{"vulnerability": "-075", "sightings": [{"uuid": "eec2a0b9-7785-4ee6-b699-abee120b305e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/5dc5795d-5c90-4be7-9f05-548b73e10023", "content": "", "creation_timestamp": "2019-11-08T14:20:28.000000Z"}, {"uuid": "b6b48b7a-20ec-48a8-a5a3-d372d44012b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0751", "type": "seen", "source": "MISP/545093ea-41d4-4786-ac11-4e0e950d210b", "content": "", "creation_timestamp": "2014-10-29T07:18:55.000000Z"}, {"uuid": "22f54f4a-4f77-4a28-896f-35a4d11b7f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0751", "type": "seen", "source": "MISP/569c9c63-d89c-4aa2-807f-41fa950d210f", "content": "", "creation_timestamp": "2016-01-18T08:07:35.000000Z"}, {"uuid": "62c22401-d730-4de2-bff0-116fdcb9bc8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0751", "type": "seen", "source": "MISP/56b1f593-5a90-4f70-9ba0-42ad0a1e1c3b", "content": "", "creation_timestamp": "2016-02-03T12:47:47.000000Z"}, {"uuid": "05dacaea-f764-4d50-97d4-9d6b7cb42bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/5dc53d64-eef8-4ee2-bb5c-4b240a3b4631", "content": "", "creation_timestamp": "2019-11-08T10:03:52.000000Z"}, {"uuid": "12d23188-4c02-4c57-841f-2dba115b3288", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/5d307d92-3514-4a9b-9840-0a540a950b0c", "content": "", "creation_timestamp": "2019-07-18T14:16:29.000000Z"}, {"uuid": "02166ede-a873-4c8c-9f62-5eae64307d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/64d80881-c002-4ed0-9477-2614e671e857", "content": "", "creation_timestamp": "2020-08-13T06:49:59.000000Z"}, {"uuid": "2827bc9d-af88-495e-a240-3780e5d28580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/b3a98073-9aea-46ee-8ea9-2f0e9956a65e", "content": "", "creation_timestamp": "2020-10-09T13:28:05.000000Z"}, {"uuid": "fa405c9a-669d-4073-8602-728bc7141c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/dec58de8-6301-4e10-a4a6-e8a5f9ce5203", "content": "", "creation_timestamp": "2020-10-09T14:19:37.000000Z"}, {"uuid": "e0321a6e-9274-4583-b560-c1ae9671ddfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/0f0e6302-18ce-4342-b5cf-b8468fa5531a", "content": "", "creation_timestamp": "2020-10-09T14:47:33.000000Z"}, {"uuid": "4b8bb00f-48b7-4506-8061-ec410f8c0bc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "5069fe27-1aa1-4b5a-9bb9-ed9a8d9f0889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "056e5cd7-081c-4062-b685-24107b66fbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2023-06-14T21:10:03.000000Z"}, {"uuid": "50ab5cc2-c99c-4f4a-931b-ed01c75826e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0758", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43491", "content": "", "creation_timestamp": "2018-01-10T00:00:00.000000Z"}, {"uuid": "89f843d2-c0e3-4ef7-b666-a24283d70803", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0752", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43516", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "3ae95a80-9549-4d33-9bc8-3442ca590d38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-0751", "type": "exploited", "source": "https://www.exploit-db.com/exploits/43515", "content": "", "creation_timestamp": "2018-01-11T00:00:00.000000Z"}, {"uuid": "19a8749b-6bd8-43f2-93b1-cb2524495914", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41684", "content": "", "creation_timestamp": "2014-12-18T00:00:00.000000Z"}, {"uuid": "ba984572-bbcc-486d-8aec-b547977ef891", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41683", "content": "", "creation_timestamp": "2013-01-08T00:00:00.000000Z"}, {"uuid": "7f0697d6-3153-4662-a060-4c19bd1e09f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41684", "content": "", "creation_timestamp": "2014-12-18T00:00:00.000000Z"}, {"uuid": "25d3cb47-673c-472b-8153-ef96b5544062", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "exploited", "source": "https://www.exploit-db.com/exploits/41683", "content": "", "creation_timestamp": "2013-01-08T00:00:00.000000Z"}, {"uuid": "a4255405-2589-4ab0-bdc9-766494f55e30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "exploited", "source": "https://www.exploit-db.com/exploits/40561", "content": "", "creation_timestamp": "2016-10-17T00:00:00.000000Z"}, {"uuid": "4cf218e9-0fc3-4182-9a28-68a5c4aafb71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971411", "content": "", "creation_timestamp": "2024-12-24T20:28:56.335302Z"}, {"uuid": "75fc3cbc-b4d9-4223-8548-5a95cecbae8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971259", "content": "", "creation_timestamp": "2024-12-24T20:26:38.300976Z"}, {"uuid": "c5161263-00e4-41fc-bc5b-502224ab665a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971637", "content": "", "creation_timestamp": "2024-12-24T20:32:11.124888Z"}, {"uuid": "b78528a2-339a-45e0-b305-d23e5c86bb95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:40.000000Z"}, {"uuid": "64ecb144-f11b-43a9-8427-351aa6314717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0753", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "be2db27f-4263-4607-819e-79f625f9db55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "dd8e886d-f039-4bca-9396-c0bf4c0080c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0750", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "0c2498de-ccd9-4376-861a-9dd326c1a8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "7ccb83ae-f6b2-4a17-995f-4b0e419b4fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0751", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqqznqkhv2n", "content": "", "creation_timestamp": "2025-01-27T20:16:09.937934Z"}, {"uuid": "d3c0ce93-e6aa-43b9-a639-63864fd0ccb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0753", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113902363379966395", "content": "", "creation_timestamp": "2025-01-27T21:08:57.440732Z"}, {"uuid": "15503bf2-3855-4b1e-b849-bc053839fbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0753", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgqudx7npa2e", "content": "", "creation_timestamp": "2025-01-27T21:15:36.878734Z"}, {"uuid": "609a08ec-23c7-4c2a-9630-cf25a252eac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905286642577746", "content": "", "creation_timestamp": "2025-01-28T09:32:22.486875Z"}, {"uuid": "e9b45bef-c976-493d-8618-0a66f2c11ab4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905286658170629", "content": "", "creation_timestamp": "2025-01-28T09:32:22.758803Z"}, {"uuid": "89970086-1a64-4380-ba98-9b8e42feb959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113905315484441568", "content": "", "creation_timestamp": "2025-01-28T09:39:42.597789Z"}, {"uuid": "9a89cf5c-086b-473d-9996-6b6a20a58dd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs7wtjv2f2p", "content": "", "creation_timestamp": "2025-01-28T10:15:41.561504Z"}, {"uuid": "8dd721dc-5ea3-43a3-a61e-f15f942c6ef4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs7wvtnjr2r", "content": "", "creation_timestamp": "2025-01-28T10:15:43.722381Z"}, {"uuid": "06955b64-9702-4acc-aef0-fe99180b97e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgs7wy2a6k2i", "content": "", "creation_timestamp": "2025-01-28T10:15:46.800732Z"}, {"uuid": "cb6d45da-1759-4a0f-86ae-f734464ca055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5s7uo2y", "content": "", "creation_timestamp": "2025-01-28T13:05:23.600909Z"}, {"uuid": "3644724d-417b-4681-af78-ae00ae77e27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5ou5f2g", "content": "", "creation_timestamp": "2025-01-28T13:05:23.015644Z"}, {"uuid": "9dc0b3e5-086b-4556-9db6-25a3dcb010c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:42.000000Z"}, {"uuid": "c9532e0e-7ba7-4c03-a15f-03333ca3ac60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:44.000000Z"}, {"uuid": "409f1db8-3e7d-4dcb-ae6d-490156b9a083", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114183612052741803", "content": "", "creation_timestamp": "2025-03-18T13:14:11.312193Z"}, {"uuid": "1a538adc-b455-4429-bfdd-80bc3788b7e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114182802939948930", "content": "", "creation_timestamp": "2025-03-18T09:48:25.628859Z"}, {"uuid": "4d80b14a-7a6e-4203-ac47-6450cce718a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:02.000000Z"}, {"uuid": "b0ef690b-8c9b-4f48-8508-4c87879664af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:10.000000Z"}, {"uuid": "ee8315e0-2b3f-41b4-bc1a-08699228db5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:21.000000Z"}, {"uuid": "7e554846-1a27-4887-b590-5eb97ec9d671", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0753", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:12.000000Z"}, {"uuid": "b7be9ab5-7636-4e7a-9361-ff96a72ed99d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0750", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:25.000000Z"}, {"uuid": "7c27a5eb-fcc8-4898-a8d4-d61dc9cfd766", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:12.000000Z"}, {"uuid": "70b0b451-04f4-4c64-a233-367974561a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:12.000000Z"}, {"uuid": "f0a1a40a-5e1d-4dad-a2cd-30c18a44bb1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:02.000000Z"}, {"uuid": "fa958623-14c8-4082-a04d-48d171f04f2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lknn33u4v42e", "content": "", "creation_timestamp": "2025-03-18T12:08:10.643678Z"}, {"uuid": "3d9ada1e-8ea3-4e55-a17f-6ecfebe4f31f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lm3rjcfk5b2f", "content": "", "creation_timestamp": "2025-04-05T20:30:12.621448Z"}, {"uuid": "5e9aa89c-41b8-4492-91ae-b2b6fe438860", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114350548547803347", "content": "", "creation_timestamp": "2025-04-17T00:48:20.088581Z"}, {"uuid": "2a47bce0-3600-4a49-8570-af4a1ec16385", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmy2o5ujvb24", "content": "", "creation_timestamp": "2025-04-17T02:28:29.625179Z"}, {"uuid": "03a52cdd-5b22-47ff-98a9-0642948d6b36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rwz72f2h", "content": "", "creation_timestamp": "2025-04-17T02:48:30.798048Z"}, {"uuid": "be5bfcc4-1cfb-4d1b-9713-4e9e8468316c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rxwhzt2d", "content": "", "creation_timestamp": "2025-04-17T02:48:35.810630Z"}, {"uuid": "07a54f2a-cc4e-44ca-8843-50021299051c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114353515688216436", "content": "", "creation_timestamp": "2025-04-17T13:22:55.134562Z"}, {"uuid": "2c77bae1-1f23-453b-ac91-8659e01b27d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0750", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/ge_proficy_cimplicity_gefebt.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "87724be8-0157-4148-b63b-2c5ed4e2f384", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-12T13:33:28.000000Z"}, {"uuid": "adf2a6f3-ad51-4f63-b919-569d4bc5b9a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "MISP/02fb130c-7874-4693-9b66-81ed91a2e996", "content": "", "creation_timestamp": "2025-08-21T03:19:29.000000Z"}, {"uuid": "426883e0-7afe-4bd4-9386-1c1cbd4570fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0759", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "98c51d82-2d40-481e-b8aa-61914a3df8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "02c3a595-c9bb-4965-a796-3336b144bbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:13.000000Z"}, {"uuid": "c801dcd9-634a-4c40-9db5-e60f965bb6f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0753", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "0ee73abd-8398-4c1d-8998-c03043579fe5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:44.000000Z"}, {"uuid": "995629cc-34a1-488d-b330-b9fe78cfce77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:50.000000Z"}, {"uuid": "58189ffd-1962-4e4b-b644-8aeac8d74897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0751", "type": "seen", "source": "MISP/d17bd6ef-d68b-317b-ac33-cdbc44c5fc57", "content": "", "creation_timestamp": "2025-08-31T03:12:54.000000Z"}, {"uuid": "c84ab25f-f089-43d1-b990-e003c00bf8d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:01.000000Z"}, {"uuid": "1d1d8cc1-69a9-4f6a-b2d9-a7f0db2ab0b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0751", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:21.000000Z"}, {"uuid": "87bdfe08-5cd8-4630-8d39-074b16e09441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:00:59.000000Z"}, {"uuid": "ed80d381-c264-4165-bd83-bb599752672c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-0750", "type": "seen", "source": "MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d", "content": "", "creation_timestamp": "2025-08-31T03:01:36.000000Z"}, {"uuid": "89b7a245-8763-40c8-89a2-3d3e53dda70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "3266c1c3-2ee8-409d-b93d-f8052f8f16e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "6509667d-5c36-423c-9286-77c267b3ec25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "MISP/d0bda5d9-8cbc-4c6c-8803-a5e3150f9ec2", "content": "", "creation_timestamp": "2025-09-01T19:03:03.000000Z"}, {"uuid": "93db80f2-4ebd-4546-a64e-b96a9613f3a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "dbfcb80b-5440-4acb-b33c-ad4593519cbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "545ffd18-f96e-4070-a7af-356c24436823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_mp4_cprt.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "aacfdbc3-761f-4996-97a5-ad6b818108de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3mdlfkd3mka2o", "content": "", "creation_timestamp": "2026-01-29T18:18:03.929559Z"}, {"uuid": "9e356263-78e5-4040-9957-017cd208e8d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2010-0759", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me2rjt553g2i", "content": "", "creation_timestamp": "2026-02-04T21:02:27.124692Z"}, {"uuid": "471e5043-a9ff-4109-a7de-391ea5539cf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4vc3hhpa2v", "content": "", "creation_timestamp": "2026-03-03T04:05:25.398871Z"}, {"uuid": "aea25202-2efe-456d-88e6-e5daa4127fe3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mg4vkzvqvk2e", "content": "", "creation_timestamp": "2026-03-03T04:10:25.681605Z"}, {"uuid": "9da8ad2a-811a-4c2f-9958-e70170f0a609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mdjbijauap2j", "content": "", "creation_timestamp": "2026-01-28T22:00:09.416095Z"}, {"uuid": "1724d580-c523-4c68-8f5f-b55000694580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115985606322071908", "content": "", "creation_timestamp": "2026-01-30T19:05:02.137151Z"}, {"uuid": "99b334ae-5399-421b-901f-357c7867e8a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0753", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/116071703605105791", "content": "", "creation_timestamp": "2026-02-15T00:00:43.746932Z"}, {"uuid": "15f5d286-47f4-49f1-8a96-d645fc2b9c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-0753", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3meua5sotrt2s", "content": "", "creation_timestamp": "2026-02-15T00:00:44.191073Z"}, {"uuid": "72149ffd-644b-4d5e-b1a3-eccb1cc4d23b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3mfvdm2p7lc2e", "content": "", "creation_timestamp": "2026-02-28T04:00:14.766684Z"}, {"uuid": "323616c8-cc11-4c75-8703-27fd5f331f8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfoqwufv6l2q", "content": "", "creation_timestamp": "2026-02-25T13:10:17.700719Z"}, {"uuid": "5f371abc-c5b0-425a-a784-f6a8effba9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mfqp5pgxel2d", "content": "", "creation_timestamp": "2026-02-26T07:43:39.584435Z"}, {"uuid": "260dd81a-51c9-485a-8969-250b132bd2eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-025/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "857191ec-bcb3-4969-9c49-5481bf1f5b2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0758", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-024/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "9805f316-4d58-4213-b64a-6c6232f49c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0757", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-023/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "61cbb0f4-fdb0-48d7-9274-e8b358161ee6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-022/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "bdca9990-9488-4397-ad0d-dfeafafa7282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-26-021/", "content": "", "creation_timestamp": "2026-01-09T05:00:00.000000Z"}, {"uuid": "9496fd57-6d19-401c-8fc5-1a71064d4210", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0757", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11560", "content": "", "creation_timestamp": "2010-02-24T00:00:00.000000Z"}, {"uuid": "9e5bbb7e-ed19-44c1-a587-c5785f258895", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2019-0752", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/0206bf76-4111-440f-b7d5-585eda423724", "content": "", "creation_timestamp": "2026-02-02T12:28:22.989520Z"}, {"uuid": "5c69c201-1060-4be8-92ba-bd6eb4e24d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-0752", "type": "seen", "source": "https://www.acn.gov.it/portale/w/risolte-vulnerabilita-su-gitlab-community-edition-ce-e-enterprise-edition-ee-1", "content": "", "creation_timestamp": "2026-02-25T09:53:32.000000Z"}, {"uuid": "8ddf6e8a-cc20-4ea2-b859-6a44c2f200fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md33vwks3v2m", "content": "", "creation_timestamp": "2026-01-23T06:42:59.842981Z"}, {"uuid": "d6529980-f9f8-4743-8be4-c1fc089b79b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3asqasrt2n", "content": "", "creation_timestamp": "2026-01-23T08:10:40.538910Z"}, {"uuid": "a7a5f6cf-fddf-4d50-90fa-d95f1d1f0519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3awczrff2h", "content": "", "creation_timestamp": "2026-01-23T08:12:40.918505Z"}, {"uuid": "7aadcfd5-638c-448f-aea0-110071a61bdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3bszcr7a2n", "content": "", "creation_timestamp": "2026-01-23T08:28:44.194843Z"}, {"uuid": "5466bb2c-6df9-41c8-8041-14ba92eafc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3md3df7hmry2c", "content": "", "creation_timestamp": "2026-01-23T08:56:48.046311Z"}, {"uuid": "74346707-9b36-4442-a640-40e9082ea310", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hmu4eun22", "content": "", "creation_timestamp": "2026-01-23T10:12:39.833740Z"}, {"uuid": "b6e4d0ea-402d-4b09-99f2-619bc18b4514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0757", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hn36zdg25", "content