{"vulnerability": "2025-03", "sightings": [{"uuid": "73fa4d6e-17c3-4408-b721-0f10eee1cfff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0341", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcaha4b632f", "content": "", "creation_timestamp": "2025-01-09T08:17:04.383584Z"}, {"uuid": "dfb1ee25-8d98-4ccd-9d3f-373224d64c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0342", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcahcpbgq25", "content": "", "creation_timestamp": "2025-01-09T08:17:06.625166Z"}, {"uuid": "1e8705f8-71ab-4a3a-8921-ed85e471c8fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0344", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797587025773897", "content": "", "creation_timestamp": "2025-01-09T09:02:56.760727Z"}, {"uuid": "8fa6201d-0d34-4ad8-b343-bb85b2e8bbb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0346", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797613256091851", "content": "", "creation_timestamp": "2025-01-09T09:09:37.043112Z"}, {"uuid": "c091a109-e557-42e1-8be9-b3043fdfe43f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0300", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf65nnpwo52e", "content": "", "creation_timestamp": "2025-01-07T17:16:19.426588Z"}, {"uuid": "968d762f-13b9-4bf2-b499-f0803788e930", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0311", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfepd2hvac2g", "content": "", "creation_timestamp": "2025-01-10T07:48:29.468879Z"}, {"uuid": "52b80057-df94-4615-9162-81e78ed22f4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0345", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpuwlyl25", "content": "", "creation_timestamp": "2025-01-09T09:15:35.468908Z"}, {"uuid": "d68c75d8-cdf0-4cc1-8bd9-259a518a59f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0346", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcdpxrlu32k", "content": "", "creation_timestamp": "2025-01-09T09:15:38.376630Z"}, {"uuid": "6f77141c-5eb0-461b-8b9c-b5eac4421718", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0367", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113833553274440059", "content": "", "creation_timestamp": "2025-01-15T17:29:38.289480Z"}, {"uuid": "5f4d60e4-931e-46ac-86f7-d787d92dea98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0393", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfow2wbmrt2n", "content": "", "creation_timestamp": "2025-01-14T09:15:50.100130Z"}, {"uuid": "7c9fcf73-5487-4063-ae1e-31ce39071669", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0347", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797720116449785", "content": "", "creation_timestamp": "2025-01-09T09:36:47.546828Z"}, {"uuid": "02c7d595-090e-4016-bc80-01cd54626595", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0394", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfow2ymxqe2c", "content": "", "creation_timestamp": "2025-01-14T09:15:52.604228Z"}, {"uuid": "7dfb2fce-1dc7-49f5-b69c-d7048d33f59c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoxubmorg2k", "content": "", "creation_timestamp": "2025-01-14T09:47:54.778086Z"}, {"uuid": "3b1715cc-3715-4033-8420-8686170c1f3c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0348", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797818880146120", "content": "", "creation_timestamp": "2025-01-09T10:01:54.651400Z"}, {"uuid": "c0935212-ee73-42de-9de7-9f88a4e702c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0394", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoxuc2lc52q", "content": "", "creation_timestamp": "2025-01-14T09:47:55.942898Z"}, {"uuid": "f112f82b-3af6-4452-ba6d-12610ba874bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0393", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfoxuchmr72k", "content": "", "creation_timestamp": "2025-01-14T09:47:56.883021Z"}, {"uuid": "aa5cd2aa-c8cf-4d11-b134-a7a457eceb12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0347", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfch3hazwg2f", "content": "", "creation_timestamp": "2025-01-09T10:15:44.901340Z"}, {"uuid": "28deefb1-f102-4852-b90e-47da57bbf7cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0348", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfch3jeudu25", "content": "", "creation_timestamp": "2025-01-09T10:15:47.245308Z"}, {"uuid": "288c54f3-1570-429f-80a4-e5065dfd65b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0394", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113826078033467289", "content": "", "creation_timestamp": "2025-01-14T09:48:35.348255Z"}, {"uuid": "9431939a-8bf9-42f0-ae84-b7ba174fd009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0349", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797972525891234", "content": "", "creation_timestamp": "2025-01-09T10:40:59.163027Z"}, {"uuid": "010d77a1-f274-4e93-bf62-9f3cb96a4341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0306", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796449520188963", "content": "", "creation_timestamp": "2025-01-09T04:13:39.826001Z"}, {"uuid": "e1259595-f1bd-4f65-b989-127c1b6bd0fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0348", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcivioz6h2y", "content": "", "creation_timestamp": "2025-01-09T10:48:12.832330Z"}, {"uuid": "cce19ef8-bb52-4ddf-b8df-d6c27c26fa14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0347", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfcivj4gvx2e", "content": "", "creation_timestamp": "2025-01-09T10:48:13.514589Z"}, {"uuid": "5b58eb0e-7531-431f-97bb-164920db60f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0301", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113788379931187161", "content": "", "creation_timestamp": "2025-01-07T18:01:27.596998Z"}, {"uuid": "ba8db3f1-f696-4ffa-8f19-16236a027f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0306", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbsxybuwd2f", "content": "", "creation_timestamp": "2025-01-09T04:15:53.852981Z"}, {"uuid": "8dbf5b1c-50c0-404e-b935-b5fdda743441", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0328", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796535156197739", "content": "", "creation_timestamp": "2025-01-09T04:35:26.565342Z"}, {"uuid": "a62c9af8-eb43-428e-b98c-c73bcd8359c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0331", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796535170832587", "content": "", "creation_timestamp": "2025-01-09T04:35:26.690495Z"}, {"uuid": "81c6bdd5-a8f3-4268-85bc-751a4d82ed8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0393", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825764284829859", "content": "", "creation_timestamp": "2025-01-14T08:28:47.539049Z"}, {"uuid": "9c675426-1dae-4a81-9072-e0183a2dc786", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0394", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113825764299839192", "content": "", "creation_timestamp": "2025-01-14T08:28:47.742774Z"}, {"uuid": "bf623273-df92-4565-bab8-ad9cc17c45d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0306", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbuawpptc2y", "content": "", "creation_timestamp": "2025-01-09T04:38:48.801924Z"}, {"uuid": "74cf0917-5fd3-4ff1-84cd-e2bdb5f5dce8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0349", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfckiecviv2x", "content": "", "creation_timestamp": "2025-01-09T11:16:39.279549Z"}, {"uuid": "f14abfd1-551b-4033-b17d-94898b8811ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0333", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796638129849777", "content": "", "creation_timestamp": "2025-01-09T05:01:37.760482Z"}, {"uuid": "75508b96-d375-46c3-ac9b-ee7eb8e37d28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0328", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbwcpccbs2f", "content": "", "creation_timestamp": "2025-01-09T05:15:34.954706Z"}, {"uuid": "8f27dd86-0714-4cc1-9e13-de4df1d2eb7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0331", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbwcrmoye27", "content": "", "