n\n\n10. https://github.com/Marcejr117/CVE-2025-24071_PoC\nNTLM Hash Leak using .library-ms via ZIP trick (CVE-2025-24071)\n#github #poc\n\n\n11. https://github.com/Ostorlab/KEV\nKnown Exploited Vulnerabilities Detector\n#github #scanner\n\n\n12. https://github.com/edoardottt/missing-cve-nuclei-templates\nMissing CVE Detection via Nuclei Templates\n#github #scanner\n\n\n13. https://github.com/hyp3rlinx/Advisories\nZero-Day Security Advisories and Exploits by Hyp3rlinx\n#github #exploit\n\n\n14. https://github.com/Kubashok/apple-cve-repos\nApple CVE Database Links Repository\n#github #cve\n\n\n15. https://github.com/esnet/Seccubus_v2\nSeccubus Test Data for Vulnerability Scanners\n#github #tool\n\n\n16. https://github.com/skordemir/Xml2Ontology\nNessus XML Vulnerability Report Samples\n#github #data\n\n\n17. https://github.com/madirish/hector\nHector: Vulnerability Management Tool with Sample Nessus Reports\n#github #tool\n\n\n18. https://github.com/projectdiscovery/nuclei-templates/issues/8804\nNuclei Template request for ISPConfig CVE-2023-46818\n#github #scanner\n\n\n19. https://github.com/projectdiscovery/nuclei-templates/issues/12020\nNuclei Template PoC Request for CraftCMS CVE-2025-32432\n#github #scanner\n\n\n20. https://github.com/tanjiti/sec_profile\nSecurity Profile Aggregator \u2013 CVE, CISA, NVD, etc.\n#github #intel\n\n\n21. https://github.com/cube0x0/CVE-2021-1675\nPrintNightmare Exploit PoC (CVE-2021-1675 / CVE-2021-34527)\n#github #exploit\n\n22. https://github.com/Maldev-Academy/LsassHijackingViaReg\n\nInjecting DLL into LSASS at boot\n#github #tools\n\n\nOpen-source tools and proof-of-concept (PoC) repositories related to recent CVEs, exploits, and security research. These resources are valuable for educational purposes and can aid students in understanding real-world vulnerabilities and exploitation techniques.", "url": "https://t.me/NinjaSecurity/90"}, {"timestamp": "2026-08-27T15:00:04.520Z", "date_only": false, "value": "2026-08-27T15:00:04.520278Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cve0day/461", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "23a27970-f5dd-408f-983f-39b071191103", "content": "CVE-2025-32432\n\nCraft is a flexible, user-friendly CMS for creating custom digital experiences on the web and beyond. Starting from version 3.0.0-RC1 to before 3.9.15, 4.0.0-RC1 to before 4.14.15, and 5.0.0-RC1 to before 5.6.17, Craft is vulnerable to remote code execution. This is a high-impact, low-complexity attack vector. This issue has been patched in versions 3.9.15, 4.14.15, and 5.6.17, and is an additional fix for CVE-2023-41892.", "url": "https://t.me/cve0day/461"}, {"timestamp": "2026-09-17T01:00:02.996Z", "date_only": false, "value": "2026-09-17T01:00:02.996107Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/GithubRedTeam/102522", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "b8f2b7b4-1ad6-43dd-b3f2-69ae66e032a9", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #RCE #CVE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-32432-exploit-by-P34NUT\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a P34NUT2\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-16 23:32:14\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nA exploit to obtain RCE in CRAFTCMS\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "url": "https://t.me/GithubRedTeam/102522"}, {"timestamp": "2026-09-18T04:00:07.216Z", "date_only": false, "value": "2026-09-18T04:00:07.216930Z", "kind": "sighting", "label": "Seen", "source": "Telegram/UVRhJ-dfvv69hp5StkOgcAC9P7rtS8qZd-pCJe4m6gUHuNs", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "73b07b08-1fce-412c-b503-c906bd81da47"}, {"timestamp": "2026-09-19T00:00:26.198Z", "date_only": false, "value": "2026-09-19T00:00:26.198880Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/UVRhJ-dfvv69hp5StkOgcAC9P7rtS8qZd-pCJe4m6gUHuNs", "record": "CVE-2025-32432", "field": "creation_timestamp", "uuid": "7d5c996e-32cf-4f31-9c83-9a5408da233f"}, {"timestamp": "2026-09-24T13:10:00.320Z", "date_only": false, "value": "2026-09-24T13:10:00.320", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2025-32432", "record": "FKIE_CVE-2025-32432", "field": "lastModified"}]}