": "", "creation_timestamp": "2026-01-23T10:12:47.242195Z"}, {"uuid": "6841bbf1-ef10-4f3b-a3ee-1ca3ec499659", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hxwvw4r2o", "content": "", "creation_timestamp": "2026-01-23T10:18:52.205852Z"}, {"uuid": "0b033e83-1c5e-47ee-aee4-da87d9e51371", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hy6ggy72h", "content": "", "creation_timestamp": "2026-01-23T10:18:59.930769Z"}, {"uuid": "ab316d62-8c65-4614-8ee0-9cc5b58cf5a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0758", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hyuy3fv22", "content": "", "creation_timestamp": "2026-01-23T10:19:23.831842Z"}, {"uuid": "a70be046-2236-4019-b5b0-19e98217d1c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0759", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3md3hz4iaxf22", "content": "", "creation_timestamp": "2026-01-23T10:19:31.409186Z"}, {"uuid": "7a8d2e0e-8c48-4a44-983c-355e24106b16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2012-0754", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/18572", "content": "", "creation_timestamp": "2012-03-08T00:00:00.000000Z"}, {"uuid": "33de0480-69be-4213-b7a8-edbebb4b280d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0754", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32769", "content": "", "creation_timestamp": "2009-01-30T00:00:00.000000Z"}, {"uuid": "1c2a9075-4f3e-498a-968a-246212320230", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2012-0754", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/52db44da-1029-4bc2-b4d1-3d99ab515010", "content": "", "creation_timestamp": "2026-02-02T12:27:23.731542Z"}, {"uuid": "8a8b4a2a-b76a-41dd-aa2e-818b355a7d31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2016-0752", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/135b1fd5-4775-4f0d-9964-6f458281d32a", "content": "", "creation_timestamp": "2026-02-02T12:28:04.293790Z"}, {"uuid": "f9cd7712-b647-45d4-b38a-9432185ff619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0751", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8148", "content": "", "creation_timestamp": "2009-03-03T00:00:00.000000Z"}, {"uuid": "6780eed6-7621-4ea3-8191-d752c20e3abb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0754", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11560", "content": "", "creation_timestamp": "2010-02-24T00:00:00.000000Z"}, {"uuid": "f1ebbba8-fc5f-456d-9167-b3016029364b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0756", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11560", "content": "", "creation_timestamp": "2010-02-24T00:00:00.000000Z"}, {"uuid": "547f4990-7ffd-4407-ae0f-df9cd50dbf73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0758", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11518", "content": "", "creation_timestamp": "2010-02-22T00:00:00.000000Z"}, {"uuid": "7a5cfba3-37ae-4bd0-abf5-238cb5cb6f2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0755", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11560", "content": "", "creation_timestamp": "2010-02-24T00:00:00.000000Z"}, {"uuid": "21cf0fed-73bb-4ef7-9740-b94a821068d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0753", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11549", "content": "", "creation_timestamp": "2010-02-23T00:00:00.000000Z"}, {"uuid": "b20334aa-5ea4-43b2-9fd3-6f6e4d349cb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0753", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8097", "content": "", "creation_timestamp": "2009-02-23T00:00:00.000000Z"}, {"uuid": "fa6a3404-4b47-4ded-afba-422ba2ed8f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2011-0751", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/35466", "content": "", "creation_timestamp": "2011-03-05T00:00:00.000000Z"}, {"uuid": "0a529472-9884-4397-95f4-93cddb6e4305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0750", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/8076", "content": "", "creation_timestamp": "2009-02-18T00:00:00.000000Z"}, {"uuid": "f16767bd-b2d8-4b42-9c90-73d12037deb2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0756", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32800", "content": "", "creation_timestamp": "2009-02-12T00:00:00.000000Z"}, {"uuid": "af167acb-5669-46ff-b2b1-18de9b7d218a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2009-0755", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/32800", "content": "", "creation_timestamp": "2009-02-12T00:00:00.000000Z"}, {"uuid": "6edf3ee5-a5e5-4b58-ba60-53db5523200d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2014-0750", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/31987", "content": "", "creation_timestamp": "2014-02-28T00:00:00.000000Z"}, {"uuid": "0375447b-b824-4dda-b044-bff8e659188f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-0753", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/27940", "content": "", "creation_timestamp": "2013-08-29T00:00:00.000000Z"}, {"uuid": "8a14dfac-b24a-42b6-a7e4-f824bb7f8386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2006-0755", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/22708", "content": "", "creation_timestamp": "2012-11-14T00:00:00.000000Z"}, {"uuid": "60f428f1-562d-491b-aea1-810a5d706b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2010-0759", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/11498", "content": "", "creation_timestamp": "2010-02-18T00:00:00.000000Z"}, {"uuid": "846cf9bf-da15-4c0a-bc86-6c66ae2e0f36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0757", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7681", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2024\n\u63cf\u8ff0\uff1aA PoC Exploit for CVE-2024-0757 - Insert or Embed Articulate Content into WordPress Remote Code Execution (RCE)\nURL\uff1ahttps://github.com/hunThubSpace/CVE-2024-0757-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2024", "creation_timestamp": "2024-06-17T07:50:49.000000Z"}, {"uuid": "0cb693d9-d91a-45dd-8b32-3b607bdd8387", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0757", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/7680", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aExploit of CVE-2024-0757 (Insert or Embed Articulate Content into WordPress <= 4.3000000023 - Authenticated - Upload to RCE)\nURL\uff1ahttps://github.com/hunThubSpace/CVE-2024-0757\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2024-06-17T07:02:42.000000Z"}, {"uuid": "5dc1fc2b-d021-4320-825b-0d540c9dcb3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0757", "type": "published-proof-of-concept", "source": "https://t.me/cKure/9645", "content": "\u25a0\u25a0\u25a0\u25a0\u25a0 Zero-Day: \ud83c\udf81 PoC for a Post-Auth SQL-Injection (CVE-2022-0757) in Nexpose Vulnerability Scanner <= 6.6.128\n\nDefault port: 3780\nDefault username: nxadmin\nAffected handler: /data/asset/filterAssets\n\nSource: PT Swarm", "creation_timestamp": "2022-06-02T14:29:17.000000Z"}, {"uuid": "a61b8295-7583-4bbb-822f-e2061e50a8de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0757", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9227", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0757\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Insert or Embed Articulate Content into WordPress plugin through 4.3000000023 is not properly filtering which file extensions are allowed to be imported on the server, allowing the uploading of malicious code within zip files\n\ud83d\udccf Published: 2024-06-04T06:00:02.008Z\n\ud83d\udccf Modified: 2025-03-27T21:04:01.050Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/eccd017c-e442-46b6-b5e6-aec7bbd5f836/", "creation_timestamp": "2025-03-27T21:27:55.000000Z"}, {"uuid": "55ba2801-3feb-4440-a262-c954f6403d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "Telegram/pqqXYb9tqxKBLIH5uimXOlcaz0FfaMAuSTUvUnMOzaRlBSBl", "content": "", "creation_timestamp": "2025-02-14T21:08:30.000000Z"}, {"uuid": "ef80acc9-5e85-4405-9fe1-02e43dc860b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "exploited", "source": "https://t.me/itsec_news/2284", "content": "\u200b\u26a1\ufe0f \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u0434\u0435\u043b\u0438\u043b\u0438\u0441\u044c \u043d\u043e\u0432\u044b\u043c\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f\u043c\u0438 \u043e \u0440\u0430\u0431\u043e\u0442\u0435 \u0437\u043b\u043e\u0432\u0440\u0435\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c RIG Exploit Kit.\n\n\ud83d\udcac \u00abRIG Exploit Kit \u2014 \u044d\u0442\u043e \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u043e \u043c\u043e\u0442\u0438\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0430\u044f \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u0435\u0442 \u0441 2014 \u0433\u043e\u0434\u0430\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u0438\u0442\u0441\u044f \u0432 \u0438\u0441\u0447\u0435\u0440\u043f\u044b\u0432\u0430\u044e\u0449\u0435\u043c \u043e\u0442\u0447\u0435\u0442\u0435 PRODAFT. \u041d\u0430\u0431\u043e\u0440 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 RIG EK \u0434\u043e\u0441\u0442\u0438\u0433 \u0440\u0435\u043a\u043e\u0440\u0434\u043d\u043e \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u2014 \u043f\u043e\u0447\u0442\u0438 30% \u0432 2022 \u0433\u043e\u0434\u0443, \u0441\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u043c.\n\n\u041a\u0430\u043a \u0441\u043e\u043e\u0431\u0449\u0430\u0435\u0442\u0441\u044f, \u0445\u0430\u043a\u0435\u0440\u044b \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u044e\u0442 \u0441\u0432\u043e\u0451 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0447\u0443\u0442\u044c \u043b\u0438 \u043d\u0435 \u0435\u0436\u0435\u043d\u0435\u0434\u0435\u043b\u044c\u043d\u043e, \u0440\u0430\u0441\u0448\u0438\u0440\u044f\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b \u0438 \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u044f \u043d\u043e\u0432\u044b\u0435 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u044b \u0443\u043a\u043b\u043e\u043d\u0435\u043d\u0438\u044f \u043e\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f. \u0412\u043f\u0440\u043e\u0447\u0435\u043c, \u0442\u0430\u043a\u0430\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u0435\u0443\u0434\u0438\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u0430, \u0432\u0435\u0434\u044c RIG EK \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043f\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u043d\u043e\u0439 \u043c\u043e\u0434\u0435\u043b\u0438 (Maas). \u042d\u0442\u043e \u043e\u0437\u043d\u0430\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043f\u043b\u0430\u0442\u044f\u0442 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0430 \u0437\u0430 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u044b\u0435 \u0438\u043c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430\u0445.\n\n\u0414\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u0438 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u043d\u043e\u0433\u043e \u043e\u0445\u0432\u0430\u0442\u0430, \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u044b RIG EK \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u0440\u0435\u043a\u043b\u0430\u043c\u0443. \u041f\u043e\u0441\u0435\u0442\u0438\u0442\u0435\u043b\u0438 \u0444\u0438\u0448\u0438\u043d\u0433\u043e\u0432\u044b\u0445 \u0438\u043b\u0438 \u0432\u0437\u043b\u043e\u043c\u0430\u043d\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432 \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 JavaScript \u043d\u0430 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440, \u043a\u043e\u0442\u043e\u0440\u044b\u0439, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0432\u043e\u0437\u0432\u0440\u0430\u0449\u0430\u0435\u0442 \u043d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430 \u0438\u043d\u0434\u0438\u0432\u0438\u0434\u0443\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0434 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n\u00ab\u0418\u0441\u043a\u0443\u0441\u043d\u044b\u0439 \u0434\u0438\u0437\u0430\u0439\u043d Exploit Kit \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0435\u043c\u0443 \u0437\u0430\u0440\u0430\u0436\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0431\u0435\u0437 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c. \u041c\u0435\u0436\u0434\u0443 \u0442\u0435\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0437\u0430\u0442\u0440\u0443\u0434\u043d\u044f\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f\u00bb, \u2014 \u0433\u043e\u0432\u043e\u0440\u044f\u0442 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438.\n\n\u0421 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0432 2014 \u0433\u043e\u0434\u0443 \u0431\u044b\u043b\u043e \u0437\u0430\u043c\u0435\u0447\u0435\u043d\u043e, \u0447\u0442\u043e RIG EK \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0438\u0439 \u0441\u043f\u0435\u043a\u0442\u0440 \u0444\u0438\u043d\u0430\u043d\u0441\u043e\u0432\u044b\u0445 \u0442\u0440\u043e\u044f\u043d\u043e\u0432, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c-\u0432\u044b\u043c\u043e\u0433\u0430\u0442\u0435\u043b\u0435\u0439, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a AZORult, CryptoBit, Dridex, Raccoon Stealer \u0438 WastedLoader. \u041e\u0434\u043d\u0430\u043a\u043e \u0432 2017 \u043f\u043e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 RIG \u0431\u044b\u043b \u043d\u0430\u043d\u0435\u0441\u0435\u043d \u043e\u0433\u0440\u043e\u043c\u043d\u044b\u0439 \u0443\u0434\u0430\u0440 \u043f\u043e\u0441\u043b\u0435 \u0440\u044f\u0434\u0430 \u0441\u043a\u043e\u043e\u0440\u0434\u0438\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u043a\u0440\u0443\u043f\u043d\u044b\u0445 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0439 \u0432 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041d\u0430 \u0432\u0440\u0435\u043c\u044f \u044d\u0442\u043e \u043f\u0440\u0438\u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u043b\u043e \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u043e\u0439 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u0438\u0435 \u043a\u0430\u043c\u043f\u0430\u043d\u0438\u0438 RIG EK \u0431\u044b\u043b\u0438 \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u044b \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c Internet Explorer \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2021-26411. \u0421 \u0435\u0451 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u043b\u043e\u0441\u044c \u0440\u0430\u0437\u0432\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u0435 RedLine Stealer. \u0414\u0440\u0443\u0433\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0435 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442: CVE-2013-2551, CVE-2014-6332, CVE-2015-0313, CVE-2015-2419, CVE -2016-0189, CVE-2018-8174, CVE-2019-0752, \u0438 CVE-2020-0674.\n\n\u00ab\u0418\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0447\u0442\u043e \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u043f\u043e\u043f\u044b\u0442\u043e\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0431\u044b\u043b\u043e \u0441\u0430\u043c\u044b\u043c \u0432\u044b\u0441\u043e\u043a\u0438\u043c \u0432\u043e \u0432\u0442\u043e\u0440\u043d\u0438\u043a, \u0441\u0440\u0435\u0434\u0443 \u0438 \u0447\u0435\u0442\u0432\u0435\u0440\u0433, \u043f\u0440\u0438\u0447\u0435\u043c \u0443\u0441\u043f\u0435\u0448\u043d\u044b\u0435 \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u043b\u0438 \u0432 \u043e\u0434\u043d\u0438 \u0438 \u0442\u0435 \u0436\u0435 \u0434\u043d\u0438 \u043d\u0435\u0434\u0435\u043b\u0438\u00bb, \u2014 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b.\n\n\u00ab\u0412 \u0446\u0435\u043b\u043e\u043c, RIG EK \u0432\u0435\u0434\u0451\u0442 \u043e\u0447\u0435\u043d\u044c \u043f\u043b\u043e\u0434\u043e\u0442\u0432\u043e\u0440\u043d\u044b\u0439 \u0431\u0438\u0437\u043d\u0435\u0441 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u043a\u0430\u043a \u0443\u0441\u043b\u0443\u0433\u0438, \u0438\u043c\u0435\u044f \u0436\u0435\u0440\u0442\u0432 \u043f\u043e \u0432\u0441\u0435\u043c\u0443 \u043c\u0438\u0440\u0443, \u0432\u044b\u0441\u043e\u043a\u043e\u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0439 \u0430\u0440\u0441\u0435\u043d\u0430\u043b \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0438 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u043f\u043e\u0441\u0442\u043e\u044f\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c\u044b\u043c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u041f\u041e\u00bb, \u2014 \u043f\u043e\u0434\u0432\u0435\u043b\u0438 \u0438\u0442\u043e\u0433 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 PRODAFT.\n\n#RIGExploitKit #\u0412\u0440\u0435\u0434\u043e\u043d\u043e\u0441\n\n\ud83d\udd14 ITsec NEWS", "creation_timestamp": "2023-02-28T13:24:28.000000Z"}, {"uuid": "9aebabdc-b769-4c92-a7d1-d361b8e49a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3282", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2016-0752\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2016-02-16T02:59:06.783\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.html\n2. http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.html\n3. http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html\n4. http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html\n5. http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html\n6. http://rhn.redhat.com/errata/RHSA-2016-0296.html\n7. http://www.debian.org/security/2016/dsa-3464\n8. http://www.openwall.com/lists/oss-security/2016/01/25/13\n9. http://www.securityfocus.com/bid/81801\n10. http://www.securitytracker.com/id/1034816\n11. https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ\n12. https://www.exploit-db.com/exploits/40561/\n13. http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178044.html\n14. http://lists.fedoraproject.org/pipermail/package-announce/2016-February/178069.html\n15. http://lists.opensuse.org/opensuse-security-announce/2016-04/msg00053.html\n16. http://lists.opensuse.org/opensuse-updates/2016-02/msg00034.html\n17. http://lists.opensuse.org/opensuse-updates/2016-02/msg00043.html\n18. http://rhn.redhat.com/errata/RHSA-2016-0296.html\n19. http://www.debian.org/security/2016/dsa-3464\n20. http://www.openwall.com/lists/oss-security/2016/01/25/13\n21. http://www.securityfocus.com/bid/81801\n22. http://www.securitytracker.com/id/1034816\n23. https://groups.google.com/forum/message/raw?msg=ruby-security-ann/335P1DcLG00/JXcBnTtZEgAJ\n24. https://www.exploit-db.com/exploits/40561/", "creation_timestamp": "2025-01-28T19:17:36.000000Z"}, {"uuid": "72bb8515-2e76-4457-9777-e0e0b9ed3706", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3251", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0750\n\ud83d\udd25 CVSS Score: 6.5 (CVSS_V3)\n\ud83d\udd39 Description: A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.