creation_timestamp": "2025-01-09T05:15:37.965159Z"}, {"uuid": "1593da65-46ad-4017-9477-bb49842221b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0333", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbwcujhoz2i", "content": "", "creation_timestamp": "2025-01-09T05:15:40.270077Z"}, {"uuid": "6ae29bd8-10d6-4735-855b-11b8ed4e8737", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0301", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lf6aysteiz2f", "content": "", "creation_timestamp": "2025-01-07T18:16:15.134321Z"}, {"uuid": "3e12ecff-57cc-440b-aecc-3b41f48b7b00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0333", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbxvccdpp2g", "content": "", "creation_timestamp": "2025-01-09T05:43:52.508684Z"}, {"uuid": "d12c259d-f821-40a7-9fce-ea46c07943c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0331", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbxvcxjzm2e", "content": "", "creation_timestamp": "2025-01-09T05:43:53.408089Z"}, {"uuid": "6b1c73d1-c8dc-4e65-9333-ba00dfc14e24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0301", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lf6credlc62y", "content": "", "creation_timestamp": "2025-01-07T18:47:57.423542Z"}, {"uuid": "2f816c0b-fdf5-45c4-9aef-3ca5835b4178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0328", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfbxvd37ky2r", "content": "", "creation_timestamp": "2025-01-09T05:43:53.977756Z"}, {"uuid": "6d1a87bf-e65d-4bcb-9ec0-c40873a6b1fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0390", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhbdrigop2e", "content": "", "creation_timestamp": "2025-01-11T08:16:21.255873Z"}, {"uuid": "0aecd63d-8f2d-48e6-bcfb-084cdb8772be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0349", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113798238061911257", "content": "", "creation_timestamp": "2025-01-09T11:48:31.571196Z"}, {"uuid": "7a3851e5-6915-4737-b00a-a0881e1fbf61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0335", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzovupcz2f", "content": "", "creation_timestamp": "2025-01-09T06:16:05.658878Z"}, {"uuid": "396053e9-2895-496e-9c16-a09b1d053a80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0390", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhd6c2dwj2g", "content": "", "creation_timestamp": "2025-01-11T08:49:06.047318Z"}, {"uuid": "cf61e3ae-e80a-4fa7-adbf-1c30fc1e1f2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0334", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfbzotlliv2x", "content": "", "creation_timestamp": "2025-01-09T06:16:02.983246Z"}, {"uuid": "3041dd30-56e1-497a-b000-c23ad540f8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0334", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796932506770390", "content": "", "creation_timestamp": "2025-01-09T06:16:29.706378Z"}, {"uuid": "08fd504c-4db8-457a-8371-8de17dc08b17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0335", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113796932520797035", "content": "", "creation_timestamp": "2025-01-09T06:16:30.043221Z"}, {"uuid": "becbba6f-3c17-4da3-b7ce-bf3c3e8a65ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0391", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113808935430961160", "content": "", "creation_timestamp": "2025-01-11T09:08:59.733218Z"}, {"uuid": "d97f0c96-2482-413e-b105-e93149be482d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0391", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhencjcme27", "content": "", "creation_timestamp": "2025-01-11T09:15:21.739668Z"}, {"uuid": "a7fbf52a-58a3-4a2b-9c20-33477246b0fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0391", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhgjnjfak2e", "content": "", "creation_timestamp": "2025-01-11T09:49:06.553490Z"}, {"uuid": "6f6c688b-bf40-4ada-9283-9a60e926a9fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0396", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113815276779820224", "content": "", "creation_timestamp": "2025-01-12T12:01:40.966427Z"}, {"uuid": "41509fd2-71f3-41ac-89a1-6cb8bd78414d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0311", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113802711975926925", "content": "", "creation_timestamp": "2025-01-10T06:46:17.463816Z"}, {"uuid": "5e0b579d-6b25-488f-8cb0-2ce2b02316da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0392", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113809386627182709", "content": "", "creation_timestamp": "2025-01-11T11:03:44.346769Z"}, {"uuid": "cbd3e20f-0204-4220-9427-bd5104d08113", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0396", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfk76evnak2b", "content": "", "creation_timestamp": "2025-01-12T12:15:31.714331Z"}, {"uuid": "56800e9f-2111-4570-9d6f-fc9225799ccd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0336", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797009226742454", "content": "", "creation_timestamp": "2025-01-09T06:36:00.428042Z"}, {"uuid": "1e8cec2a-f054-41ba-9bbf-9d355b487619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0397", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113815438301071366", "content": "", "creation_timestamp": "2025-01-12T12:42:45.652952Z"}, {"uuid": "61443c53-dd24-410d-9b62-026adefcc264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0311", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfenhyce6m2m", "content": "", "creation_timestamp": "2025-01-10T07:15:27.742700Z"}, {"uuid": "6fc25cf5-15b3-436c-bd17-0661be9fb4f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0392", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfhldybw7n2l", "content": "", "creation_timestamp": "2025-01-11T11:15:24.928806Z"}, {"uuid": "a6d6f75b-160d-4a5d-9378-40362c10af86", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0396", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfkbbi3lbb2r", "content": "", "creation_timestamp": "2025-01-12T12:53:02.787326Z"}, {"uuid": "6fe224ce-c56a-4abe-a177-ae8378fd5373", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0392", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfhnjgzhaf2q", "content": "", "creation_timestamp": "2025-01-11T11:54:15.835041Z"}, {"uuid": "c5bc29ae-1b94-4f4f-8a77-d190d77977db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0397", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfkcjhpi4u2s", "content": "", "creation_timestamp": "2025-01-12T13:15:24.768202Z"}, {"uuid": "715a03f4-86bd-4d5d-9604-1b343aca7810", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0354", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831178772809715", "content": "", "creation_timestamp": "2025-01-15T07:25:46.233478Z"}, {"uuid": "0d7752f4-a8d5-482f-867d-630f747222d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0355", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831178793045522", "content": "", "creation_timestamp": "2025-01-15T07:25:46.508029Z"}, {"uuid": "444f05ef-262b-4f92-9e21-ce55f3780379", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0397", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfkel3zeqq2q", "content": "", "creation_timestamp": "2025-01-12T13:52:06.991422Z"}, {"uuid": "87a36fe0-dff7-48d8-8cab-48a8caddb515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0356", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113831200743000538", "content": "", "creation_timestamp": "2025-01-15T07:31:21.391260Z"}, {"uuid": "5b01f77a-02ec-4515-963d-b09eb09714ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0398", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113815750413945974", "content": "", "creation_timestamp": "2025-01-12T14:02:08.211629Z"}, {"uuid": "275ea40a-cffd-4c1d-9881-98fef91e3cc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0335", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfc3aqfffw2k", "content": "", "creation_timestamp": "2025-01-09T06:43:59.129442Z"}, {"uuid": "45b0101c-b912-4077-9037-0bc1c4fa3091", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