\n\ud83d\udccf Published: 2025-01-28T12:31:07Z\n\ud83d\udccf Modified: 2025-01-28T12:31:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0750\n2. https://access.redhat.com/security/cve/CVE-2025-0750\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339405", "creation_timestamp": "2025-01-28T13:09:24.000000Z"}, {"uuid": "9b30735a-3db6-419f-a674-7f9bde7be489", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0752\n\ud83d\udd25 CVSS Score: 6.2 (CVSS_V3)\n\ud83d\udd39 Description: A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.\n\ud83d\udccf Published: 2025-01-28T12:31:07Z\n\ud83d\udccf Modified: 2025-01-28T12:31:07Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0752\n2. https://access.redhat.com/security/cve/CVE-2025-0752\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339115", "creation_timestamp": "2025-01-28T13:09:23.000000Z"}, {"uuid": "36124ff4-91a1-4cb2-af4e-503dd142a0d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3248", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0754\n\ud83d\udd25 CVSS Score: 4.2 (CVSS_V3)\n\ud83d\udd39 Description: The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.\n\ud83d\udccf Published: 2025-01-28T12:31:08Z\n\ud83d\udccf Modified: 2025-01-28T12:31:08Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0754\n2. https://access.redhat.com/security/cve/CVE-2025-0754\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339147", "creation_timestamp": "2025-01-28T13:09:22.000000Z"}, {"uuid": "8e841da5-b521-4812-9ff2-2091daef383d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0759", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5687", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0759\n\ud83d\udd25 CVSS Score: 3.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: IBM EntireX 11.1 could allow a local user to unintentionally modify data timestamp integrity due to improper shared resource synchronization.\n\ud83d\udccf Published: 2025-02-27T14:53:41.714Z\n\ud83d\udccf Modified: 2025-02-27T15:11:40.468Z\n\ud83d\udd17 References:\n1. https://www.ibm.com/support/pages/node/7184194", "creation_timestamp": "2025-02-27T15:29:31.000000Z"}, {"uuid": "0a81ee87-558f-452c-a7a2-165e41157f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7258", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0752\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.\n\ud83d\udccf Published: 2025-01-28T09:29:33.073Z\n\ud83d\udccf Modified: 2025-03-12T01:54:23.727Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0752\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339115", "creation_timestamp": "2025-03-12T02:40:27.000000Z"}, {"uuid": "97563c5f-d11a-4ebf-90c1-944f513792fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7389", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0754\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.\n\ud83d\udccf Published: 2025-01-28T09:37:11.500Z\n\ud83d\udccf Modified: 2025-03-12T22:27:47.036Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0754\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339147", "creation_timestamp": "2025-03-12T22:41:04.000000Z"}, {"uuid": "82ea0066-c9f6-4870-81f5-3b4882afc110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7645", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0750\n\ud83d\udd25 CVSS Score: 6.6 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H)\n\ud83d\udd39 Description: A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.\n\ud83d\udccf Published: 2025-01-28T09:29:30.831Z\n\ud83d\udccf Modified: 2025-03-15T00:22:37.418Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/errata/RHSA-2025:1122\n2. https://access.redhat.com/security/cve/CVE-2025-0750\n3. https://bugzilla.redhat.com/show_bug.cgi?id=2339405", "creation_timestamp": "2025-03-15T00:45:37.000000Z"}, {"uuid": "18c7830a-76e2-4719-a49b-d1e4d9843a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7899", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0755\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The various bson_append\u00a0functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16\n\ud83d\udccf Published: 2025-03-18T09:01:04.793Z\n\ud83d\udccf Modified: 2025-03-18T09:01:04.793Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/SERVER-94461", "creation_timestamp": "2025-03-18T09:50:42.000000Z"}, {"uuid": "fe3783b1-76cf-41bf-b008-72d3f91eebd7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0757", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12165", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0757\n\ud83d\udd25 CVSS Score: 4.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: Overview\n\n\n\n\u00a0\n\n\n\nThe software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79) \n\n\n\n\u00a0\n\n\n\nDescription \n\n\n\n\u00a0\n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface. \n\n\n\n\u00a0\n\n\n\nImpact \n\n\n\n\u00a0\n\n\n\nOnce the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site.\n\ud83d\udccf Published: 2025-04-16T22:18:19.156Z\n\ud83d\udccf Modified: 2025-04-16T22:18:19.156Z\n\ud83d\udd17 References:\n1. https://support.pentaho.com/hc/en-us/articles/35781038882445--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Improper-Neutralization-of-Input-During-Web-Page-Generation-Cross-site-Scripting-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0757", "creation_timestamp": "2025-04-16T22:57:44.000000Z"}, {"uuid": "bfd23fa0-c552-4349-9f1c-9a14774238c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12163", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0756\n\ud83d\udd25 CVSS Score: 9.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: Overview \n\n\n\n\u00a0\n\n\n\nThe product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. (CWE-99) \n\n\n\n\u00a0\n\n\n\nDescription \n\n\n\n\u00a0\n\n\n\nHitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not restrict JNDI identifiers during the creation of platform data sources. \n\n\n\n\u00a0\n\n\n\nImpact \n\n\n\n\u00a0\n\n\n\nAn attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information, which can lead to remote code execution by unauthorized users.\n\ud83d\udccf Published: 2025-04-16T22:23:19.116Z\n\ud83d\udccf Modified: 2025-04-16T22:23:19.116Z\n\ud83d\udd17 References:\n1. https://https://support.pentaho.com/hc/en-us/articles/35771876077709--Resolved-Hitachi-Vantara-Pentaho-Data-Integration-Analytics-Improper-Control-of-Resource-Identifiers-Resource-Injection-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0756", "creation_timestamp": "2025-04-16T22:57:42.000000Z"}, {"uuid": "ae16ccc6-877d-44fb-acec-a4c5487f7cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0758", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12167", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0758\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H)\n\ud83d\udd39 Description: Overview\u00a0\n\n\n\nThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. (CWE-732)\u00a0\n\n\n\nDescription\u00a0\n\n\n\nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed with Karaf JMX beans enabled and accessible by default.\u00a0\n\n\n\nImpact\u00a0\n\n\n\nWhen the vulnerability is leveraged, a user with local execution privileges can access functionality exposed by Karaf beans contained in the product.\n\ud83d\udccf Published: 2025-04-16T22:12:29.724Z\n\ud83d\udccf Modified: 2025-04-16T22:13:52.521Z\n\ud83d\udd17 References:\n1. https://support.pentaho.com/hc/en-us/articles/35781318194061--Resolved-Hitachi-Vantara-Pentaho-Business-Analytics-Server-Incorrect-Permission-Assignment-for-Critical-Resource-Versions-before-10-2-0-2-including-9-3-x-Impacted-CVE-2025-0758", "creation_timestamp": "2025-04-16T22:57:46.000000Z"}, {"uuid": "dcb156e1-ebff-4372-ad2f-ffc662fa8acd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12201", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0754\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks.\n\ud83d\udccf Published: 2025-01-28T09:37:11.500Z\n\ud83d\udccf Modified: 2025-04-17T08:30:11.306Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0754\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339147", "creation_timestamp": "2025-04-17T08:57:46.000000Z"}, {"uuid": "15cd7ec7-0b2b-4479-96d7-c35c5ab5dbb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12200", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0752\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.\n\ud83d\udccf Published: 2025-01-28T09:29:33.073Z\n\ud83d\udccf Modified: 2025-04-17T08:39:13.012Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0752\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2339115", "creation_timestamp": "2025-04-17T08:57:45.000000Z"}, {"uuid": "062ef016-966b-4755-99b2-8ecfe7fade2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13195", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0755\n\ud83d\udd25 CVSS Score: 8.4 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The various bson_append\u00a0functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16\n\ud83d\udccf Published: 2025-03-18T09:01:04.793Z\n\ud83d\udccf Modified: 2025-04-24T08:42:52.079Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/SERVER-94461\n2. https://jira.mongodb.org/browse/CDRIVER-5601", "creation_timestamp": "2025-04-24T09:12:04.000000Z"}, {"uuid": "fdefd6ed-72c0-44dc-84eb-dff7897827fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0755", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17325", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0755\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Memory safety bugs present in Firefox 121, Firefox ESR 115.6, and Thunderbird 115.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.\n\ud83d\udccf Published: 2024-01-23T13:48:19.684Z\n\ud83d\udccf Modified: 2025-05-22T17:36:55.681Z\n\ud83d\udd17 References:\n1. https://bugzilla.mozilla.org/buglist.cgi?bug_id=1868456%2C1871445%2C1873701\n2. https://www.mozilla.org/security/advisories/mfsa2024-01/\n3. https://www.mozilla.org/security/advisories/mfsa2024-02/\n4. https://www.mozilla.org/security/advisories/mfsa2024-04/\n5. https://lists.debian.org/debian-lts-announce/2024/01/msg00015.html\n6. https://lists.debian.org/debian-lts-announce/2024/01/msg00022.html", "creation_timestamp": "2025-05-22T17:43:21.000000Z"}, {"uuid": "4d3db7f1-e560-4a82-8dbb-9641c22f88ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0754", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17323", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2024-0754\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Some WASM source files could have caused a crash when loaded in devtools. This vulnerability affects Firefox < 122.\n\ud83d\udccf Published: 2024-01-23T13:48:22.822Z\n\ud83d\udccf Modified: 2025-05-22T17:38:48.920Z\n\ud83d\udd17 References:\n1. https://bugzilla.mozilla.org/show_bug.cgi?id=1871605\n2. https://www.mozilla.org/security/advisories/mfsa2024-01/", "creation_timestamp": "2025-05-22T17:43:20.000000Z"}, {"uuid": "94c5ad5b-55af-4959-be1c-04163ddbebca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0758", "type": "seen", "source": "https://t.me/ptswarm/117", "content": "Rapid7 fixed an SQL-Injection (CVE-2022-0757) and an XSS (CVE-2022-0758) in Nexpose Vulnerability Scanner found by our researcher Aleksey Solovev.\n\nAdvisory: https://docs.rapid7.com/release-notes/nexpose/20220302/", "creation_timestamp": "2022-03-28T19:46:33.000000Z"}, {"uuid": "a085f0ff-7a33-4870-bec6-c5b68dbc6427", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0757", "type": "seen", "source": "https://t.me/ptswarm/117", "content": "Rapid7 fixed an SQL-Injection (CVE-2022-0757) and an XSS (CVE-2022-0758) in Nexpose Vulnerability Scanner found by our researcher Aleksey Solovev.\n\nAdvisory: https://docs.rapid7.com/release-notes/nexpose/20220302/", "creation_timestamp": "2022-03-28T19:46:33.000000Z"}, {"uuid": "986ec16b-692c-453d-9370-a75af116b461", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0757", "type": "published-proof-of-concept", "source": "https://t.me/ptswarm/128", "content": "PoC for a Post-Auth SQL-Injection (CVE-2022-0757) in Nexpose Vulnerability Scanner <= 6.6.128\n\nDefault port: 3780\nDefault username: nxadmin\nAffected handler: /data/asset/filterAssets", "creation_timestamp": "2022-06-02T14:58:14.000000Z"}, {"uuid": "41461160-a9ba-41ca-babd-ef26a25f40a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "published-proof-of-concept", "source": "https://t.me/ExcreamOnSecurity/238", "content": "CVE-2019-0752 (vbscript exploit) \n\nPop up a calculator - tested on non updated Internet Explorer 11 Windows 7-10 (a bit slow on win10)\n\nhttps://github.com/smgorelik/Windows-RCE-exploits/tree/master/Web/VBScript\n\n#windows #exploit #vulnerability", "creation_timestamp": "2019-08-11T10:22:59.000000Z"}, {"uuid": "c73c58f8-7157-45f1-a10c-ecacd54365a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "https://t.me/is_n3ws/34", "content": "\u200c\u041a\u043e\u043c\u0430\u043d\u0434\u0430 Recorded Future \u043f\u0440\u043e\u0448\u0435\u0440\u0441\u0442\u0438\u043b\u0430 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0438, \u0434\u0430\u0440\u043a\u0432\u0435\u0431 \u0438 \u0441\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u043f\u0438\u0441\u043e\u043a \u043d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u0447\u0430\u0441\u0442\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e \u0433\u043e\u0434\u0430\u043c.\u00a0\n\n\n\u200b\u200bCVE-2018-15982\nis a use-after-free in the Flash\u2019s file package com.adobe.tvsdk.mediacore.metadata that can be exploited to deliver and execute malicious code on a victim\u2019s computer. Exploit vector: rtf document with flash object.\n\nCVE-2018-8174\nWindows VBScript Engine Remote Code Execution Vulnerability. Exploit vector:\u00a0 An attacker could embed an ActiveX control marked \"safe for initialization\" in an application or Microsoft Office document.\n\nCVE-2017-11882\nVulnerability in an older version of the Office Equation Editor. Exploit vector: RTF file downloads and runs multiple scripts of different types (VBScript, PowerShell, PHP, others) to download the payload.\n\nCVE-2018-4878\nFlash Player vulnerability. Exploit vector: The Excel file carrying an embedded SWF file with the exploit.\n\nCVE-2019-0752\nA remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. Exploit vector: In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. An attacker could also embed an ActiveX control marked \"safe for initialization\" in an application or Microsoft Office document that hosts the IE rendering engine.\n\nCVE-2017-0199\nMS Office zero-day vulnerability. Exploit vector: Microsoft Word RTF (Rich Text Format) document.\n\nCVE-2015-2419\nJScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka \"JScript9 Memory Corruption Vulnerability.\"\n\nCVE-2018-20250\nWinRAR vulnerability that allows attackers to extract a malicious executable to one of the Windows Startup folder to be executed every time the system is booted.\n\nCVE-2017-8750\nA remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.\u00a0 Exploit vector: An attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers.\n\nCVE-2012-0158\nA buffer overflow vulnerability in the\u00a0 ListView / TreeView ActiveX controls in the MSCOMCTL.OCX library. The malicious code can be triggered by a specially crafted DOC or RTF file for MS Office versions 2003, 2007 and 2010.\n\nhttps://www.helpnetsecurity.com/2020/02/06/most-exploited-vulnerabilities-2019/", "creation_timestamp": "2020-02-07T07:05:41.000000Z"}, {"uuid": "d7836718-73e3-4f8e-8acc-c529f30d443b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0757", "type": "seen", "source": "https://t.me/cvedetector/23200", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0757 - Hitachi Vantara Pentaho Business Analytics Server Cross-Site Scripting (XSS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0757 \nPublished : April 16, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Overview  \n  \n  \n  \n\u00a0  \n  \n  \n  \nThe software does not neutralize or incorrectly neutralize user-controllable input before it is placed in output that is used as a web page that is served to other users. (CWE-79)   \n  \n  \n  \n\u00a0  \n  \n  \n  \nDescription   \n  \n  \n  \n\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, allow a malicious URL to inject content into the Analyzer plugin interface.   \n  \n  \n  \n\u00a0  \n  \n  \n  \nImpact   \n  \n  \n  \n\u00a0  \n  \n  \n  \nOnce the malicious script is injected, the attacker can perform a variety of malicious activities. The attacker could transfer private information, such as cookies that may include session information, from the victim's machine to the attacker. The attacker could send malicious requests to a web site on behalf of the victim, which could be especially dangerous to the site if the victim has administrator privileges to manage that site. \nSeverity: 4.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:37.000000Z"}, {"uuid": "41bd193b-9c3f-4384-9ae3-0c4ae32f34d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0756", "type": "seen", "source": "https://t.me/cvedetector/23199", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0756 - Hitachi Vantara Pentaho Unrestricted JNDI Identifier Vulnerability (CWE-99)\", \n  \"Content\": \"CVE ID : CVE-2025-0756 \nPublished : April 16, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Overview   \n  \n  \n  \n\u00a0  \n  \n  \n  \nThe product receives input from an upstream component, but it does not restrict or incorrectly restricts the input before it is used as an identifier for a resource that may be outside the intended sphere of control. (CWE-99)   \n  \n  \n  \n\u00a0  \n  \n  \n  \nDescription   \n  \n  \n  \n\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Data Integration & Analytics versions before 10.2.0.2, including 9.3.x and 8.3.x, do not restrict JNDI identifiers during the creation of platform data sources.   \n  \n  \n  \n\u00a0  \n  \n  \n  \nImpact   \n  \n  \n  \n\u00a0  \n  \n  \n  \nAn attacker could gain access to or modify sensitive data or system resources. This could allow access to protected files or directories including configuration files and files containing sensitive information, which can lead to remote code execution by unauthorized users. \nSeverity: 9.1 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:36.000000Z"}, {"uuid": "7592719a-18b7-4bf3-a55e-d38b527991f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0758", "type": "seen", "source": "https://t.me/cvedetector/23195", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0758 - Hitachi Vantara Pentaho Business Analytics Server JMX Bean Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-0758 \nPublished : April 16, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : Overview\u00a0  \n  \n  \n  \nThe product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors. (CWE-732)\u00a0  \n  \n  \n  \nDescription\u00a0  \n  \n  \n  \nHitachi Vantara Pentaho Business Analytics Server prior to versions 10.2.0.2, including 9.3.x and 8.3.x, is installed with Karaf JMX beans enabled and accessible by default.\u00a0  \n  \n  \n  \nImpact\u00a0  \n  \n  \n  \nWhen the vulnerability is leveraged, a user with local execution privileges can access functionality exposed by Karaf beans contained in the product. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:30.000000Z"}, {"uuid": "de360b66-22cf-4bbf-aba4-3994380e5eb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0754", "type": "seen", "source": "https://t.me/cvedetector/16591", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0754 - Apache OpenShift Service Mesh HTTP Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0754 \nPublished : Jan. 28, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The vulnerability was found in OpenShift Service Mesh 2.6.3 and 2.5.6. This issue occurs due to improper sanitization of HTTP headers by Envoy, particularly the x-forwarded-for header. This lack of sanitization can allow attackers to inject malicious payloads into service mesh logs, leading to log injection and spoofing attacks. Such injections can mislead logging mechanisms, enabling attackers to manipulate log entries or execute reflected cross-site scripting (XSS) attacks. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:14.000000Z"}, {"uuid": "38cb42e0-c87a-4c3e-bc2c-33b56acf5a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0752", "type": "seen", "source": "https://t.me/cvedetector/16590", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0752 - OpenShift Service Mesh Envoy HTTP Header Sanitization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0752 \nPublished : Jan. 28, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:13.000000Z"}, {"uuid": "679fb1ca-d8c9-483b-b74b-b21d2e154f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "https://t.me/cvedetector/16589", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0750 - CRI-O Node-Level Privilege Escalation Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0750 \nPublished : Jan. 28, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories. \nSeverity: 6.6 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T12:56:12.000000Z"}, {"uuid": "de7bab95-6d02-4b69-aa68-ff088432542a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "https://t.me/cvedetector/20559", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0755 - MongoDB BSON Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-0755 \nPublished : March 18, 2025, 9:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : The various bson_append\u00a0functions in the MongoDB C driver library may be susceptible to buffer overflow when performing operations that could result in a final BSON document which exceeds the maximum allowable size (INT32_MAX), resulting in a segmentation fault and possible application crash. This issue affected libbson versions prior to 1.27.5, MongoDB Server v8.0 versions prior to 8.0.1 and MongoDB Server v7.0 versions prior to 7.0.16 \nSeverity: 8.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-18T11:53:23.000000Z"}, {"uuid": "8fde950e-9d49-4847-8516-6d6728738d7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0751", "type": "seen", "source": "https://t.me/cvedetector/16505", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0751 - Axiomatic Bento4 Heap-Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0751 \nPublished : Jan. 27, 2025, 8:15 p.m. | 33\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in Axiomatic Bento4 up to 1.6.0. This affects the function AP4_BitReader::ReadBits of the component mp42aac. The manipulation leads to heap-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-27T21:51:58.000000Z"}, {"uuid": "8e1d4fe3-47e2-4373-8fcb-9a6b9bfe7cd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0755", "type": "published-proof-of-concept", "source": "Telegram/SjMkQTJZh1OVsAelqnmoxox4zx2jX-NPg6F66llJmAH6pX0", "content": "", "creation_timestamp": "2023-02-24T13:10:11.000000Z"}, {"uuid": "3031aba8-9db1-4f07-8435-a81d93eaf025", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0754", "type": "published-proof-of-concept", "source": "Telegram/SjMkQTJZh1OVsAelqnmoxox4zx2jX-NPg6F66llJmAH6pX0", "content": "", "creation_timestamp": "2023-02-24T13:10:11.000000Z"}, {"uuid": "0891b061-abd2-464b-8c6f-1503ab08b3d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0755", "type": "published-proof-of-concept", "source": "Telegram/Eb3I8nnkOm93DVh7Mp09Y6E2tcFTXaS-g8RP_9G3bW3wsPQ", "content": "", "creation_timestamp": "2023-02-24T06:29:35.000000Z"}, {"uuid": "afd5da23-89da-4b12-9f3f-7045d0786931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0754", "type": "published-proof-of-concept", "source": "Telegram/QDmQ5WeDMnTXDWmyYlYmlQPmq4tAoPxOcVPAn47UYLuer4U", "content": "", "creation_timestamp": "2023-02-24T14:18:18.000000Z"}, {"uuid": "f9bc4417-037c-4ccf-9f77-ba955b09ad6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0757", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1082", "content": "https://github.com/hunThubSpace/CVE-2024-0757-Exploit", "creation_timestamp": "2024-06-18T19:09:45.000000Z"}, {"uuid": "3701b766-d67e-494b-bab5-2197df31db68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0757", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/1081", "content": "\ud83d\udea8POC RELEASED\ud83d\udea8A PoC Exploit for CVE-2024-0757 - Insert or Embed Articulate Content into WordPress Remote Code Execution (RCE)\n\nThe Insert or Embed Articulate Content into WordPress plugin for WordPress is vulnerable to arbitrary file uploads through insecure file uploads in a zip archive in all versions up to, and including, 4.3000000023. This makes it possible for unauthenticated attackers to upload zip files containing phar files on the affected site's server which may make remote code execution possible.\n\nCVSS: 8.8 (High) [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H]\nSoftware Type: Plugin\nSoftware Slug: insert-or-embed-articulate-content-into-wordpress\nAffected Version: <= 4.3000000023\n\nhttps://x.com/DarkWebInformer/status/1803111898163920900", "creation_timestamp": "2024-06-18T19:09:04.000000Z"}, {"uuid": "1d43b8de-ba6a-4631-a35e-8d91f59ad421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0753", "type": "seen", "source": "Telegram/ulMrjTa9MUnUcmXdf7ZsJt7qbIZdVL9FakXD0wGnuH-AcOK-", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "dce028da-9388-41fd-8c1f-01434af2eb8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0751", "type": "seen", "source": "Telegram/dq7_qWKSEDoXtZS2s8rG0rHMuliORmxVJtQRm4LHEc3wAXkg", "content": "", "creation_timestamp": "2025-03-02T11:46:29.000000Z"}, {"uuid": "90959739-3c3b-4cc4-b148-c8dcd4ef812d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0750", "type": "seen", "source": "Telegram/rxUIoj95j6ZQ7ioxwMAZqJ54YP5sybspgek-jmCIDKKC-quU", "content": "", "creation_timestamp": "2025-02-14T10:01:39.000000Z"}, {"uuid": "66eddaaf-340b-4404-9512-29707f2be8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "Telegram/hX0soFRidoU0ivus0SiS_fOhdvzjHAu9JieXfoMdRq6A9CAU", "content": "", "creation_timestamp": "2025-02-14T10:00:35.000000Z"}, {"uuid": "297c751a-9d7a-41aa-a503-58889168be79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "https://t.me/arpsyndicate/1252", "content": "#ExploitObserverAlert\n\nCVE-2012-0754\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2012-0754. Adobe Flash Player before 10.3.183.15 and 11.x before 11.1.102.62 on Windows, Mac OS X, Linux, and Solaris; before 11.1.111.6 on Android 2.x and 3.x; and before 11.1.115.6 on Android 4.x allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors.\n\nFIRST-EPSS: 0.972670000\nNVD-IS: 10.0\nNVD-ES: 8.6", "creation_timestamp": "2023-12-04T16:37:10.000000Z"}, {"uuid": "8b1f9606-e1c2-48af-9f74-6e21645e13e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/arpsyndicate/1036", "content": "#ExploitObserverAlert\n\nCVE-2016-0752\n\nDESCRIPTION: Exploit Observer has 28 entries related to CVE-2016-0752. Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n\nFIRST-EPSS: 0.973610000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-03T21:46:18.000000Z"}, {"uuid": "46ebb5a0-194c-48c2-ad4e-f32080368b6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0755", "type": "seen", "source": "Telegram/AvU4s6yOC3nA161VoyJsZ4kNiYeawgOi5ItlSrMJGz_cKJo", "content": "", "creation_timestamp": "2025-03-18T11:00:18.000000Z"}, {"uuid": "641d6000-8707-48cb-9b67-e4745cd53262", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0757", "type": "published-proof-of-concept", "source": "Telegram/vJGL4IqIxBWpv4DlCpjkpo7GIOZb7LMFQqscB04g3mD-hQ", "content": "", "creation_timestamp": "2022-07-03T11:06:48.000000Z"}, {"uuid": "041f06fa-388a-46b5-bbcf-03bf2b77019b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0757", "type": "published-proof-of-concept", "source": "https://t.me/Securi3yTalent/180", "content": "Exploit  CVE-2024-0757\nPoC Exploit for CVE-2024-0757 - Insert or Embed Articulate Content into WordPress Remote Code Execution (RCE)\n\nCheck out (@Securi3yTalent): https://x.com/Securi3yTalent\nhttps://t.me/Securi3yTalent\nhttps://facebook.com/Securi3yTalent\n\n\nhttps://github.com/hunThubSpace/CVE-2024-0757-Exploit\n\n#exploit #wordpressRCE #wordoressecploit #wordoressvulnerability #vulnerability #vapt #Bugbounty #securi3ytalent #securityTalent #security_talent", "creation_timestamp": "2024-06-19T11:07:19.000000Z"}, {"uuid": "857742d6-2304-40b6-8436-4d81204e4acf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0755", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/717", "content": "CVE-2023-0754 : PTC Thingworx Edge C-SDK twHeader_fromStream Integer Overflow Remote Code Execution Vulnerability\nPOC : https://srcincite.io/advisories/src-2023-0001/\nCVE-2023-0755 : PTC Thingworx Edge C-SDK mulitpartMessageStoreEntry_Create Array Indexing Out-of-Bounds Write Remote Code Execution Vulnerability\nPOC : https://srcincite.io/advisories/src-2023-0002/", "creation_timestamp": "2023-02-27T06:30:00.000000Z"}, {"uuid": "ccb51c1f-ebb5-487c-a7ec-718bf7c85584", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0754", "type": "published-proof-of-concept", "source": "https://t.me/MrVGunz/717", "content": "CVE-2023-0754 : PTC Thingworx Edge C-SDK twHeader_fromStream Integer Overflow Remote Code Execution Vulnerability\nPOC : https://srcincite.io/advisories/src-2023-0001/\nCVE-2023-0755 : PTC Thingworx Edge C-SDK mulitpartMessageStoreEntry_Create Array Indexing Out-of-Bounds Write Remote Code Execution Vulnerability\nPOC : https://srcincite.io/advisories/src-2023-0002/", "creation_timestamp": "2023-02-27T06:30:00.000000Z"}, {"uuid": "226131f5-74dd-46dd-b459-58dba5521db9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0755", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2650", "content": "Link updated...\nCVE-2023-0754\nPTC Thingworx Edge C-SDK twHeader_fromStream Integer Overflow RCE Vulnerability\n\nCVE-2023-0755\nPTC Thingworx Edge C-SDK mulitpartMessageStoreEntry_Create Array Indexing OOB Write RCE Vulnerability\n\nDownload POC exploit: https://system32.ink/news-feed/p/249/", "creation_timestamp": "2023-02-24T05:47:23.000000Z"}, {"uuid": "814a9f8f-bd07-4b9b-ad9c-59bcf78c4839", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0754", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/2650", "content": "Link updated...\nCVE-2023-0754\nPTC Thingworx Edge C-SDK twHeader_fromStream Integer Overflow RCE Vulnerability\n\nCVE-2023-0755\nPTC Thingworx Edge C-SDK mulitpartMessageStoreEntry_Create Array Indexing OOB Write RCE Vulnerability\n\nDownload POC exploit: https://system32.ink/news-feed/p/249/", "creation_timestamp": "2023-02-24T05:47:23.000000Z"}, {"uuid": "f8fe1b4c-2aac-4f40-bb38-46f3df6076ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0759", "type": "seen", "source": "https://t.me/ctinow/194047", "content": "https://ift.tt/ojX5c9k\nCVE-2024-0759", "creation_timestamp": "2024-02-27T07:26:45.000000Z"}, {"uuid": "199dea03-ac44-4561-89d2-f36a56e4516a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0759", "type": "seen", "source": "https://t.me/ctinow/194051", "content": "https://ift.tt/ojX5c9k\nCVE-2024-0759", "creation_timestamp": "2024-02-27T07:31:50.000000Z"}, {"uuid": "c35b1df9-bb74-4df8-a1ae-517325013d7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0753", "type": "seen", "source": "https://t.me/ctinow/186855", "content": "https://ift.tt/reXf2zA\nCVE-2024-0753 | Mozilla Thunderbird up to 115.6 HSTS information disclosure (DLA 3720-1)", "creation_timestamp": "2024-02-17T10:11:37.000000Z"}, {"uuid": "5594e91d-522d-4f0d-8801-b3c6f94f93cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0753", "type": "seen", "source": "https://t.me/ctinow/186854", "content": "https://ift.tt/d3OXFng\nCVE-2024-0753 | Mozilla Firefox up to 115.6 HSTS information disclosure (DLA 3720-1)", "creation_timestamp": "2024-02-17T10:11:36.000000Z"}, {"uuid": "25e00c37-2b83-4a9a-8997-9ff99541bf0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0751", "type": "seen", "source": "https://t.me/ctinow/186853", "content": "https://ift.tt/NzBy4sa\nCVE-2024-0751 | Mozilla Thunderbird up to 115.6 Devtool Extension privileges management (DLA 3720-1)", "creation_timestamp": "2024-02-17T10:11:35.000000Z"}, {"uuid": "87b806d5-ddcb-43e8-848a-e1181d2b4f71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0758", "type": "seen", "source": "https://t.me/ctinow/185708", "content": "https://ift.tt/oNDtcj0\nCVE-2024-0758 | MolecularFaces prior 0.3.0 Molfiles cross site scripting (GHSA-2pwh-52h7-7j84)", "creation_timestamp": "2024-02-15T17:26:25.000000Z"}, {"uuid": "eb5b0da3-e6c9-4700-b88d-8b5dd39f0e36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0750", "type": "seen", "source": "https://t.me/ctinow/186847", "content": "https://ift.tt/d80qi41\nCVE-2024-0750 | Mozilla Firefox Popup Notification clickjacking (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:41:47.000000Z"}, {"uuid": "f08dc561-af6a-4c5d-8def-b40a30eddf75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0751", "type": "seen", "source": "https://t.me/ctinow/186852", "content": "https://ift.tt/cCZVKDQ\nCVE-2024-0751 | Mozilla Firefox up to 115.6 Devtool Extension privileges management (DLA 3720-1)", "creation_timestamp": "2024-02-17T10:11:34.000000Z"}, {"uuid": "222dc369-b276-445f-9f2f-b8f47cf26217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0754", "type": "seen", "source": "https://t.me/ctinow/186851", "content": "https://ift.tt/BTCSg7K\nCVE-2024-0754 | Mozilla Firefox up to 121 WASM Source File denial of service", "creation_timestamp": "2024-02-17T10:11:33.000000Z"}, {"uuid": "756ec136-5a89-4ef9-ae55-def2408831e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0752", "type": "seen", "source": "https://t.me/ctinow/186850", "content": "https://ift.tt/4EzU2qF\nCVE-2024-0752 | Mozilla Firefox up to 121 on macOS use after free", "creation_timestamp": "2024-02-17T10:11:32.000000Z"}, {"uuid": "90d16bbb-5b6a-45ea-9ea5-05a7a5f6b1a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0750", "type": "seen", "source": "https://t.me/ctinow/186849", "content": "https://ift.tt/6QM4lbn\nCVE-2024-0750 | Mozilla Thunderbird Popup Notification clickjacking (DLA 3720-1)", "creation_timestamp": "2024-02-17T10:11:31.000000Z"}, {"uuid": "1e0178f5-d9c3-4969-a84f-62c744272dd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0755", "type": "seen", "source": "https://t.me/ctinow/186845", "content": "https://ift.tt/z1JTGEp\nCVE-2024-0755 | Mozilla Thunderbird memory corruption (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:41:45.000000Z"}, {"uuid": "6d847315-c6f5-4844-bf00-b62db01cf589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0755", "type": "seen", "source": "https://t.me/ctinow/186844", "content": "https://ift.tt/9Rkf4pX\nCVE-2024-0755 | Mozilla Firefox memory corruption (DLA 3720-1)", "creation_timestamp": "2024-02-17T09:41:44.000000Z"}, {"uuid": "2946b2bb-d1ed-45ae-a72c-0520f255a032", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0750", "type": "seen", "source": "https://t.me/ctinow/173676", "content": "https://ift.tt/5PXY6Fj\nCVE-2024-0750", "creation_timestamp": "2024-01-25T18:46:36.000000Z"}, {"uuid": "3fa1ae49-669d-43e6-98c7-5d71c2852f5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0751", "type": "seen", "source": "https://t.me/ctinow/173675", "content": "https://ift.tt/fUALZgx\nCVE-2024-0751", "creation_timestamp": "2024-01-25T18:46:35.000000Z"}, {"uuid": "9f8ba620-2501-4fbb-a997-2c4fe2e07acc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0753", "type": "seen", "source": "https://t.me/ctinow/173674", "content": "https://ift.tt/wgv8zCK\nCVE-2024-0753", "creation_timestamp": "2024-01-25T18:46:34.000000Z"}, {"uuid": "067363ef-16b4-45b1-a21a-cde13edaf925", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0755", "type": "seen", "source": "https://t.me/ctinow/173673", "content": "https://ift.tt/WgmsbSU\nCVE-2024-0755", "creation_timestamp": "2024-01-25T18:46:33.000000Z"}, {"uuid": "856fbe39-451e-449b-8dff-b70eb2e20e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0752", "type": "seen", "source": "https://t.me/ctinow/173723", "content": "https://ift.tt/DHuyifU\nCVE-2024-0752", "creation_timestamp": "2024-01-25T19:31:45.000000Z"}, {"uuid": "891e9a78-f5f3-4f30-9fe8-51a5c188e4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0754", "type": "seen", "source": "https://t.me/ctinow/173722", "content": "https://ift.tt/IGJi5NO\nCVE-2024-0754", "creation_timestamp": "2024-01-25T19:31:44.000000Z"}, {"uuid": "4365aeac-d8d4-4048-92eb-8f74196b008b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0750", "type": "seen", "source": "https://t.me/ctinow/172039", "content": "https://ift.tt/4LawbMz\nCVE-2024-0750", "creation_timestamp": "2024-01-23T15:27:00.000000Z"}, {"uuid": "914305af-9cb3-41d3-8358-642ec504c858", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0755", "type": "seen", "source": "https://t.me/ctinow/172044", "content": "https://ift.tt/qV0olLj\nCVE-2024-0755", "creation_timestamp": "2024-01-23T15:27:09.000000Z"}, {"uuid": "d298231a-8d5f-47c3-bd9f-489211300cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0754", "type": "seen", "source": "https://t.me/ctinow/172043", "content": "https://ift.tt/omMFNcB\nCVE-2024-0754", "creation_timestamp": "2024-01-23T15:27:08.000000Z"}, {"uuid": "ad532c07-b1c3-4bc4-ab4d-a9df25e279ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0753", "type": "seen", "source": "https://t.me/ctinow/172042", "content": "https://ift.tt/QVOlhmH\nCVE-2024-0753", "creation_timestamp": "2024-01-23T15:27:06.000000Z"}, {"uuid": "1e2953f4-c1b5-4098-95c7-d0f4e209eff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0752", "type": "seen", "source": "https://t.me/ctinow/172041", "content": "https://ift.tt/8QXCHbt\nCVE-2024-0752", "creation_timestamp": "2024-01-23T15:27:02.000000Z"}, {"uuid": "ccdbd2db-b293-46a9-abf3-fdbc648c17f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-0751", "type": "seen", "source": "https://t.me/ctinow/172040", "content": "https://ift.tt/5APQnyo\nCVE-2024-0751", "creation_timestamp": "2024-01-23T15:27:01.000000Z"}, {"uuid": "b4c3ca76-5ad5-4942-a391-92b60906c90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0751", "type": "seen", "source": "https://t.me/reverseame/415", "content": "Nice descriptions of CVE-2020-0751, CVE-2020-0890 and CVE-2020-0904 https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-002/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-003/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-001/", "creation_timestamp": "2026-07-30T00:02:53.300608Z"}, {"uuid": "3e06d34a-0c9c-4a99-a0b1-cdd44187e32d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0756", "type": "seen", "source": "https://t.me/cibsecurity/63271", "content": "\u203c CVE-2023-0756 \u203c\n\nAn issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11 before 15.11.1. The main branch of a repository with a specially crafted name allows an attacker to create repositories with malicious code, victims who clone or download these repositories will execute arbitrary code on their systems.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-04T02:36:39.000000Z"}, {"uuid": "0e80c23f-86fb-42d5-af77-3227cf991aa6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0750", "type": "seen", "source": "https://t.me/cibsecurity/61565", "content": "\u203c CVE-2023-0750 \u203c\n\nYellobrik PEC-1864 implements authentication checks via javascript in the frontend interface. When the device can be accessed over the network an attacker could bypass authentication. This would allow an attacker to : - Change the password, resulting in a DOS of the users - Change the streaming source, compromising the integrity of the stream - Change the streaming destination, compromising the confidentiality of the stream This issue affects Yellowbrik: PEC 1864. No patch has been issued by the manufacturer as this model was discontinued.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-06T18:27:17.000000Z"}, {"uuid": "5eeeb581-21a4-4381-af51-fcef56f5fcb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0754", "type": "seen", "source": "https://t.me/cibsecurity/58834", "content": "\u203c CVE-2023-0754 \u203c\n\nThe affected products are vulnerable to an integer overflow or wraparound, which could allow an attacker to crash the server and remotely execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T00:48:40.000000Z"}, {"uuid": "8576386b-293e-4580-84fc-0762642162cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0755", "type": "seen", "source": "https://t.me/cibsecurity/58830", "content": "\u203c CVE-2023-0755 \u203c\n\nThe affected products are vulnerable to an improper validation of array index, which could allow an attacker to crash the server and remotely execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T00:48:36.000000Z"}, {"uuid": "9125787b-102b-4622-a3c4-b024c145a7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0759", "type": "seen", "source": "https://t.me/cibsecurity/57820", "content": "\u203c CVE-2023-0759 \u203c\n\nPrivilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T16:24:52.000000Z"}, {"uuid": "376bb170-35c4-47fb-9ead-eebc4b024d54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-0751", "type": "seen", "source": "https://t.me/cibsecurity/57805", "content": "\u203c CVE-2023-0751 \u203c\n\nWhen GELI reads a key file from standard input, it does not reuse the key file to initialize multiple providers at once resulting in the second and subsequent devices silently using a NULL key as the user key file. If a user only uses a key file without a user passphrase, the master key is encrypted with an empty key file allowing trivial recovery of the master key.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-08T22:35:44.000000Z"}, {"uuid": "2d7e5044-1dc7-410b-8e36-e362448736c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0752", "type": "seen", "source": "https://t.me/cibsecurity/38407", "content": "\u203c CVE-2022-0752 \u203c\n\nCross-site Scripting (XSS) - Generic in GitHub repository hestiacp/hestiacp prior to 1.5.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-04T14:26:50.000000Z"}, {"uuid": "02451f6d-4549-48b8-9ca0-5fc356794506", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0756", "type": "seen", "source": "https://t.me/cibsecurity/38507", "content": "\u203c CVE-2022-0756 \u203c\n\nImproper Authorization in GitHub repository salesagility/suitecrm prior to 7.12.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-07T16:34:48.000000Z"}, {"uuid": "125c1923-3de7-410d-9a15-5e021c74c272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0755", "type": "seen", "source": "https://t.me/cibsecurity/38506", "content": "\u203c CVE-2022-0755 \u203c\n\nImproper Access Control in GitHub repository salesagility/suitecrm prior to 7.12.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-07T16:34:48.000000Z"}, {"uuid": "684b7760-8466-48c9-ba45-b0b8873ace13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0754", "type": "seen", "source": "https://t.me/cibsecurity/38505", "content": "\u203c CVE-2022-0754 \u203c\n\nSQL Injection in GitHub repository salesagility/suitecrm prior to 7.12.5.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-07T16:34:47.000000Z"}, {"uuid": "55f88d55-92fa-4a31-a4b1-574bf5316a3f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0753", "type": "seen", "source": "https://t.me/cibsecurity/38359", "content": "\u203c CVE-2022-0753 \u203c\n\nCross-site Scripting (XSS) - Reflected in GitHub repository hestiacp/hestiacp prior to 1.5.9.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-03T18:26:08.000000Z"}, {"uuid": "4266971f-ef61-4687-be09-6b38df6f0cfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0751", "type": "seen", "source": "https://t.me/cibsecurity/39657", "content": "\u203c CVE-2022-0751 \u203c\n\nInaccurate display of Snippet files containing special characters in all versions of GitLab CE/EE allows an attacker to create Snippets with misleading content which could trick unsuspecting users into executing arbitrary commands\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-28T22:41:43.000000Z"}, {"uuid": "cec8304e-c729-4d30-8e0a-b4afbd1b1386", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0757", "type": "seen", "source": "https://t.me/cibsecurity/39184", "content": "\u203c CVE-2022-0757 \u203c\n\nRapid7 Nexpose versions 6.6.93 and earlier are susceptible to an SQL Injection vulnerability, whereby valid search operators are not defined. This lack of validation can allow an attacker to manipulate the \"ANY\" and \"OR\" operators in the SearchCriteria and inject SQL code. This issue was fixed in Rapid7 Nexpose version 6.6.129.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T01:22:01.000000Z"}, {"uuid": "5c6259cc-b4d9-4852-a9e7-962999eb3515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0758", "type": "seen", "source": "https://t.me/cibsecurity/39180", "content": "\u203c CVE-2022-0758 \u203c\n\nRapid7 Nexpose versions 6.6.129 and earlier suffer from a reflected cross site scripting vulnerability, within the shared scan configuration component of the tool. With this vulnerability an attacker could pass literal values as the test credentials, providing the opportunity for a potential XSS attack. This issue is fixed in Rapid7 Nexpose version 6.6.130.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-03-18T13:46:22.000000Z"}, {"uuid": "e4192895-998c-4503-a3e9-91aaa0feb3c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0752", "type": "seen", "source": "https://t.me/KaitNews/5271", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u06cc\u0634 \u062f\u0631 \u062e\u0628\u0631\u0647\u0627 \u0627\u0637\u0644\u0627\u0639\u200c\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u06cc\u0645 \u06a9\u0647 \u0634\u0631\u06a9\u062a \u06af\u0648\u06af\u0644 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u0650 \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0631\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u0646\u0632\u062f\u06cc\u06a9 \u0628\u0647 \u06f8\u06f1 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u067e\u0627\u0644\u0648\u0622\u0644\u062a\u0648 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\"Overlay Attack\"\u060c \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f. \n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f7-\u06f0\u06f7\u06f5\u06f2 \u06cc\u06a9 \u0627\u0634\u06a9\u0627\u0644 \u0627\u0631\u062a\u0642\u0627\u0621 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u062f\u0631 \u0686\u0627\u0631\u0686\u0648\u0628 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f windowmanager \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0622\u0646\u0686\u0647 \u06a9\u0647 \u062f\u0631 \u0635\u0641\u062d\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u0628\u0631\u062e\u0644\u0627\u0641 \u0631\u0648\u0627\u0644 \u0645\u0639\u0645\u0648\u0644 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\u060c \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u0645\u062c\u0648\u0632\u0647\u0627 \u0648 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635\u06cc \u0646\u06cc\u0627\u0632 \u0646\u062f\u0627\u0631\u062f. \n\n\u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u062a\u0645\u0627\u0645\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0628\u0627 \u0646\u0627\u0645 Oreo\u060c \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0634\u0648\u0627\u0647\u062f\u06cc \u0645\u0628\u0646\u06cc \u0628\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062f\u0646\u06cc\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u062d\u0641\u0627\u0638\u062a \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0628\u0647 \u0645\u062d\u0636 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u062e\u0648\u062f \u06af\u0641\u062a\u0646\u062f: \u00ab\u0627\u06cc\u0646 \u0646\u0648\u0639 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0628\u062f\u062a\u0631\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0646\u06cc\u0632\u060c \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u0648 \u0633\u0631\u0642\u062a\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0634\u0648\u062f.\u00bb \n\n\u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u0627\u0646\u0646\u062f \u062f\u06cc\u06af\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0627\u0633\u062a \u06a9\u0647 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0648 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0641\u0631\u06cc\u0628 \u0628\u062f\u0647\u062f \u062a\u0627 \u0641\u06a9\u0631 \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0631\u0648\u06cc \u06cc\u06a9 \u067e\u0646\u062c\u0631\u0647 \u06a9\u0644\u06cc\u06a9 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0648\u0644\u06cc \u062f\u0631 \u0648\u0627\u0642\u0639 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631 \u0646\u0628\u0648\u062f\u0647 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u062e\u0648\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0639\u0637\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0628\u0647 \u0639\u0628\u0627\u0631\u062a \u062f\u06cc\u06af\u0631\u060c \u0645\u0647\u0627\u062c\u0645 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc TYPE_TOAST \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a.\n\n\u0647\u0631\u0686\u0646\u062f \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f1 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0631\u0627\u0647\u200c\u06a9\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0627\u0646\u062f\u06cc\u0634\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0632\u0645\u0627\u0646 \u062e\u0631\u0648\u062c \u0628\u0647 \u0645\u062f\u062a \u06f3\u066b\u06f5 \u062b\u0627\u0646\u06cc\u0647 \u0628\u0631\u0627\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0627\u062c\u0627\u0632\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u06cc\u0634 \u0627\u0632 \u06cc\u06a9 \u0646\u0645\u0648\u0646\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627 \u062f\u0627\u062f\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0647\u0645 \u0627\u0633\u0627\u0633 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0637\u0631\u0641 \u0646\u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0628\u0631\u0627\u06cc \u0646\u0645\u0627\u06cc\u0634 \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0647\u06cc\u0686 \u0645\u062c\u0648\u0632\u06cc \u0646\u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0627\u0647 \u0645\u06cc \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f7 \u0645\u06cc\u0644\u0627\u062f\u06cc \u0628\u0647 \u06af\u0648\u06af\u0644 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0648 \u0648\u0635\u0644\u0647\u200c\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0646 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0627\u0632 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0627 \u0646\u0627\u0645 Oreo \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0634\u062a\u0647 \u0648 \u062a\u0645\u0627\u0645\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0627\u0632 \u062d\u0641\u0627\u0638\u062a\u200c\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0647\u0633\u062a\u0646\u062f.", "creation_timestamp": "2026-08-04T09:00:05.407755Z"}, {"uuid": "28bcf32b-a823-43f9-9419-b4958105061a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "exploited", "source": "https://t.me/CyberSecurityTechnologies/272", "content": "#exploit\nIE Vulns\n\n1. Exploiting CVE-2019-0752 without shellcode - details of a write-what-where  in IE\nhttps://www.zerodayinitiative.com/blog/2019/5/21/rce-without-native-code-exploitation-of-a-write-what-where-in-internet-explorer\n\n2. CVE-2019-0752:\nRCE in the way that the scripting engine handles objects in memory in IE\nhttps://github.com/CreatePhotonW/CVE-2019-0752", "creation_timestamp": "2024-05-06T09:30:41.000000Z"}, {"uuid": "18df8eea-5602-4d86-affc-61f19829f96a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0750", "type": "seen", "source": "https://t.me/cibsecurity/137", "content": "ATENTION\u203c New - CVE-2016-0750\n\nThe hotrod java client in infinispan before 9.1.0.Final automatically deserializes bytearray message contents in certain events. A malicious user could exploit this flaw by injecting a specially-crafted serialized object to attain remote code execution or conduct other attacks.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2018-09-11T16:18:31.000000Z"}, {"uuid": "8544eff1-d2fc-48b2-abc0-45cb67d70357", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0759", "type": "seen", "source": "https://t.me/Kubesploit/232", "content": "A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, in the way it parsed kubeconfig files.\nRuby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).\n\nMore: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0759", "creation_timestamp": "2026-08-29T18:00:04.678388Z"}, {"uuid": "5f03858a-27da-47a1-96ec-05bcf9242232", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0751", "type": "seen", "source": "https://t.me/reverseame/415", "content": "Nice descriptions of CVE-2020-0751, CVE-2020-0890 and CVE-2020-0904 https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-002/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-003/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-001/", "creation_timestamp": "2026-08-03T15:00:04.276483Z"}, {"uuid": "2cce464c-2b43-4e9d-a50a-90a9be8e19c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0759", "type": "seen", "source": "https://t.me/Kubesploit/232", "content": "A flaw was found in all versions of kubeclient up to (but not including) v4.9.3, in the way it parsed kubeconfig files.\nRuby applications that leverage kubeclient to parse kubeconfig files are susceptible to Man-in-the-middle attacks (MITM).