0398", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfkfuxmupu2h", "content": "", "creation_timestamp": "2025-01-12T14:15:31.328641Z"}, {"uuid": "146f4c43-c73f-4d6a-bbba-569a96ce203e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0398", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfki7gmbvd25", "content": "", "creation_timestamp": "2025-01-12T14:57:10.513266Z"}, {"uuid": "09b24321-c561-4cef-a569-e91088f3bb99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0354", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrd6jahcx2t", "content": "", "creation_timestamp": "2025-01-15T08:15:49.598234Z"}, {"uuid": "dbadcfd0-322a-4344-9558-d8a8db37c148", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0355", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrd6m6zeo2e", "content": "", "creation_timestamp": "2025-01-15T08:15:51.832282Z"}, {"uuid": "0d8e5944-ea51-4a6b-a6ba-8cf73eb026ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0356", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrd6xedun2r", "content": "", "creation_timestamp": "2025-01-15T08:16:03.876661Z"}, {"uuid": "5014b4b3-b3fb-4abd-99fd-f918f746ca42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0339", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc52e66wo2l", "content": "", "creation_timestamp": "2025-01-09T07:16:10.816177Z"}, {"uuid": "c6275715-e193-4091-a4b6-008ce57f13e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0336", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc52bplxf2e", "content": "", "creation_timestamp": "2025-01-09T07:16:08.033432Z"}, {"uuid": "7c476a3d-3dd8-414d-9173-9791a1fe3d8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0340", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfc52gvorg25", "content": "", "creation_timestamp": "2025-01-09T07:16:13.756390Z"}, {"uuid": "3ef12833-29c9-4b33-b24d-5e29deb9d5df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0356", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfreyw3nrc2w", "content": "", "creation_timestamp": "2025-01-15T08:48:28.592420Z"}, {"uuid": "fc8f6adc-8474-414e-ae6b-5bfc43a047fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfreyw735c2w", "content": "", "creation_timestamp": "2025-01-15T08:48:29.112591Z"}, {"uuid": "9734563e-5773-455c-914e-2411bd5bf653", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0355", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfreywtsvj2k", "content": "", "creation_timestamp": "2025-01-15T08:48:30.742017Z"}, {"uuid": "7cadea3b-9302-49d4-8dcc-dab8b9f788c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0341", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797231398418336", "content": "", "creation_timestamp": "2025-01-09T07:32:30.410915Z"}, {"uuid": "aa26674d-8df2-4e98-a1ca-3bb3ac05303d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0342", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113797290395254250", "content": "", "creation_timestamp": "2025-01-09T07:47:30.455924Z"}, {"uuid": "eaf572f0-5567-4e04-bf84-afacb5d63372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0399", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113817898441615466", "content": "", "creation_timestamp": "2025-01-12T23:08:24.298393Z"}, {"uuid": "b06567a5-6387-41a5-8906-e3fbdac3b4f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0399", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfle2652sr2e", "content": "", "creation_timestamp": "2025-01-12T23:15:18.376917Z"}, {"uuid": "623fad67-a7cd-4ef9-839a-0de01154aa53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0399", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lflfcaxawn2q", "content": "", "creation_timestamp": "2025-01-12T23:37:43.864663Z"}, {"uuid": "bf2a1460-6305-474d-8d3b-13010633cb10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0344", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcahf27dh2l", "content": "", "creation_timestamp": "2025-01-09T08:17:09.161195Z"}, {"uuid": "453d46f7-0103-4e1b-b9ef-d8e7e7431e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0371", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113865413956449112", "content": "", "creation_timestamp": "2025-01-21T08:32:13.647423Z"}, {"uuid": "cebaae54-17bc-4b40-9960-102d4e169350", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0371", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgaokl77nz2u", "content": "", "creation_timestamp": "2025-01-21T10:49:20.789190Z"}, {"uuid": "ddfc450e-28b5-42d9-bec9-79fc9b08a39f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0371", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgajdqll5t2w", "content": "", "creation_timestamp": "2025-01-21T09:16:02.807347Z"}, {"uuid": "601beea8-df5a-4174-aaa6-06d4d2603aa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0308", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113847749169131968", "content": "", "creation_timestamp": "2025-01-18T05:39:50.504477Z"}, {"uuid": "1df76d79-384d-4443-92d3-474343f235d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0318", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113847749202003270", "content": "", "creation_timestamp": "2025-01-18T05:39:50.716149Z"}, {"uuid": "6da5b8e6-3664-4b62-bcf6-cba50ce8d326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0308", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfynuqeajw2j", "content": "", "creation_timestamp": "2025-01-18T06:15:50.206203Z"}, {"uuid": "a9cdd82c-d531-48ef-98cc-282ec890986a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0318", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfynusxtdz2t", "content": "", "creation_timestamp": "2025-01-18T06:15:52.623480Z"}, {"uuid": "da5dfe22-5f58-4f6b-9af5-8660898a7bc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0318", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyovlb4s22w", "content": "", "creation_timestamp": "2025-01-18T06:34:12.638858Z"}, {"uuid": "715acb1e-d545-48b8-81f3-b0d9c3b74c6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0308", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfyovlen4k2e", "content": "", "creation_timestamp": "2025-01-18T06:34:13.198062Z"}, {"uuid": "020786fc-d06a-4a57-96a8-17c892b00f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0369", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lfyrbsicev2p", "content": "", "creation_timestamp": "2025-01-18T07:16:49.706612Z"}, {"uuid": "dd0d99dd-e102-473a-95a7-f4381e27a3ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0369", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113848216461618169", "content": "", "creation_timestamp": "2025-01-18T07:38:40.923173Z"}, {"uuid": "305a71d4-1aa9-4549-9b42-f1d383c68589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0369", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lfysjwk6mp2u", "content": "", "creation_timestamp": "2025-01-18T07:39:17.377190Z"}, {"uuid": "457dbdc4-efc3-4721-85af-4a929b943f33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0367", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lg5fr6nlk22x", "content": "", "creation_timestamp": "2025-01-20T03:34:00.901626Z"}, {"uuid": "47f9c4c6-1449-4139-bcf6-931f1d755824", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhenzxr6ut2f", "content": "", "creation_timestamp": "2025-02-04T18:15:54.234920Z"}, {"uuid": "d45aaf58-6b9b-4355-a130-2808e27af80a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0377", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113867041464527765", "content": "", "creation_timestamp": "2025-01-21T15:26:07.406751Z"}, {"uuid": "93e9611e-b554-4298-9c74-72a680a59432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0377", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbasqustp2s", "content": "", "creation_timestamp": "2025-01-21T16:16:02.477544Z"}, {"uuid": "09f17ce9-c7f2-4506-8e81-1d9a0f740c8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0377", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgbcotp7ll2r", "content": "", "creation_timestamp": "2025-01-21T16:49:40.735799Z"}, {"uuid": "d3da4d60-b539-4040-88f7-96088b4dbc4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113947109434612799", "content": "", "creation_timestamp