\n\nMore: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0759", "creation_timestamp": "2026-08-30T00:00:54.423206Z"}, {"uuid": "cc8e3256-7b32-4683-8934-134627606fef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0758", "type": "seen", "source": "https://t.me/cve_mitre_org/11", "content": "CVEnew Just tweeted ********************************************** CVE-2019-0961 An information disclosure vulnerability exists when the Windows GDI component improperly discloses the contents of its memory, aka 'Windows GDI Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0758, CVE-2019-0882. https://t.co/Urdi45QMap", "creation_timestamp": "2019-05-16T19:50:41.000000Z"}, {"uuid": "523515e2-6a4e-4969-b229-33fa5eb7f00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0751", "type": "seen", "source": "https://t.me/reverseame/415", "content": "Nice descriptions of CVE-2020-0751, CVE-2020-0890 and CVE-2020-0904 https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-002/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-003/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-001/", "creation_timestamp": "2026-08-04T00:00:34.390120Z"}, {"uuid": "0e251b7c-ee26-42fc-91b7-f31296dbe7ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0752", "type": "seen", "source": "https://t.me/KaitNews/5271", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u06cc\u0634 \u062f\u0631 \u062e\u0628\u0631\u0647\u0627 \u0627\u0637\u0644\u0627\u0639\u200c\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u06cc\u0645 \u06a9\u0647 \u0634\u0631\u06a9\u062a \u06af\u0648\u06af\u0644 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u0650 \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0631\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u0646\u0632\u062f\u06cc\u06a9 \u0628\u0647 \u06f8\u06f1 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u067e\u0627\u0644\u0648\u0622\u0644\u062a\u0648 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\"Overlay Attack\"\u060c \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f. \n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f7-\u06f0\u06f7\u06f5\u06f2 \u06cc\u06a9 \u0627\u0634\u06a9\u0627\u0644 \u0627\u0631\u062a\u0642\u0627\u0621 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u062f\u0631 \u0686\u0627\u0631\u0686\u0648\u0628 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f windowmanager \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0622\u0646\u0686\u0647 \u06a9\u0647 \u062f\u0631 \u0635\u0641\u062d\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u0628\u0631\u062e\u0644\u0627\u0641 \u0631\u0648\u0627\u0644 \u0645\u0639\u0645\u0648\u0644 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\u060c \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u0645\u062c\u0648\u0632\u0647\u0627 \u0648 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635\u06cc \u0646\u06cc\u0627\u0632 \u0646\u062f\u0627\u0631\u062f. \n\n\u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u062a\u0645\u0627\u0645\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0628\u0627 \u0646\u0627\u0645 Oreo\u060c \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0634\u0648\u0627\u0647\u062f\u06cc \u0645\u0628\u0646\u06cc \u0628\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062f\u0646\u06cc\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u062d\u0641\u0627\u0638\u062a \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0628\u0647 \u0645\u062d\u0636 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u062e\u0648\u062f \u06af\u0641\u062a\u0646\u062f: \u00ab\u0627\u06cc\u0646 \u0646\u0648\u0639 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0628\u062f\u062a\u0631\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0646\u06cc\u0632\u060c \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u0648 \u0633\u0631\u0642\u062a\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0634\u0648\u062f.\u00bb \n\n\u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u0627\u0646\u0646\u062f \u062f\u06cc\u06af\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0627\u0633\u062a \u06a9\u0647 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0648 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0641\u0631\u06cc\u0628 \u0628\u062f\u0647\u062f \u062a\u0627 \u0641\u06a9\u0631 \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0631\u0648\u06cc \u06cc\u06a9 \u067e\u0646\u062c\u0631\u0647 \u06a9\u0644\u06cc\u06a9 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0648\u0644\u06cc \u062f\u0631 \u0648\u0627\u0642\u0639 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631 \u0646\u0628\u0648\u062f\u0647 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u062e\u0648\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0639\u0637\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0628\u0647 \u0639\u0628\u0627\u0631\u062a \u062f\u06cc\u06af\u0631\u060c \u0645\u0647\u0627\u062c\u0645 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc TYPE_TOAST \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a.\n\n\u0647\u0631\u0686\u0646\u062f \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f1 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0631\u0627\u0647\u200c\u06a9\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0627\u0646\u062f\u06cc\u0634\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0632\u0645\u0627\u0646 \u062e\u0631\u0648\u062c \u0628\u0647 \u0645\u062f\u062a \u06f3\u066b\u06f5 \u062b\u0627\u0646\u06cc\u0647 \u0628\u0631\u0627\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0627\u062c\u0627\u0632\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u06cc\u0634 \u0627\u0632 \u06cc\u06a9 \u0646\u0645\u0648\u0646\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627 \u062f\u0627\u062f\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0647\u0645 \u0627\u0633\u0627\u0633 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0637\u0631\u0641 \u0646\u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0628\u0631\u0627\u06cc \u0646\u0645\u0627\u06cc\u0634 \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0647\u06cc\u0686 \u0645\u062c\u0648\u0632\u06cc \u0646\u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0627\u0647 \u0645\u06cc \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f7 \u0645\u06cc\u0644\u0627\u062f\u06cc \u0628\u0647 \u06af\u0648\u06af\u0644 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0648 \u0648\u0635\u0644\u0647\u200c\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0646 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0627\u0632 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0627 \u0646\u0627\u0645 Oreo \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0634\u062a\u0647 \u0648 \u062a\u0645\u0627\u0645\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0627\u0632 \u062d\u0641\u0627\u0638\u062a\u200c\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0647\u0633\u062a\u0646\u062f.", "creation_timestamp": "2026-08-05T00:00:49.873134Z"}, {"uuid": "1d83b0f1-bca0-4274-9df4-354447daf988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3msuho5pg3b2y", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2019-0752: A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Inte\u2026\nCVSS 7.5 \u00b7 EPSS 81.6% \u00b7 CISA KEV \u00b7 0day\nhttps://beta.vulnsea.com/cve/CVE-2019-0752\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-08-12T06:07:50.987690Z"}, {"uuid": "b0a1a6e7-a4c5-4673-8d16-f137fac08ee2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://bsky.app/profile/euvd-bot.bsky.social/post/3moltc4mywi2s", "content": "\ud83d\udea8 EUVD-2026-4492\n\ud83d\udcca 9.8/10\n\ud83c\udfe2 Gemini MCP Tool\n\n\ud83d\udcdd gemini-mcp-tool vulnerable to OS command injection and @file exfiltration via prompt quoting (CVE-2026-0755)\n\n\ud83d\udd17 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-4492\n\n#cybersecurity #infosec #cve #euvd", "creation_timestamp": "2026-06-18T22:01:08.108189Z"}, {"uuid": "b31eae4a-80aa-4557-86dd-ab5f68b367df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0755", "type": "seen", "source": "https://gist.github.com/alon710/a6e390ebf7b85888620ebeca6c5058aa", "content": "# CVE-2026-0755: CVE-2026-0755: Remote Code Execution and Arbitrary File Exfiltration in gemini-mcp-tool\n\n> **CVSS Score:** 9.8\n> **Published:** 2026-06-18\n> **Full Report:** https://cvereports.com/reports/CVE-2026-0755\n\n## Summary\nCVE-2026-0755 is a critical vulnerability in gemini-mcp-tool (<= 1.1.5) that allows unauthenticated remote code execution on Windows installations and arbitrary local file exfiltration across all supported operating systems. The flaws exist within the execAsync command runner and the input handling logic of the Model Context Protocol (MCP) server, which fails to securely escape arguments passed to Node.js child processes and does not validate local file references in user-supplied prompt strings.\n\n## TL;DR\nAn unauthenticated remote code execution vulnerability on Windows and a cross-platform file exfiltration flaw in gemini-mcp-tool <= 1.1.5 allow attackers to execute arbitrary system commands or read sensitive local files via manipulated prompt inputs.\n\n## Exploit Status: POC\n\n## Technical Details\n\n- **CWE ID**: CWE-78\n- **Attack Vector**: Network\n- **CVSS v3.0 Score**: 9.8\n- **EPSS Score**: 0.03336\n- **Impact**: Remote Code Execution / Local File Exfiltration\n- **Exploit Status**: PoC Available\n- **KEV Status**: Not Listed\n\n## Affected Systems\n\n- gemini-mcp-tool\n- **gemini-mcp-tool**: <= 1.1.5 (Fixed in: `1.1.6`)\n\n## Mitigation\n\n- Upgrade gemini-mcp-tool to version 1.1.6 or higher immediately.\n- Deploy the MCP server within unprivileged sandboxed environments on Windows systems.\n- Filter prompt inputs at the gateway to strip system file indicators prior to processing.\n\n**Remediation Steps:**\n1. Identify all running instances of gemini-mcp-tool within your environment.\n2. Execute 'npm install -g gemini-mcp-tool@latest' to download and install the security patch.\n3. Restart any host integrations, such as Claude Desktop or custom Node.js wrappers, to load the patched files.\n4. Confirm the installed version is 1.1.6 using the package manager check options.\n\n## References\n\n- [ZDI-26-021 Advisory](https://www.zerodayinitiative.com/advisories/ZDI-26-021/)\n- [CVE-2026-0755 on CVE.org](https://www.cve.org/CVERecord?id=CVE-2026-0755)\n- [gemini-mcp-tool Repository](https://github.com/jamubc/gemini-mcp-tool)\n- [gemini-mcp-tool Documentation](https://jamubc.github.io/gemini-mcp-tool/)\n\n\n---\n*Generated by [CVEReports](https://cvereports.com/reports/CVE-2026-0755) - Automated Vulnerability Intelligence*", "creation_timestamp": "2026-06-19T03:41:46.000000Z"}, {"uuid": "a0384d46-147b-4152-8411-7365c65c9b54", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6f023ed8-e9ef-49a4-8722-38006a294ea9", "content": "", "creation_timestamp": "2026-06-19T12:47:38.384868Z"}, {"uuid": "a62b2bca-3aff-48e7-91c6-08148c8951f6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/55ca9c28-24af-455c-9256-aa6d99591cb1", "content": "", "creation_timestamp": "2026-06-19T12:47:08.625634Z"}, {"uuid": "7f03b1c6-4c04-4283-82dd-a3bfc1553e16", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a56ddbf9-fac5-42eb-b815-6e500c7002e2", "content": "", "creation_timestamp": "2026-06-19T12:47:23.810938Z"}, {"uuid": "68ae224c-a590-4a98-a8d8-b8076bf58068", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2019-0752", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3eb8a328-c424-48f8-8000-97e52bc55861", "content": "", "creation_timestamp": "2026-06-23T14:04:57.460315Z"}, {"uuid": "8fea00d5-dbb3-434d-94a5-12fb7d534ea6", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/914ae76a-0f99-4d7b-a5a4-073297b9916f", "content": "", "creation_timestamp": "2026-06-23T14:05:09.992589Z"}, {"uuid": "a8fae96d-0581-4a73-a50f-6ed1cb7beaec", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/249a61c8-cea0-46fc-8572-09e6411fe2a6", "content": "", "creation_timestamp": "2026-06-23T14:05:27.941306Z"}, {"uuid": "9520a122-b851-4b08-ad4e-69261b9d5af5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.035025Z"}, {"uuid": "c2607647-a44a-4251-9334-c0f4e206be81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-15T11:00:04.565213Z"}, {"uuid": "e4958603-b8ae-4b0b-a4bc-498816e20e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30706", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:37.402975Z"}, {"uuid": "b378b2d3-8d9f-47e7-b844-5c81c0a24ac0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/30707", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-16T00:00:37.637948Z"}, {"uuid": "178b29bf-bc4b-4ae2-84d4-11b03f68a676", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-28T00:00:11.397667Z"}, {"uuid": "f5aa5bfe-95c5-4dc4-8292-71965598438b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-0756", "type": "seen", "source": "https://t.me/CyberSecurityExploit/17138", "content": "\u26a0\ufe0f CVE / ZERO-DAY\n\ud83d\udd25 GitHub Fresh PoC CVE TOP 5 (Today / Verified & Non-Posted Priority)\nBelow are recent CVE vulnerabilities with active PoC repositories on GitHub, filtered for freshness and non-duplicate usage.\n\n\u2796\u2796\u2796\u2796\n\n1\ufe0f\u20e3 CVE-2026-0756\n\ud83c\udfaf Command Injection \u2192 Remote Code Execution\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-0756\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper input validation allows attackers to inject system commands without authentication.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Full system takeover\n\u2022 No authentication required\n\n\u2796\u2796\u2796\u2796\n\n2\ufe0f\u20e3 CVE-2026-25763\n\ud83c\udfaf OpenProject \u2013 Command Injection\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/official-security-research/CVE-2026-25763\n (PoC reference class)\n\n\ud83e\udde0 Overview\nImproper handling of Git-related parameters allows attackers to inject commands and execute them on the server.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Server compromise\n\u2022 File system access\n\n\u2796\u2796\u2796\u2796\n\n3\ufe0f\u20e3 CVE-2026-25769\n\ud83c\udfaf Wazuh Cluster \u2013 Insecure Deserialization RCE\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/hakaioffsec/CVE-2026-25769\n\n\ud83e\udde0 Overview\nA deserialization flaw in Wazuh cluster communication allows attackers to execute arbitrary commands remotely.\n\n\u2699\ufe0f Impact\n\u2022 Remote code execution\n\u2022 Cluster compromise\n\u2022 Lateral movement risk\n\n\u2796\u2796\u2796\u2796\n\n4\ufe0f\u20e3 CVE-2026-25676\n\ud83c\udfaf M-Track Duo Installer \u2013 DLL Hijacking (Privilege Escalation)\n\n\ud83d\udd17 PoC Repository\nhttps://github.com/Nexxus67/cve-2026-25676\n\n\ud83e\udde0 Overview\nA DLL search path hijacking vulnerability allows malicious libraries to be loaded by a trusted installer process.\n\n\u2699\ufe0f Impact\n\u2022 Local privilege escalation\n\u2022 Arbitrary code execution\n\u2022 Persistence opportunities\n\n\u2796\u2796\u2796\u2796\n\n5\ufe0f\u20e3 CVE-2026-30951\n\ud83c\udfaf Sequelize ORM \u2013 SQL Injection\n\n\ud83d\udd17 Reference / PoC Source\nhttps://github.com/ycdxsb/PocOrExp_in_Github/blob/main/Today.md\n\n\ud83e\udde0 Overview\nImproper handling of JSON path casting allows attackers to inject arbitrary SQL queries into database operations.\n\n\u2699\ufe0f Impact\n\u2022 Database compromise\n\u2022 Data exfiltration\n\u2022 Application-level breach\n\n\u2796\u2796\u2796\u2796\n\n\ud83d\udcda Research Value\n\u2022 Fresh PoC tracking\n\u2022 RCE / Injection pattern analysis\n\u2022 CI / backend / ORM attack surface study\n\u2022 Threat intelligence enrichment\n\n\u26a0\ufe0f Intelligence Note\nCurrent GitHub trend:\n\u2022 PoC repositories are published within hours of disclosure\n\u2022 Many CVEs appear first in GitHub before full advisory propagation\n\u2022 ORM / CI / DevOps-related vulnerabilities increasing\n\n\ud83e\udde0 Cyber Security Exploit Research Community\nMalware Analysis | Reverse Engineering | CVE Research | Threat Intelligence\n\n\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\u2796\n\n\ud83d\udd10 Cyber Security Exploit Community\nTelegram Group\nhttps://t.me/Cyber_Security_Exploit\n\nTelegram Channel\nhttps://t.me/CyberSecurityExploit\n\nResearch \u2022 Ethical Hacking \u2022 Red Team", "creation_timestamp": "2026-08-27T20:00:05.181197Z"}, {"uuid": "599945b0-07ac-426d-9bf3-4f0749f2444b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0752", "type": "seen", "source": "https://t.me/KaitNews/5271", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u06cc\u0634 \u062f\u0631 \u062e\u0628\u0631\u0647\u0627 \u0627\u0637\u0644\u0627\u0639\u200c\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u06cc\u0645 \u06a9\u0647 \u0634\u0631\u06a9\u062a \u06af\u0648\u06af\u0644 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u0650 \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0631\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u0646\u0632\u062f\u06cc\u06a9 \u0628\u0647 \u06f8\u06f1 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u067e\u0627\u0644\u0648\u0622\u0644\u062a\u0648 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\"Overlay Attack\"\u060c \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f. \n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f7-\u06f0\u06f7\u06f5\u06f2 \u06cc\u06a9 \u0627\u0634\u06a9\u0627\u0644 \u0627\u0631\u062a\u0642\u0627\u0621 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u062f\u0631 \u0686\u0627\u0631\u0686\u0648\u0628 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f windowmanager \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0622\u0646\u0686\u0647 \u06a9\u0647 \u062f\u0631 \u0635\u0641\u062d\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u0628\u0631\u062e\u0644\u0627\u0641 \u0631\u0648\u0627\u0644 \u0645\u0639\u0645\u0648\u0644 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\u060c \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u0645\u062c\u0648\u0632\u0647\u0627 \u0648 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635\u06cc \u0646\u06cc\u0627\u0632 \u0646\u062f\u0627\u0631\u062f. \n\n\u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u062a\u0645\u0627\u0645\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0628\u0627 \u0646\u0627\u0645 Oreo\u060c \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0634\u0648\u0627\u0647\u062f\u06cc \u0645\u0628\u0646\u06cc \u0628\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062f\u0646\u06cc\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u062d\u0641\u0627\u0638\u062a \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0628\u0647 \u0645\u062d\u0636 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u062e\u0648\u062f \u06af\u0641\u062a\u0646\u062f: \u00ab\u0627\u06cc\u0646 \u0646\u0648\u0639 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0628\u062f\u062a\u0631\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0646\u06cc\u0632\u060c \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u0648 \u0633\u0631\u0642\u062a\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0634\u0648\u062f.\u00bb \n\n\u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u0627\u0646\u0646\u062f \u062f\u06cc\u06af\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0627\u0633\u062a \u06a9\u0647 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0648 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0641\u0631\u06cc\u0628 \u0628\u062f\u0647\u062f \u062a\u0627 \u0641\u06a9\u0631 \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0631\u0648\u06cc \u06cc\u06a9 \u067e\u0646\u062c\u0631\u0647 \u06a9\u0644\u06cc\u06a9 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0648\u0644\u06cc \u062f\u0631 \u0648\u0627\u0642\u0639 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631 \u0646\u0628\u0648\u062f\u0647 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u062e\u0648\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0639\u0637\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0628\u0647 \u0639\u0628\u0627\u0631\u062a \u062f\u06cc\u06af\u0631\u060c \u0645\u0647\u0627\u062c\u0645 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc TYPE_TOAST \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a.\n\n\u0647\u0631\u0686\u0646\u062f \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f1 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0631\u0627\u0647\u200c\u06a9\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0627\u0646\u062f\u06cc\u0634\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0632\u0645\u0627\u0646 \u062e\u0631\u0648\u062c \u0628\u0647 \u0645\u062f\u062a \u06f3\u066b\u06f5 \u062b\u0627\u0646\u06cc\u0647 \u0628\u0631\u0627\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0627\u062c\u0627\u0632\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u06cc\u0634 \u0627\u0632 \u06cc\u06a9 \u0646\u0645\u0648\u0646\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627 \u062f\u0627\u062f\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0647\u0645 \u0627\u0633\u0627\u0633 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0637\u0631\u0641 \u0646\u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0628\u0631\u0627\u06cc \u0646\u0645\u0627\u06cc\u0634 \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0647\u06cc\u0686 \u0645\u062c\u0648\u0632\u06cc \u0646\u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0627\u0647 \u0645\u06cc \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f7 \u0645\u06cc\u0644\u0627\u062f\u06cc \u0628\u0647 \u06af\u0648\u06af\u0644 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0648 \u0648\u0635\u0644\u0647\u200c\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0646 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0627\u0632 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0627 \u0646\u0627\u0645 Oreo \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0634\u062a\u0647 \u0648 \u062a\u0645\u0627\u0645\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0627\u0632 \u062d\u0641\u0627\u0638\u062a\u200c\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0647\u0633\u062a\u0646\u062f.", "creation_timestamp": "2026-07-26T07:02:02.437738Z"}, {"uuid": "54e22689-bc83-45bb-8e1d-7d6c47469fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-0752", "type": "seen", "source": "https://t.me/KaitNews/5271", "content": "\u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0631\u0627 \u062f\u0631 \u0645\u0639\u0631\u0636 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc\u200c\u062f\u0647\u062f \n\n\ud83d\udc9a\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9b\ud83c\uddee\ud83c\uddf7\u2764\ufe0f\ud83c\uddee\ud83c\uddf7\ud83d\udc9a\n\n\u0628\u0647 \u06af\u0632\u0627\u0631\u0634 \u0648\u0628\u200c\u06af\u0627\u0647 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0641\u0646\u200c\u0622\u0648\u0631\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a :\n\u0686\u0646\u062f \u0631\u0648\u0632 \u067e\u06cc\u0634 \u062f\u0631 \u062e\u0628\u0631\u0647\u0627 \u0627\u0637\u0644\u0627\u0639\u200c\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u06cc\u0645 \u06a9\u0647 \u0634\u0631\u06a9\u062a \u06af\u0648\u06af\u0644 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u0650 \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0628\u0631\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f\u060c \u0646\u0632\u062f\u06cc\u06a9 \u0628\u0647 \u06f8\u06f1 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0648\u0635\u0644\u0647 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u0645\u062d\u0642\u0642\u0627\u0646 \u067e\u0627\u0644\u0648\u0622\u0644\u062a\u0648 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 \u06cc\u06a9\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0647\u0645\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0628\u0631\u0627\u06cc \u0627\u062c\u0631\u0627\u06cc \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\"Overlay Attack\"\u060c \u0645\u0648\u0631\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0642\u0631\u0627\u0631 \u0628\u06af\u06cc\u0631\u062f. \n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647\u200c\u06cc CVE-\u06f2\u06f0\u06f1\u06f7-\u06f0\u06f7\u06f5\u06f2 \u06cc\u06a9 \u0627\u0634\u06a9\u0627\u0644 \u0627\u0631\u062a\u0642\u0627\u0621 \u0627\u0645\u062a\u06cc\u0627\u0632 \u0645\u062d\u0633\u0648\u0628 \u0645\u06cc\u200c\u0634\u0648\u062f \u06a9\u0647 \u062f\u0631 \u0686\u0627\u0631\u0686\u0648\u0628 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f windowmanager \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0627\u0632 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0633\u0648\u0621\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u062f \u062a\u0627 \u0622\u0646\u0686\u0647 \u06a9\u0647 \u062f\u0631 \u0635\u0641\u062d\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u0646\u0634\u0627\u0646 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u0628\u0631\u062e\u0644\u0627\u0641 \u0631\u0648\u0627\u0644 \u0645\u0639\u0645\u0648\u0644 \u062f\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc\u060c \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u0645\u062c\u0648\u0632\u0647\u0627 \u0648 \u0634\u0631\u0627\u06cc\u0637 \u062e\u0627\u0635\u06cc \u0646\u06cc\u0627\u0632 \u0646\u062f\u0627\u0631\u062f. \n\n\u06af\u0641\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f \u062a\u0645\u0627\u0645\u06cc \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u067e\u06cc\u0634 \u0627\u0632 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0628\u0627 \u0646\u0627\u0645 Oreo\u060c \u062a\u062d\u062a \u062a\u0627\u062b\u06cc\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0634\u0648\u0627\u0647\u062f\u06cc \u0645\u0628\u0646\u06cc \u0628\u0631 \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u062f\u0646\u06cc\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0645\u0634\u0627\u0647\u062f\u0647 \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc \u062d\u0641\u0627\u0638\u062a \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0628\u0647 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0648\u0635\u06cc\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0628\u0647 \u0645\u062d\u0636 \u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0635\u0644\u0647\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc\u060c \u0647\u0631\u0686\u0647 \u0633\u0631\u06cc\u0639\u200c\u062a\u0631 \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u0647\u0627\u06cc \u062e\u0648\u062f \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u0646\u062f. \u0645\u062d\u0642\u0642\u0627\u0646 \u062f\u0631 \u062a\u0648\u0636\u06cc\u062d\u0627\u062a \u062e\u0648\u062f \u06af\u0641\u062a\u0646\u062f: \u00ab\u0627\u06cc\u0646 \u0646\u0648\u0639 \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0646\u062a\u0631\u0644 \u062f\u0633\u062a\u06af\u0627\u0647 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0631\u0627 \u062f\u0631 \u0627\u062e\u062a\u06cc\u0627\u0631 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc \u0645\u062e\u0631\u0628 \u0642\u0631\u0627\u0631 \u062f\u0647\u062f. \u062f\u0631 \u0628\u062f\u062a\u0631\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0646\u06cc\u0632\u060c \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0645\u0646\u062c\u0631 \u0628\u0647 \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u0645\u0627\u0646\u0646\u062f \u0628\u0627\u062c\u200c\u0627\u0641\u0632\u0627\u0631 \u0648 \u0633\u0631\u0642\u062a\u200c\u06a9\u0646\u0646\u062f\u0647\u200c\u0647\u0627\u06cc \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 \u0634\u0648\u062f.\u00bb \n\n\u0627\u0646\u062c\u0627\u0645 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0647 \u0645\u0627\u0646\u0646\u062f \u062f\u06cc\u06af\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0627\u0633\u062a \u06a9\u0647 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0648 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0646\u0645\u0627\u06cc\u0634 \u062f\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u062d\u0645\u0644\u0627\u062a\u060c \u0645\u0647\u0627\u062c\u0645 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u0641\u0631\u06cc\u0628 \u0628\u062f\u0647\u062f \u062a\u0627 \u0641\u06a9\u0631 \u06a9\u0646\u062f \u06a9\u0647 \u0628\u0631 \u0631\u0648\u06cc \u06cc\u06a9 \u067e\u0646\u062c\u0631\u0647 \u06a9\u0644\u06cc\u06a9 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a \u0648\u0644\u06cc \u062f\u0631 \u0648\u0627\u0642\u0639 \u067e\u0646\u062c\u0631\u0647\u200c\u0627\u06cc \u062f\u0631 \u06a9\u0627\u0631 \u0646\u0628\u0648\u062f\u0647 \u0648 \u06a9\u0627\u0631\u0628\u0631 \u0645\u062c\u0648\u0632\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc \u0646\u0635\u0628 \u0628\u062f\u0627\u0641\u0632\u0627\u0631 \u0631\u0627 \u0628\u0631 \u0631\u0648\u06cc \u0633\u0627\u0645\u0627\u0646\u0647\u200c\u06cc \u062e\u0648\u062f \u0628\u0647 \u0645\u0647\u0627\u062c\u0645\u0627\u0646 \u0627\u0639\u0637\u0627 \u06a9\u0631\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0631\u06cc \u0627\u0632 \u062d\u0645\u0644\u0627\u062a \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633 \u0627\u0639\u0644\u0627\u0646 Toast \u062f\u0631 \u0633\u0627\u0645\u0627\u0646\u0647 \u0639\u0627\u0645\u0644 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0647\u0631\u0647\u200c\u0628\u0631\u062f\u0627\u0631\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0628\u0647 \u0639\u0628\u0627\u0631\u062a \u062f\u06cc\u06af\u0631\u060c \u0645\u0647\u0627\u062c\u0645 \u06a9\u0646\u062a\u0631\u0644 \u06a9\u0627\u0645\u0644\u06cc \u0628\u0631 \u0631\u0648\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc TYPE_TOAST \u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a.\n\n\u0647\u0631\u0686\u0646\u062f \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f7.\u06f1 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0631\u0627\u0647\u200c\u06a9\u0627\u0631\u06cc \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0627\u0646\u062f\u06cc\u0634\u06cc\u062f\u0647 \u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0632\u0645\u0627\u0646 \u062e\u0631\u0648\u062c \u0628\u0647 \u0645\u062f\u062a \u06f3\u066b\u06f5 \u062b\u0627\u0646\u06cc\u0647 \u0628\u0631\u0627\u06cc \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0627\u062c\u0627\u0632\u0647\u200c\u06cc \u0646\u0645\u0627\u06cc\u0634 \u0628\u06cc\u0634 \u0627\u0632 \u06cc\u06a9 \u0646\u0645\u0648\u0646\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u067e\u0646\u062c\u0631\u0647\u200c\u0647\u0627 \u062f\u0627\u062f\u0647 \u0646\u0645\u06cc\u200c\u0634\u0648\u062f \u0648\u0644\u06cc \u0647\u0646\u0648\u0632 \u0647\u0645 \u0627\u0633\u0627\u0633 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0631\u0637\u0631\u0641 \u0646\u0634\u062f\u0647 \u0648 \u06cc\u06a9 \u0628\u0631\u0646\u0627\u0645\u0647\u200c\u06cc \u06a9\u0627\u0631\u0628\u0631\u062f\u06cc \u0628\u0631\u0627\u06cc \u0646\u0645\u0627\u06cc\u0634 \u067e\u0646\u062c\u0631\u0647\u200c\u06cc Toast \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0647\u06cc\u0686 \u0645\u062c\u0648\u0632\u06cc \u0646\u062f\u0627\u0631\u062f. \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u062f\u0631 \u0645\u0627\u0647 \u0645\u06cc \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f7 \u0645\u06cc\u0644\u0627\u062f\u06cc \u0628\u0647 \u06af\u0648\u06af\u0644 \u06af\u0632\u0627\u0631\u0634 \u0634\u062f\u0647 \u0648 \u0648\u0635\u0644\u0647\u200c\u06cc \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0622\u0646 \u062f\u0631 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0645\u0627\u0647 \u0633\u067e\u062a\u0627\u0645\u0628\u0631 \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0646\u0633\u062e\u0647\u200c\u06cc \u06f8.\u06f0 \u0627\u0632 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0628\u0627 \u0646\u0627\u0645 Oreo \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0648\u062c\u0648\u062f \u0646\u062f\u0627\u0634\u062a\u0647 \u0648 \u062a\u0645\u0627\u0645\u06cc \u06a9\u0627\u0631\u0628\u0631\u0627\u0646\u06cc \u06a9\u0647 \u0627\u0632 \u0627\u06cc\u0646 \u0646\u0633\u062e\u0647\u200c\u06cc \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u0627\u0632 \u062d\u0641\u0627\u0638\u062a\u200c\u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u062d\u0645\u0644\u0627\u062a \u067e\u0648\u0634\u0634\u06cc \u0628\u0631\u062e\u0648\u0631\u062f\u0627\u0631 \u0647\u0633\u062a\u0646\u062f.", "creation_timestamp": "2026-07-27T00:01:42.805754Z"}, {"uuid": "a8a17bb5-bead-4fcb-9aca-e8d15a2308d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-0751", "type": "seen", "source": "https://t.me/reverseame/415", "content": "Nice descriptions of CVE-2020-0751, CVE-2020-0890 and CVE-2020-0904 https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-002/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-003/ https://labs.bluefrostsecurity.de/advisories/bfs-sa-2020-001/", "creation_timestamp": "2026-07-29T12:03:04.181103Z"}, {"uuid": "36d1c028-7efc-49f7-9f52-d0f7d263371a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/49651", "content": "8.39\nruby-2.7 2.7.0\nglib-2.0 2.64.6\ngnome-system-tools 3.0.0\nxinerama 1.1.4\nnunit 2.6.3\ngmp 6.2.0\nlibevent 2.1.11-stable\nxbuild12 12.0\nxorg-sgml-doctools 1.11\npresentproto 1.2\ngdk-pixbuf-2.0 2.40.0\ninputproto 2.3.2\nlibssl 1.1.1f\nxcb-shm 1.14\ngdk-2.0 2.24.32\nlibpng16 1.6.37\nbigreqsproto 1.1.2\nicu-io 66.1\nxextproto 7.3.0\nlibthai 0.1.28\nlibbsd-overlay 0.10.0\nmount 2.34.0\ngio-2.0 2.64.6\nadwaita-icon-theme 3.36.1\nfontconfig 2.13.1\nxrandr 1.5.2\nmonosgen-2 6.8.0.105\nmono 6.8.0.105\nxf86dgaproto 2.1\ndri3proto 1.2\nlibpcre 8.39\npangoxft 1.44.7\nblkid 2.34.0\nlibsepol 3.0\nlibevent_openssl 2.1.11-stable\nuuid 2.34.0\ngmodule-2.0 2.64.6\ngraphite2 3.0.1\nlibfl 2.6.4\nzlib 1.2.11\ncairo-pdf 1.16.0\nruby 2.7.0\nAddressable is an alternative implementation to the URI implementation that is part of Ruby\u2019s standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2.8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-32740\n5.0 MEDIUM\nAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-10933\n5.0 MEDIUM\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\ncairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit\u2019s fastMalloc, leading to an application crash with a \u201cfree(): invalid pointer\u201d error.\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-19876\n4.3 MEDIUM\nxcb 1.14\nDirectory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application\u2019s unrestricted use of the render method and providing a .. (dot dot) in a pathname.\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-0752\n5.0 MEDIUM\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1.2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\nIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-15801\n7.5 HIGH\nIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue C[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:46.105002Z"}, {"uuid": "6fa554ef-3bd1-4c3c-afe7-f44d6603ba39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2   .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n  https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n  5.0 MEDIUM\n\n  An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n  5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n  cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa   tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n  https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n  4.3 MEDIUM\n\nxcb 1.14\n  Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n  https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n  5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1.   2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n  In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n  7.5 HIGH\n\n  In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n  6.9 MEDIUM\n\nxineramapro   to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n  nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n  https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n  6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:51.504577Z"}, {"uuid": "c4afbc21-8a01-432f-b978-deda787d15a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2   .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n  https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n  5.0 MEDIUM\n\n  An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n  5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n  cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa   tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n  https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n  4.3 MEDIUM\n\nxcb 1.14\n  Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n  https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n  5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1.   2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n  In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n  7.5 HIGH\n\n  In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n  6.9 MEDIUM\n\nxineramapro   to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n  nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n  https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n  6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:02:04.356410Z"}, {"uuid": "561c6786-dd92-40a1-a266-26e96c48632a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/49651", "content": "8.39\nruby-2.7 2.7.0\nglib-2.0 2.64.6\ngnome-system-tools 3.0.0\nxinerama 1.1.4\nnunit 2.6.3\ngmp 6.2.0\nlibevent 2.1.11-stable\nxbuild12 12.0\nxorg-sgml-doctools 1.11\npresentproto 1.2\ngdk-pixbuf-2.0 2.40.0\ninputproto 2.3.2\nlibssl 1.1.1f\nxcb-shm 1.14\ngdk-2.0 2.24.32\nlibpng16 1.6.37\nbigreqsproto 1.1.2\nicu-io 66.1\nxextproto 7.3.0\nlibthai 0.1.28\nlibbsd-overlay 0.10.0\nmount 2.34.0\ngio-2.0 2.64.6\nadwaita-icon-theme 3.36.1\nfontconfig 2.13.1\nxrandr 1.5.2\nmonosgen-2 6.8.0.105\nmono 6.8.0.105\nxf86dgaproto 2.1\ndri3proto 1.2\nlibpcre 8.39\npangoxft 1.44.7\nblkid 2.34.0\nlibsepol 3.0\nlibevent_openssl 2.1.11-stable\nuuid 2.34.0\ngmodule-2.0 2.64.6\ngraphite2 3.0.1\nlibfl 2.6.4\nzlib 1.2.11\ncairo-pdf 1.16.0\nruby 2.7.0\nAddressable is an alternative implementation to the URI implementation that is part of Ruby\u2019s standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2.8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-32740\n5.0 MEDIUM\nAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-10933\n5.0 MEDIUM\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\ncairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit\u2019s fastMalloc, leading to an application crash with a \u201cfree(): invalid pointer\u201d error.\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-19876\n4.3 MEDIUM\nxcb 1.14\nDirectory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application\u2019s unrestricted use of the render method and providing a .. (dot dot) in a pathname.\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-0752\n5.0 MEDIUM\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1.2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\nIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-15801\n7.5 HIGH\nIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue C[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:58.326432Z"}, {"uuid": "47d138b6-89e9-486b-896a-e80d20dd9d6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/49651", "content": "8.39\nruby-2.7 2.7.0\nglib-2.0 2.64.6\ngnome-system-tools 3.0.0\nxinerama 1.1.4\nnunit 2.6.3\ngmp 6.2.0\nlibevent 2.1.11-stable\nxbuild12 12.0\nxorg-sgml-doctools 1.11\npresentproto 1.2\ngdk-pixbuf-2.0 2.40.0\ninputproto 2.3.2\nlibssl 1.1.1f\nxcb-shm 1.14\ngdk-2.0 2.24.32\nlibpng16 1.6.37\nbigreqsproto 1.1.2\nicu-io 66.1\nxextproto 7.3.0\nlibthai 0.1.28\nlibbsd-overlay 0.10.0\nmount 2.34.0\ngio-2.0 2.64.6\nadwaita-icon-theme 3.36.1\nfontconfig 2.13.1\nxrandr 1.5.2\nmonosgen-2 6.8.0.105\nmono 6.8.0.105\nxf86dgaproto 2.1\ndri3proto 1.2\nlibpcre 8.39\npangoxft 1.44.7\nblkid 2.34.0\nlibsepol 3.0\nlibevent_openssl 2.1.11-stable\nuuid 2.34.0\ngmodule-2.0 2.64.6\ngraphite2 3.0.1\nlibfl 2.6.4\nzlib 1.2.11\ncairo-pdf 1.16.0\nruby 2.7.0\nAddressable is an alternative implementation to the URI implementation that is part of Ruby\u2019s standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2.8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\nhttps://nvd.nist.gov/vuln/detail/CVE-2021-32740\n5.0 MEDIUM\nAn issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-10933\n5.0 MEDIUM\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\ncairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompatible with WebKit\u2019s fastMalloc, leading to an application crash with a \u201cfree(): invalid pointer\u201d error.\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-19876\n4.3 MEDIUM\nxcb 1.14\nDirectory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application\u2019s unrestricted use of the render method and providing a .. (dot dot) in a pathname.\nhttps://nvd.nist.gov/vuln/detail/CVE-2016-0752\n5.0 MEDIUM\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1.2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\nIn Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\nhttps://nvd.nist.gov/vuln/detail/CVE-2020-15801\n7.5 HIGH\nIn Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue C[...]\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T01:00:04.443915Z"}, {"uuid": "9489bc51-13fb-41cc-9f33-907a5a9370b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2   .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n  https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n  5.0 MEDIUM\n\n  An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n  5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n  cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa   tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n  https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n  4.3 MEDIUM\n\nxcb 1.14\n  Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n  https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n  5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1.   2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n  In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n  7.5 HIGH\n\n  In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n  6.9 MEDIUM\n\nxineramapro   to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n  nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n  https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n  6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T05:00:06.722061Z"}, {"uuid": "1ea304ed-3728-46c8-96f2-5c4cb7f61142", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://t.me/hacking_Attack/45703", "content": "Addressable is an alternative implementation to the URI implementation that is part of Ruby's standard library. An uncontrolled resource consumption vulnerability exists after version 2.3.0 through version 2.7.0. Within the URI template implementation in Addressable, a maliciously crafted template may result in uncontrolled resource consumption, leading to denial of service when matched against a URI. In typical usage, templates would not normally be read from untrusted user input, but nonetheless, no previous security advisory for Addressable has cautioned against doing this. Users of the parsing capabilities in Addressable but not the URI template capabilities are unaffected. The vulnerability is patched in version 2   .8.0. As a workaround, only create Template objects from trusted sources that have been validated not to produce catastrophic backtracking.\n  https://nvd.nist.gov/vuln/detail/CVE-2021-32740\n  5.0 MEDIUM\n\n  An issue was discovered in Ruby 2.5.x through 2.5.7, 2.6.x through 2.6.5, and 2.7.0. If a victim calls BasicSocket#read_nonblock(requested_size, buffer, exception: false), the method resizes the buffer to fit the requested size, but no data is copied. Thus, the buffer string provides the previous value of the heap. This may expose possibly sensitive data from the interpreter.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-10933\n  5.0 MEDIUM\n\nlibevent_extra 2.1.11-stable\nsystem.web.mvc3 3.0.0.0\nlibstartup-notification-1.0 0.12\nmono-2 6.8.0.105\nmono-nunit 2.6.3\ngobject-2.0 2.64.6\nglproto 1.4.17\ncairo-ft 1.16.0\n  cairo 1.16.0, in cairo_ft_apply_variations() in cairo-ft-font.c, would free memory using a free function incompa   tible with WebKit's fastMalloc, leading to an application crash with a \"free(): invalid pointer\" error.\n  https://nvd.nist.gov/vuln/detail/CVE-2018-19876\n  4.3 MEDIUM\n\nxcb 1.14\n  Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.\n  https://nvd.nist.gov/vuln/detail/CVE-2016-0752\n  5.0 MEDIUM\n\nfribidi 1.0.8\nxtrans 1.4.0\ncairo-xlib-xrender 1.16.0\nmono-lineeditor 0.2.1\nxcmiscproto 1.2.2\ngmodule-no-export-2.0 2.64.6\ndri2proto 2.8\npython3-embed 3.8\nlibpcre32 8.39\nsystem.web.mvc2 2.0.0.0\ndotnet 6.8.0.105\niso-codes 4.4\nfontutil 1.3.1\nxbitmaps 1.1.1\nsystem.web.extensions_1.0 1.0.61025.0\nrecordproto 1.14.2\nresourceproto 1.   2.0\nmobile-broadband-provider-info 20190618\nvideoproto 2.3.3\nlibevent_core 2.1.11-stable\nfontsproto 2.1.3\nxsp-4 4.2\npython3 3.8\n  In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15801\n  7.5 HIGH\n\n  In Python 3.6 through 3.6.10, 3.7 through 3.7.8, 3.8 through 3.8.4rc1, and 3.9 through 3.9.0b4 on Windows, a Trojan horse python3.dll might be used in cases where CPython is embedded in a native application. This occurs because python3X.dll may use an invalid search path for python3.dll loading (after Py_SetPath has been used). NOTE: this issue CANNOT occur when using python.exe from a standard (non-embedded) Python installation on Windows.\n  https://nvd.nist.gov/vuln/detail/CVE-2020-15523\n  6.9 MEDIUM\n\nxineramapro   to 1.2.1\nxcb-render 1.14\nlibpcre2-32 10.34\nlibbsd-ctor 0.10.0\nlibbsd 0.10.0\n  nlist.c in libbsd before 0.10.0 has an out-of-bounds read during a comparison for a symbol name from the string table (strtab).\n  https://nvd.nist.gov/vuln/detail/CVE-2019-20367\n  6.4 MEDIUM\n\nxft 2.3.3\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:33.568415Z"}, {"uuid": "28f13540-1720-4d85-90d5-5da658619980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0757", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n          the user has installed Flash. No memory corruption is used.\\n\\n          First, a Flash object is cloned into the anonymous content of the SVG\\n          \\\"use\\\" element in the  (CVE-2013-0758). From there, the Flash object\\n          can navigate a child frame to a URL in the chrome:// scheme.\\n\\n          Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n          around the child frame's window reference and inject code into the chrome://\\n          context. Once we have injection into the chrome execution context, we can write\\n          the payload to disk, chmod it (if posix), and then execute.\\n\\n          Note: Flash is used here to trigger the exploit but any Firefox plugin\\n          with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.063849Z"}, {"uuid": "c8474859-627e-4fc2-bdf0-cf5af667d756", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0758", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/firefox_svg_plugin.rb", "content": "{\"aliases\": [], \"arch\": \"firefox, x86, x86_64, x64, mips, mipsle, mipsbe, mips64, mips64le, ppc, ppce500v2, ppc64, ppc64le, cbea, cbea64, sparc, sparc64, armle, armbe, aarch64, cmd, php, tty, java, ruby, dalvik, python, nodejs, zarch, r, riscv32be, riscv32le, riscv64be, riscv64le, loongarch64\", \"author\": [\"Marius Mlynski\", \"joev \", \"sinn3r \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This exploit gains remote code execution on Firefox 17 and 17.0.1, provided\\n          the user has installed Flash. No memory corruption is used.\\n\\n          First, a Flash object is cloned into the anonymous content of the SVG\\n          \\\"use\\\" element in the  (CVE-2013-0758). From there, the Flash object\\n          can navigate a child frame to a URL in the chrome:// scheme.\\n\\n          Then a separate exploit (CVE-2013-0757) is used to bypass the security wrapper\\n          around the child frame's window reference and inject code into the chrome://\\n          context. Once we have injection into the chrome execution context, we can write\\n          the payload to disk, chmod it (if posix), and then execute.\\n\\n          Note: Flash is used here to trigger the exploit but any Firefox plugin\\n          with script access should be able to trigger it.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/multi/browser/firefox_svg_plugin\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox 17.0.1 Flash Privileged Code Injection\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/firefox_svg_plugin.rb\", \"platform\": \"Firefox,Java,Linux,OSX,Solaris,Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/browser/firefox_svg_plugin\", \"references\": [\"CVE-2013-0758\", \"CVE-2013-0757\", \"OSVDB-89019\", \"OSVDB-89020\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-15.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=813906\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Universal (Javascript XPCOM Shell)\", \"Native Payload\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.137342Z"}, {"uuid": "d975203b-9ef1-4d3b-be9b-6b267a905a5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2016-0752", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"mr_me \", \"John Poulin (forced-request)\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a remote code execution vulnerability in the explicit render\\n          method when leveraging user parameters.\\n          This module has been tested across multiple versions of Ruby on Rails.\\n          The technique used by this module requires the specified\\n          endpoint to be using dynamic render paths, such as the following example:\\n\\n          def show\\n          render params[:id]\\n          end\\n\\n          Also, the vulnerable target will need a POST endpoint for the TempFile upload, this\\n          can literally be any endpoint. This module doesnt use the log inclusion method of\\n          exploitation due to it not being universal enough. Instead, a new code injection\\n          technique was found and used whereby an attacker can upload temporary image files\\n          against any POST endpoint and use them for the inclusion attack. Finally, you only\\n          get one shot at this if you are testing with the builtin rails server, use caution.\", \"disclosure_date\": \"2016-10-16\", \"fullname\": \"exploit/multi/http/rails_dynamic_render_code_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-02 17:30:43 +0000\", \"name\": \"Ruby on Rails Dynamic Render File Upload Remote Code Execution\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/http/rails_dynamic_render_code_exec.rb\", \"platform\": \"BSD,Linux\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"multi/http/rails_dynamic_render_code_exec\", \"references\": [\"CVE-2016-0752\", \"URL-https://groups.google.com/forum/#!topic/rubyonrails-security/335P1DcLG00\", \"URL-https://nvisium.com/blog/2016/01/26/rails-dynamic-render-to-rce-cve-2016-0752/\", \"URL-https://gist.github.com/forced-request/5158759a6418e6376afb\"], \"rport\": 3000, \"session_types\": false, \"targets\": [\"Ruby on Rails 4.0.8 July 2, 2014\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:10.544471Z"}, {"uuid": "4a7df85c-a4ac-400d-be30-03c810f21a5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/adobe_flash_mp4_cprt.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"Alexander Gavrun\", \"sinn3r \", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Adobe Flash\\n          Player.  By supplying a corrupt .mp4 file loaded by Flash, it\\n          is possible to gain arbitrary remote code execution under the\\n          context of the user.\\n\\n          This vulnerability has been exploited in the wild as part of\\n          the \\\"Iran's Oil and Nuclear Situation.doc\\\" e-mail attack.\\n          According to the advisory, 10.3.183.15 and 11.x before\\n          11.1.102.62 are affected.\", \"disclosure_date\": \"2012-02-15\", \"fullname\": \"exploit/windows/browser/adobe_flash_mp4_cprt\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Adobe Flash Player MP4 'cprt' Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/adobe_flash_mp4_cprt.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/adobe_flash_mp4_cprt\", \"references\": [\"CVE-2012-0754\", \"OSVDB-79300\", \"BID-52034\", \"URL-http://contagiodump.blogspot.com/2012/03/mar-2-cve-2012-0754-irans-oil-and.html\", \"URL-http://www.adobe.com/support/security/bulletins/apsb12-03.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\", \"IE 6 on Windows XP SP3\", \"IE 7 on Windows XP SP3\", \"IE 8 on Windows XP SP3 with msvcrt ROP\", \"IE 8 on Windows XP SP3 with JRE ROP\", \"IE 7 on Windows Vista\", \"IE 8 on Windows 7 SP1\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:57.433025Z"}, {"uuid": "4fa9160e-7b63-4694-903e-f559fb11c226", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-0753", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"regenrecht\", \"juan vazquez \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found on Firefox 17.0 (< 17.0.2), specifically\\n          a use-after-free of an Element object, when using the serializeToStream method\\n          with a specially crafted OutputStream defining its own write function. This module\\n          has been tested successfully with Firefox 17.0.1 ESR, 17.0.1 and 17.0 on Windows XP\\n          SP3.\", \"disclosure_date\": \"2013-01-08\", \"fullname\": \"exploit/windows/browser/mozilla_firefox_xmlserializer\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"Firefox XMLSerializer Use After Free\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/mozilla_firefox_xmlserializer.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/mozilla_firefox_xmlserializer\", \"references\": [\"CVE-2013-0753\", \"OSVDB-89021\", \"BID-57209\", \"ZDI-13-006\", \"URL-http://www.mozilla.org/security/announce/2013/mfsa2013-16.html\", \"URL-https://bugzilla.mozilla.org/show_bug.cgi?id=814001\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Firefox 17  / Windows XP SP3\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:06.843717Z"}, {"uuid": "cc17b3a8-70fb-46a6-ac0f-ebf34e9b0e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2014-0750", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/ge_proficy_cimplicity_gefebt.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"amisto0x07\", \"Z0mb1E\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module abuses the gefebt.exe component in GE Proficy CIMPLICITY, reachable through the\\n        CIMPLICIY CimWebServer. The vulnerable component allows to execute remote BCL files in\\n        shared resources. An attacker can abuse this behavior to execute a malicious BCL and\\n        drop an arbitrary EXE. The last one can be executed remotely through the WebView server.\\n        This module has been tested successfully in GE Proficy CIMPLICITY 7.5 with the embedded\\n        CimWebServer. This module starts a WebDAV server to provide the malicious BCL files. If\\n        the target does not have the WebClient service enabled, an external SMB service is necessary.\", \"disclosure_date\": \"2014-01-23\", \"fullname\": \"exploit/windows/scada/ge_proficy_cimplicity_gefebt\", \"is_install_path\": true, \"mod_time\": \"2026-06-17 11:11:50 +0000\", \"name\": \"GE Proficy CIMPLICITY gefebt.exe Remote Code Execution\", \"needs_cleanup\": null, \"notes\": {}, \"path\": \"/modules/exploits/windows/scada/ge_proficy_cimplicity_gefebt.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"windows/scada/ge_proficy_cimplicity_gefebt\", \"references\": [\"CVE-2014-0750\", \"ZDI-14-015\", \"URL-http://ics-cert.us-cert.gov/advisories/ICSA-14-023-01\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"GE Proficy CIMPLICITY 7.5 (embedded CimWebServer)\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:52:28.582028Z"}, {"uuid": "6b345ed8-dea0-4122-9400-e690771e1809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "seen", "source": "Telegram/kfD60J2UFpQrUT2d1fHwZFZR0EOgcWXJFI_DVICUAmaNmlo", "content": "", "creation_timestamp": "2026-09-14T03:00:07.986254Z"}, {"uuid": "93c59a11-63d9-4f70-984e-8357a45545ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2012-0754", "type": "published-proof-of-concept", "source": "Telegram/kfD60J2UFpQrUT2d1fHwZFZR0EOgcWXJFI_DVICUAmaNmlo", "content": "", "creation_timestamp": "2026-09-15T00:00:26.567252Z"}]}