": "2025-02-04T18:48:30.618039Z"}, {"uuid": "a2c75f84-74ba-4766-8c7f-36a75185abdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0365", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ug4gvpy2b", "content": "", "creation_timestamp": "2025-02-01T06:16:06.566975Z"}, {"uuid": "ff6b9f4a-199d-4a8e-8b9e-34b6ecdb1616", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lh3ug6qysy2b", "content": "", "creation_timestamp": "2025-02-01T06:16:09.050134Z"}, {"uuid": "5eeeed50-0a54-487d-b34b-1b1200b75d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0350", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113888285769304041", "content": "", "creation_timestamp": "2025-01-25T09:28:49.659428Z"}, {"uuid": "48a860bf-7571-499b-a581-16854c8a627f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0365", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4avj4c2q", "content": "", "creation_timestamp": "2025-02-01T07:40:05.929302Z"}, {"uuid": "f98a3aa8-ee48-4794-8c09-5be5a4f96432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0353", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113911371467252037", "content": "", "creation_timestamp": "2025-01-29T11:19:49.639895Z"}, {"uuid": "143e0f1a-e184-42bf-bcb9-601007281342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lh3z4c6or42e", "content": "", "creation_timestamp": "2025-02-01T07:40:11.604183Z"}, {"uuid": "f8ec9bf8-954a-438c-aa64-78e915a75e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0353", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgux55gapb2c", "content": "", "creation_timestamp": "2025-01-29T12:16:08.434049Z"}, {"uuid": "83d37e4d-34d9-44b8-8606-6bd8451a7c98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113881031456251015", "content": "", "creation_timestamp": "2025-01-24T02:43:57.704682Z"}, {"uuid": "5ae99354-f1aa-4dc3-b61c-4c2e5a6c3f61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113881285473874721", "content": "", "creation_timestamp": "2025-01-24T03:48:34.108096Z"}, {"uuid": "09c0e8f0-ceaf-430d-8b6a-e476dc4f2cd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113927762731844094", "content": "", "creation_timestamp": "2025-02-01T08:48:20.949081Z"}, {"uuid": "6071bbdb-bb48-4419-abb0-5dd9feff3e42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0367", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113918393771041512", "content": "", "creation_timestamp": "2025-01-30T17:05:41.351077Z"}, {"uuid": "ad368085-dfb4-4a5e-bee2-d59de3a6da9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0367", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgxydsrv432f", "content": "", "creation_timestamp": "2025-01-30T17:15:45.156897Z"}, {"uuid": "4d47cd07-24f0-4333-a329-a5ca5c391af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0374", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915508996299611", "content": "", "creation_timestamp": "2025-01-30T04:52:04.942916Z"}, {"uuid": "da479405-9168-4a85-a8e8-c2f8685620af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0373", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113915508979229674", "content": "", "creation_timestamp": "2025-01-30T04:52:05.045989Z"}, {"uuid": "6e790c9d-2330-49bf-bb0f-daabe5ad89b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0373", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwq42tm5k2c", "content": "", "creation_timestamp": "2025-01-30T05:15:35.769248Z"}, {"uuid": "75f9d859-d8f8-40be-8c5e-83326bda9cfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0374", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgwq454kn42p", "content": "", "creation_timestamp": "2025-01-30T05:15:37.871242Z"}, {"uuid": "7d685e3f-258e-45e9-a292-6c85fe306f44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3lgfurps5rg2x", "content": "", "creation_timestamp": "2025-01-23T12:24:02.199478Z"}, {"uuid": "673eedc9-4048-4865-9fec-84b27a2d1c90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0353", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgvb4d7bok2e", "content": "", "creation_timestamp": "2025-01-29T15:14:39.446589Z"}, {"uuid": "bd508923-9c91-43d8-8318-a07589420b05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgfvmcjfig2t", "content": "", "creation_timestamp": "2025-01-23T12:38:53.691985Z"}, {"uuid": "10a06fca-bb70-450e-97b3-fb20c499ddf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0368", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhdt4c3iyv2k", "content": "", "creation_timestamp": "2025-02-04T10:14:02.565074Z"}, {"uuid": "22169c5e-5140-4633-ae47-796496ba4601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3lgfytzmoa22v", "content": "", "creation_timestamp": "2025-01-23T13:36:57.920703Z"}, {"uuid": "6d4c65b3-2efe-4511-8e99-9dc0cfe86328", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lgqrstgrnr2s", "content": "", "creation_timestamp": "2025-01-27T20:30:15.617765Z"}, {"uuid": "c330e7c2-31d4-4fea-b618-e209b162b99f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0321", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113904796379107807", "content": "", "creation_timestamp": "2025-01-28T07:27:41.853651Z"}, {"uuid": "3364eab0-fdb8-4ccb-b084-c81aff9ed153", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhf2r4brz32v", "content": "", "creation_timestamp": "2025-02-04T22:03:35.994917Z"}, {"uuid": "41cac3b5-0aa2-4924-99c5-ce79db9ca1c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0321", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgrzawmqdn2e", "content": "", "creation_timestamp": "2025-01-28T08:16:03.950997Z"}, {"uuid": "b3b356b8-e872-40af-b52f-df0b21727390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhgschd7u72w", "content": "", "creation_timestamp": "2025-02-05T14:37:36.731857Z"}, {"uuid": "1d260993-bea9-45a4-9e85-19a1c203c2ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0302", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113961887520571027", "content": "", "creation_timestamp": "2025-02-07T09:26:43.373169Z"}, {"uuid": "41cb949d-4abd-4ec3-90d5-1bd7026cc49b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0303", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113961887535062177", "content": "", "creation_timestamp": "2025-02-07T09:26:43.604648Z"}, {"uuid": "01a46202-02ba-49c9-84ff-2a4e4f5c910a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0304", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113961887579406487", "content": "", "creation_timestamp": "2025-02-07T09:26:44.247829Z"}, {"uuid": "0cb4b031-f921-4a20-8aa6-da624a8df0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0302", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelnsmti27", "content": "", "creation_timestamp": "2025-02-07T10:15:28.387083Z"}, {"uuid": "5d0f3f4d-da69-47ee-b1b1-f66e507688de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0303", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelptxoh2d", "content": "", "creation_timestamp": "2025-02-07T10:15:30.465579Z"}, {"uuid": "e97ac61c-e657-467d-abec-0fdd3ac75d16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0304", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhlelrwasg26", "content": "", "creation_timestamp": "2025-02-07T10:15:32.588188Z"}, {"uuid": "a136fbcc-8553-43f7-86df-ea78e5463ab2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0303", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113962208183355729", "content": "", "creation_timestamp": "2025-02-07T10:48:16.565190Z"}, {"uuid": "cc0318fc-28e5-4412-8a76-01480fadb06b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0321", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgsjg5vj3s2e", "content": "", "creation_timestamp": "2025-01-28T13:05:24.209987Z"}, {"uuid": "191b58f0-12a1-468a-a76e-b2832d9d43aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0304", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113962208216825500", "content": "", "creation_timestamp": "2025-02-07T10:48:17.658663Z"}, {"uuid": "6382b3ea-6d82-47d4-90cc-336ac553f07a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0368", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhdftamho32t", "content": "", "creation_timestamp": "2025-02-04T06:16:18.804165Z"}, {"uuid": "60eac51a-ba0c-4791-bef9-1bc0e1981a8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0368", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113944257756437427", "content": "", "creation_timestamp": "2025-02-04T06:43:14.547121Z"}, {"uuid": "edd18a9f-b3a0-43ab-bf32-1f22ecf34d40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0357", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113886520322110551", "content": "", "creation_timestamp": "2025-01-25T01:59:51.833691Z"}, {"uuid": "bfb0a921-d7a8-49e4-9ea3-0a3f27cc5571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdh7aw6jy2f", "content": "", "creation_timestamp": "2025-01-22T13:15:43.860454Z"}, {"uuid": "54029f43-3637-44f2-bb3a-5f05557419c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lgdj3wz7dp2e", "content": "", "creation_timestamp": "2025-01-22T13:49:40.269477Z"}, {"uuid": "84919cd1-4157-42e9-a6ee-ffc9c729266b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/andersonc0d3.bsky.social/post/3lgdj4f7vlk2o", "content": "", "creation_timestamp": "2025-01-22T13:49:56.261806Z"}, {"uuid": "89b9bb2a-b343-4c86-9706-09f56644eb64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lgdjt6h7xu23", "content": "", "creation_timestamp": "2025-01-22T14:02:39.689817Z"}, {"uuid": "82b28b30-9714-46d0-a28e-04e856c1fe3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0357", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113887183996425724", "content": "", "creation_timestamp": "2025-01-25T04:48:38.233676Z"}, {"uuid": "5f6fbd59-a507-4f8a-8033-eeea604ca7de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://infosec.exchange/users/screaminggoat/statuses/113872954267513452", "content": "", "creation_timestamp": "2025-01-22T16:29:49.992750Z"}, {"uuid": "c6a26f7c-c9cd-422d-9912-14a35b96acbf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113946906751178412", "content": "", "creation_timestamp": "2025-02-04T17:56:54.927740Z"}, {"uuid": "c4db6a13-84ec-4f0d-b7a7-56af52928ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113970378500623801", "content": "", "creation_timestamp": "2025-02-08T21:26:05.446756Z"}, {"uuid": "4c818da1-eb51-4b0f-ab12-aa9fdc5e8574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhp5cry5oi2i", "content": "", "creation_timestamp": "2025-02-08T22:15:53.456319Z"}, {"uuid": "08f61d5b-ea31-45b2-a7ef-b569575f449c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhp6een5hp2a", "content": "", "creation_timestamp": "2025-02-08T22:34:40.507605Z"}, {"uuid": "988fc163-c086-4f85-9117-e4b9bb63f21b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113970701510444845", "content": "", "creation_timestamp": "2025-02-08T22:48:14.834346Z"}, {"uuid": "98c5d461-c51d-43a3-8784-66571615522c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/113973079961110862", "content": "", "creation_timestamp": "2025-02-09T08:53:06.397407Z"}, {"uuid": "c5eb639e-e66d-48b8-9522-97e871636135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lhqv4di7dj2w", "content": "", "creation_timestamp": "2025-02-09T14:54:26.774640Z"}, {"uuid": "f0c4b7fb-a9cf-4851-b3e8-751cce5313a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0315", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44wthh2n", "content": "", "creation_timestamp": "2025-03-20T13:03:44.882555Z"}, {"uuid": "54b97e2a-dd64-4648-b5a9-602e7f381f76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0313", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksr43usju2l", "content": "", "creation_timestamp": "2025-03-20T13:03:38.787404Z"}, {"uuid": "af803bbb-f2cd-490c-9603-f10ffae1163e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0317", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksr446pi526", "content": "", "creation_timestamp": "2025-03-20T13:03:40.399557Z"}, {"uuid": "f84207f0-e5d6-4c3c-ae2b-f4a7388ca7b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0312", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksr44cazc2h", "content": "", "creation_timestamp": "2025-03-20T13:03:40.929288Z"}, {"uuid": "0ec80aab-af99-4e68-8d50-61431111bd74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0370", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljkcp3vy5v2p", "content": "", "creation_timestamp": "2025-03-04T10:59:24.167607Z"}, {"uuid": "08e11aba-0f1c-4c76-95ec-5bdce4b9c8b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0330", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksr45627j2k", "content": "", "creation_timestamp": "2025-03-20T13:03:46.299124Z"}, {"uuid": "3c0f7fc2-2222-4113-a889-52478393dff7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyhqkpeuj2z", "content": "", "creation_timestamp": "2025-02-12T15:16:30.793347Z"}, {"uuid": "4d795ced-8412-4be5-8e7c-08180dbe25a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0332", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3lhyl3wcmqa2a", "content": "", "creation_timestamp": "2025-02-12T16:16:33.212963Z"}, {"uuid": "3dfc6808-ac9b-476c-8255-af5844e7a5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/113991936688930663", "content": "", "creation_timestamp": "2025-02-12T16:48:37.964600Z"}, {"uuid": "e4bb1141-d406-43d1-a83b-d9ca45882637", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0332", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyry4wagc2x", "content": "", "creation_timestamp": "2025-02-12T18:19:54.523950Z"}, {"uuid": "238d9025-fe0a-4d2e-a109-bf6dc70567f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lhyurhpc552v", "content": "", "creation_timestamp": "2025-02-12T19:09:40.656649Z"}, {"uuid": "3e4c9666-e549-4964-a682-efdcba4cbe96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113995183863446510", "content": "", "creation_timestamp": "2025-02-13T06:34:25.378212Z"}, {"uuid": "dbfd70d9-6767-4840-aca0-27f30cd4d6d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3li25ddg5sl2x", "content": "", "creation_timestamp": "2025-02-13T07:15:28.982955Z"}, {"uuid": "68f8b7a4-9759-4451-903d-772d372d3fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3li2i7xhbvk22", "content": "", "creation_timestamp": "2025-02-13T10:30:27.490453Z"}, {"uuid": "b7a4cd5a-02ba-49ae-8517-41a65c71a1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://bsky.app/profile/tmjintel.bsky.social/post/3li2nomzlsh2m", "content": "", "creation_timestamp": "2025-02-13T12:08:08.771797Z"}, {"uuid": "01d128f9-4fa9-48c6-b475-d3aec6e80d44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0360", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114104471150686454", "content": "", "creation_timestamp": "2025-03-04T13:47:37.246840Z"}, {"uuid": "7a9f0972-f767-4e6a-83f3-9c1812a029b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114104471150686454", "content": "", "creation_timestamp": "2025-03-04T13:47:37.319077Z"}, {"uuid": "590d0fda-f049-448b-ba9b-233ee1973789", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljtkses6lc2v", "content": "", "creation_timestamp": "2025-03-08T03:18:21.832699Z"}, {"uuid": "57d25212-5e8f-451c-81e8-b868155d7454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljqbkhq2j22y", "content": "", "creation_timestamp": "2025-03-06T19:54:51.488929Z"}, {"uuid": "52a756e6-e5dc-4913-99f5-97c0d99e29a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0355", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3li6nkne6n22p", "content": "", "creation_timestamp": "2025-02-15T02:16:33.923695Z"}, {"uuid": "b5d0a27d-6ed7-4df8-8021-14ab30b5208f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3liivh65qas2l", "content": "", "creation_timestamp": "2025-02-19T04:04:30.020381Z"}, {"uuid": "795554c3-ff68-448f-9511-3f21ae9c300c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-0366", "type": "seen", "source": "https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3lij3cktazk26", "content": "", "creation_timestamp": "2025-02-19T05:49:12.079395Z"}, {"uuid": "6f169bb9-305a-4ee6-bc13-7c0da8c611f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lijxkvbaqk2a", "content": "", "creation_timestamp": "2025-02-19T14:14:56.460215Z"}, {"uuid": "352842f5-9d42-4243-b992-12d57d70e188", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://bsky.app/profile/andranglin.bsky.social/post/3lijyjpdq5k2l", "content": "", "creation_timestamp": "2025-02-19T14:32:13.159716Z"}, {"uuid": "fe25211f-3d7a-4fcd-b8fe-020385a7a5c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0352", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-051-05", "content": "", "creation_timestamp": "2025-02-20T11:00:00.000000Z"}, {"uuid": "b1c5e8b0-6578-4de2-bf39-7d33f914c80b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljjnfv6grk2a", "content": "", "creation_timestamp": "2025-03-04T04:38:26.976617Z"}, {"uuid": "5169ecdd-88bc-4433-ba51-eebe33df708a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-079-01", "content": "", "creation_timestamp": "2025-03-20T11:00:00.000000Z"}, {"uuid": "01f069a7-f574-4051-9acd-11a57193309b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://bsky.app/profile/dailytech.ng/post/3ljp4knhqyl2t", "content": "", "creation_timestamp": "2025-03-06T08:52:46.823204Z"}, {"uuid": "ddc91243-3240-421d-b652-0d4e77ab5827", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljjvkghety2n", "content": "", "creation_timestamp": "2025-03-04T07:04:07.596359Z"}, {"uuid": "b6593da1-e57a-4f5c-8bc6-285a62c55591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114103057979794294", "content": "", "creation_timestamp": "2025-03-04T07:48:13.851612Z"}, {"uuid": "ff40f354-97df-4ef1-9edc-874b8848ac8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0360", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljk3y7zmvz2h", "content": "", "creation_timestamp": "2025-03-04T08:59:09.881006Z"}, {"uuid": "20b182a2-ce95-47b9-bbf7-c00eb3fc88d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0362", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114313960192880711", "content": "", "creation_timestamp": "2025-04-10T13:43:26.539310Z"}, {"uuid": "32874afd-e21a-40e9-b8e1-50c8e4e18447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0362", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114313962647315508", "content": "", "creation_timestamp": "2025-04-10T13:44:03.941260Z"}, {"uuid": "85f51ecc-0fa1-4ec8-a585-944cccdba468", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0362", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmhta4lmfa2z", "content": "", "creation_timestamp": "2025-04-10T15:32:51.180652Z"}, {"uuid": "c6554b56-17d1-437b-9ba4-c4cc053c3728", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lmnvchls2p2g", "content": "", "creation_timestamp": "2025-04-13T01:25:51.172828Z"}, {"uuid": "c4d20c36-7498-4d41-99b2-49ab7424030d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0362", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lmoyhvtpds2q", "content": "", "creation_timestamp": "2025-04-13T11:55:14.824151Z"}, {"uuid": "844b822d-1c15-44ec-b925-0170880c635a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "https://bsky.app/profile/bolhasec.com/post/3lnegfcjugy2l", "content": "", "creation_timestamp": "2025-04-22T00:30:16.481468Z"}, {"uuid": "28980500-dee5-439f-ad6d-b1e567571d61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnlvp2joud2m", "content": "", "creation_timestamp": "2025-04-24T23:52:48.102033Z"}, {"uuid": "5d806264-56d0-4da7-92a6-248526f0526c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0320", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114699261299007014", "content": "", "creation_timestamp": "2025-06-17T14:50:34.205154Z"}, {"uuid": "5eb78247-dff8-451f-bc14-52bae5ec56f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0325", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmfw6in5ka2", "content": "", "creation_timestamp": "2025-06-02T08:59:28.932110Z"}, {"uuid": "32106b3d-81fb-4f8d-ac91-5c1e1ceb0f43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0358", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmfw4wu36e2", "content": "", "creation_timestamp": "2025-06-02T08:59:29.490969Z"}, {"uuid": "d054374f-6bce-4339-91d4-020151291e3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0324", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmfwa36fse2", "content": "", "creation_timestamp": "2025-06-02T08:59:30.113511Z"}, {"uuid": "77e7a09c-5575-4a6e-a9b3-06464f5ab4f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0324", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqmgfsldzi2p", "content": "", "creation_timestamp": "2025-06-02T09:07:24.029208Z"}, {"uuid": "97390809-a924-4805-8caf-e73989122c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0358", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqmgor7hfk2k", "content": "", "creation_timestamp": "2025-06-02T09:12:24.689760Z"}, {"uuid": "d0cf105f-84dc-4585-ac73-720f62951dca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lupieybfp72r", "content": "", "creation_timestamp": "2025-07-24T12:01:31.725449Z"}, {"uuid": "daecd19e-8800-4cb9-af2d-99edd40e5177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0362", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-09-10T07:00:38.000000Z"}, {"uuid": "4767bb8c-2060-4fb0-a2ad-6f92d88c87da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0362", "type": "seen", "source": "MISP/a1f4de80-fff0-4971-8020-da8f70ab57ea", "content": "", "creation_timestamp": "2025-08-09T17:25:37.000000Z"}, {"uuid": "dfdb64c0-abd0-4db7-b8a4-7a4e1b4181e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0330", "type": "seen", "source": "MISP/3e4b778d-5810-4171-a915-f1d106684af4", "content": "", "creation_timestamp": "2025-08-11T18:27:49.000000Z"}, {"uuid": "e9b9a8b8-d18e-4be1-abc5-825b9239197d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwdqcba2bf27", "content": "", "creation_timestamp": "2025-08-14T06:41:34.869752Z"}, {"uuid": "ea6d0f86-6529-4c14-b19d-a6e6a8c4e4de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:14.000000Z"}, {"uuid": "55d2f689-3ba0-48d8-b45b-fa29bbe05df4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3lzzeuwmlgg2z", "content": "", "creation_timestamp": "2025-09-30T01:31:26.488523Z"}, {"uuid": "78abca3f-ecf8-459c-9d5e-1eae42b05641", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "MISP/fc16b923-3a13-4e9d-9aac-10a57cac12c7", "content": "", "creation_timestamp": "2025-08-18T18:31:00.000000Z"}, {"uuid": "f5adf869-defa-4573-ac4a-176b0fe88457", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:31.000000Z"}, {"uuid": "d510b4a7-b90e-411f-b979-1e1861ba263a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "MISP/e1f6260f-3311-441b-92ae-e04cd5eb5f72", "content": "", "creation_timestamp": "2025-08-19T13:26:46.000000Z"}, {"uuid": "8db7eed4-d07a-4bff-9293-5bd5809c4e40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "MISP/9ca82492-7deb-4197-a6f1-191e121eef96", "content": "", "creation_timestamp": "2025-08-25T13:32:05.000000Z"}, {"uuid": "2929d704-f862-433b-b3e2-af850669f689", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://bsky.app/profile/r-blueteamsec.bsky.social/post/3lxl2ckgunk2q", "content": "", "creation_timestamp": "2025-08-29T21:54:31.483766Z"}, {"uuid": "ee221206-fec9-4ebb-99b2-ffc0b81d0145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lxmtj4532j2w", "content": "", "creation_timestamp": "2025-08-30T14:58:15.335345Z"}, {"uuid": "2ff3400b-8238-4527-afa7-7e50cc0bdc19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lxmvswyprs2d", "content": "", "creation_timestamp": "2025-08-30T15:39:32.275296Z"}, {"uuid": "f08744af-4d8a-470c-89ce-3469be182002", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://bsky.app/profile/crowdcyber.bsky.social/post/3lxn4jfpxlm2h", "content": "", "creation_timestamp": "2025-08-30T17:39:28.572866Z"}, {"uuid": "10fdf8d7-2766-465a-a0fb-2a17543220e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lxot65aiud2k", "content": "", "creation_timestamp": "2025-08-31T09:57:26.430976Z"}, {"uuid": "01812e9f-a412-4702-8c5b-9b6530196308", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0373", "type": "seen", "source": "MISP/ca7dfd4e-d0b5-4d10-8982-36d9f6e53c8e", "content": "", "creation_timestamp": "2025-09-01T13:53:38.000000Z"}, {"uuid": "2c3bfdac-dc1b-45c7-930e-5eec2d4d2dfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0370", "type": "seen", "source": "https://t.me/cvedetector/19486", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0370 - \"WordPress Shortcodes Ultimate Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2025-0370 \nPublished : March 4, 2025, 10:15 a.m. | 27\u00a0minutes ago \nDescription : The WP Shortcodes Plugin \u2014 Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018src\u2019 parameter in all versions up to, and including, 7.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T12:30:02.000000Z"}, {"uuid": "4166b442-3fc0-473b-a260-f530ff809566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "https://t.me/cvedetector/19465", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0359 - Axis ACAP Application Framework D-Bus Method Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0359 \nPublished : March 4, 2025, 6:15 a.m. | 23\u00a0minutes ago \nDescription : During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework.   \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. \nSeverity: 8.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T08:18:25.000000Z"}, {"uuid": "42b352f0-b95a-4a52-a7da-cdfd2395e571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0360", "type": "seen", "source": "https://t.me/cvedetector/19464", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0360 - Axis VAPIX Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0360 \nPublished : March 4, 2025, 6:15 a.m. | 23\u00a0minutes ago \nDescription : During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-04T08:18:24.000000Z"}, {"uuid": "aa713de3-2c35-434d-a4f5-9b840e508d32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0324", "type": "seen", "source": "Telegram/VQ0FQ5ZLin3xUorKYhfcFNtdNKkFwfxKkGrKdLfMt-CdeI0", "content": "", "creation_timestamp": "2025-06-02T09:01:34.000000Z"}, {"uuid": "ad292389-a69c-4c8f-b7b6-1d6a6c70f574", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "published-proof-of-concept", "source": "Telegram/rJsgkQOydsU18EwQDKO_kzUWB5N7HBS-S5BE4u4LW5jBkxc", "content": "", "creation_timestamp": "2025-06-06T15:00:10.000000Z"}, {"uuid": "df3e7a17-1cd3-4396-b054-e43d94d0ae96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "published-proof-of-concept", "source": "Telegram/_4cUwiNHuMV9mwcHdjVknxtkWGsw65i4723_y-BO0Y2zmBY", "content": "", "creation_timestamp": "2025-08-29T21:00:04.000000Z"}, {"uuid": "00d4ec45-b557-41da-a473-6be9753386b8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0352", "type": "seen", "source": "https://t.me/cvedetector/18599", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0352 - Apache Rapid Response Monitoring Account Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2025-0352 \nPublished : Feb. 20, 2025, 8:15 p.m. | 1\u00a0hour, 23\u00a0minutes ago \nDescription : Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-20T23:12:04.000000Z"}, {"uuid": "9ddc81eb-a822-4b3a-b453-72822a373546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0357", "type": "seen", "source": "https://t.me/cvedetector/16356", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0357 - WordPress WPBookit Plugin Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0357 \nPublished : Jan. 25, 2025, 2:15 a.m. | 19\u00a0minutes ago \nDescription : The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'WPB_Profile_controller::handle_image_upload' function in versions up to, and including, 1.6.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T03:47:27.000000Z"}, {"uuid": "8a26d73e-afa8-4a47-b487-baf264d4dbdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0396", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0396\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of the component XPC Service. The manipulation leads to command injection. It is possible to launch the attack on the local host. Upgrading to version 2.11.22 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-01-12T12:00:15.952Z\n\ud83d\udccf Modified: 2025-01-12T12:00:15.952Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.291269\n2. https://vuldb.com/?ctiid.291269\n3. https://vuldb.com/?submit.473229\n4. https://winslow1984.com/books/cve-collection/page/stats-v21122-local-privilege-escalation\n5. https://github.com/exelban/stats/releases/tag/v2.11.22", "creation_timestamp": "2025-01-12T12:04:40.000000Z"}, {"uuid": "7e395d93-11cc-48c4-ba92-bd5b201f141f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "https://t.me/cvedetector/17543", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0316 - WordPress Directorybox Manager Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0316 \nPublished : Feb. 8, 2025, 10:15 p.m. | 2\u00a0hours, 8\u00a0minutes ago \nDescription : The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_enquiry_agent_contact_form_submit_callback' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-09T01:46:55.000000Z"}, {"uuid": "cdfe9ee7-f2b1-401f-907a-6226770fefae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "published-proof-of-concept", "source": "Telegram/-65ofRofVzNW_GZdLWPuEaTrmjK7Q7Hre3otgWOs5AkL374", "content": "", "creation_timestamp": "2026-04-08T19:15:14.000000Z"}, {"uuid": "787d477b-f14b-4f93-9f63-b71be34d5ad2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0347", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/957", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0347\n\ud83d\udd39 Description: A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php of the component Login. The manipulation of the argument u_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T09:31:05.072Z\n\ud83d\udccf Modified: 2025-01-09T15:01:19.822Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290860\n2. https://vuldb.com/?ctiid.290860\n3. https://vuldb.com/?submit.476898\n4. https://github.com/Curious-L/-/issues/3\n5. https://code-projects.org/", "creation_timestamp": "2025-01-09T15:14:26.000000Z"}, {"uuid": "0afb4f6a-519f-4cfa-8fa3-ed2fce888792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0390", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1277", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0390\n\ud83d\udd39 Description: A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability affects unknown code of the file /wmOmNoticeHController.do. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-01-11T07:31:09.281Z\n\ud83d\udccf Modified: 2025-01-11T07:31:09.281Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.291124\n2. https://vuldb.com/?ctiid.291124\n3. https://gitee.com/erzhongxmu/JEEWMS/issues/IBFKBM", "creation_timestamp": "2025-01-11T08:03:47.000000Z"}, {"uuid": "105407be-ae26-49eb-9a81-e09f981e9db7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0344", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/905", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0344\n\ud83d\udd39 Description: A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /commpara/listData. The manipulation of the argument order leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T08:00:11.451Z\n\ud83d\udccf Modified: 2025-01-09T08:00:11.451Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290857\n2. https://vuldb.com/?ctiid.290857\n3. https://vuldb.com/?submit.475747\n4. https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli3.md", "creation_timestamp": "2025-01-09T08:14:06.000000Z"}, {"uuid": "b92cbcee-bcf6-47a0-bd2d-92b67b24cec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0301", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/523", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0301\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some unknown functionality of the file /subcat.php. The manipulation of the argument catnm leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-07T18:00:13.626Z\n\ud83d\udccf Modified: 2025-01-07T18:00:13.626Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290450\n2. https://vuldb.com/?ctiid.290450\n3. https://vuldb.com/?submit.475287\n4. https://gist.github.com/th4s1s/03262c6ce877137b61d745a2e4fe8a63\n5. https://code-projects.org/", "creation_timestamp": "2025-01-07T18:40:08.000000Z"}, {"uuid": "57022aee-7a92-4f3a-88f8-df522a831d43", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0300", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/500", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0300\n\ud83d\udd39 Description: A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-07T17:00:20.613Z\n\ud83d\udccf Modified: 2025-01-07T17:00:20.613Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290449\n2. https://vuldb.com/?ctiid.290449\n3. https://vuldb.com/?submit.475286\n4. https://gist.github.com/th4s1s/21abb650b4b70fe8392d8449445703f7\n5. https://code-projects.org/", "creation_timestamp": "2025-01-07T17:42:49.000000Z"}, {"uuid": "615f660c-35c3-4962-97a9-a92193687b99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0328", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/889", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0328\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by this issue is some unknown functionality of the file /public/server/runCode.php of the component HTTP POST Request Handler. The manipulation of the argument code leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T04:31:06.588Z\n\ud83d\udccf Modified: 2025-01-09T04:31:06.588Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290792\n2. https://vuldb.com/?ctiid.290792\n3. https://vuldb.com/?submit.470601\n4. https://note.zhaoj.in/share/ASPsoVCrLqKK", "creation_timestamp": "2025-01-09T05:14:47.000000Z"}, {"uuid": "ac7ca762-d6a4-4d5e-b7cd-073ec774ca37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0331", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/888", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0331\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the function changePwd of the file /app/platform/controllers/ResetpwdController.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-09T04:31:09.870Z\n\ud83d\udccf Modified: 2025-01-09T04:31:09.870Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290819\n2. https://vuldb.com/?ctiid.290819\n3. https://vuldb.com/?submit.471663\n4. https://note.zhaoj.in/share/DsijzdQDJSAp", "creation_timestamp": "2025-01-09T05:14:32.000000Z"}, {"uuid": "ae8dd248-9115-4863-ae33-557c9a251039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0333", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/887", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0333\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/role/listData. The manipulation of the argument order leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T05:00:12.824Z\n\ud83d\udccf Modified: 2025-01-09T05:00:12.824Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290820\n2. https://vuldb.com/?ctiid.290820\n3. https://vuldb.com/?submit.475297\n4. https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli1.md", "creation_timestamp": "2025-01-09T05:14:03.000000Z"}, {"uuid": "391d2f80-18f2-4bed-b7e5-4ec67948401b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0335", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/891", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0335\n\ud83d\udd39 Description: A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Change Image Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well.\n\ud83d\udccf Published: 2025-01-09T06:00:10.578Z\n\ud83d\udccf Modified: 2025-01-09T06:00:10.578Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290822\n2. https://vuldb.com/?ctiid.290822\n3. https://vuldb.com/?submit.475365\n4. https://github.com/Huandtx/cve/blob/main/cve/Online%20Bike%20Rental%20System/File_upload1.md\n5. https://code-projects.org/", "creation_timestamp": "2025-01-09T06:16:03.000000Z"}, {"uuid": "47e89c21-35d4-40d4-aa2b-73dbf58e64c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0339", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/901", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0339\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely.\n\ud83d\udccf Published: 2025-01-09T07:00:12.725Z\n\ud83d\udccf Modified: 2025-01-09T07:00:12.725Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290826\n2. https://vuldb.com/?ctiid.290826\n3. https://vuldb.com/?submit.475731\n4. https://code-projects.org/", "creation_timestamp": "2025-01-09T07:14:08.000000Z"}, {"uuid": "efd49130-e5c7-4c53-8d53-eab448d0281a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0340", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/900", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0340\n\ud83d\udd39 Description: A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T07:00:14.298Z\n\ud83d\udccf Modified: 2025-01-09T07:00:14.298Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290827\n2. https://vuldb.com/?ctiid.290827\n3. https://vuldb.com/?submit.476707\n4. https://code-projects.org/", "creation_timestamp": "2025-01-09T07:14:05.000000Z"}, {"uuid": "c3fc7207-e4e6-4b46-b31d-103171bb8f15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0334", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/894", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0334\n\ud83d\udd39 Description: A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /sys/user/listData. The manipulation of the argument order leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T06:00:07.480Z\n\ud83d\udccf Modified: 2025-01-09T06:00:07.480Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290821\n2. https://vuldb.com/?ctiid.290821\n3. https://vuldb.com/?submit.475302\n4. https://github.com/d3do-23/cvelist/blob/main/cy-fast/sqli2.md", "creation_timestamp": "2025-01-09T06:18:13.000000Z"}, {"uuid": "6549be25-4729-4dd5-8eed-7adaff25ee76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0349", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/926", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0349\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument src leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.\n\ud83d\udccf Published: 2025-01-09T10:31:07.078Z\n\ud83d\udccf Modified: 2025-01-09T10:31:07.078Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290862\n2. https://vuldb.com/?ctiid.290862\n3. https://vuldb.com/?submit.477048\n4. https://github.com/wy876/cve/issues/5\n5. https://www.tenda.com.cn/", "creation_timestamp": "2025-01-09T11:14:51.000000Z"}, {"uuid": "50b96399-3d1c-497c-9283-565b393c8db3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0348", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0348\n\ud83d\udd39 Description: A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/add_employee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T10:00:09.600Z\n\ud83d\udccf Modified: 2025-01-09T10:00:09.600Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290861\n2. https://vuldb.com/?ctiid.290861\n3. https://vuldb.com/?submit.476908\n4. https://github.com/shaturo1337/POCs/blob/main/Stored%20XSS%20Vulnerability%20in%20DepEd%20Equipment%20Inventory%20System.md\n5. https://www.campcodes.com/", "creation_timestamp": "2025-01-09T10:13:55.000000Z"}, {"uuid": "8acdef38-18e9-41e5-bf64-95c2574199a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0346", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/924", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0346\n\ud83d\udd39 Description: A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-09T09:00:14.484Z\n\ud83d\udccf Modified: 2025-01-09T09:00:14.484Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.290859\n2. https://vuldb.com/?ctiid.290859\n3. https://vuldb.com/?submit.476728\n4. https://gist.github.com/Lytes/266e5fa6eb4506fe2c7e35166664249a\n5. https://code-projects.org/", "creation_timestamp": "2025-01-09T09:14:20.000000Z"}, {"uuid": "207a941f-b6d6-4e5c-a091-4cfa1e965e99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0311", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1148", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0311\n\ud83d\udd39 Description: The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table widget in all versions up to, and including, 2.10.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-10T06:43:16.199Z\n\ud83d\udccf Modified: 2025-01-10T14:51:18.915Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9d17a3a0-3c09-4d67-96d6-d97bde92f100?source=cve\n2. https://plugins.trac.wordpress.org/browser/themeisle-companion/trunk/obfx_modules/elementor-extra-widgets/widgets/elementor/pricing-table.php#L1024\n3. https://wordpress.org/plugins/themeisle-companion/#developers\n4. https://plugins.trac.wordpress.org/changeset/3219568/\n5. https://github.com/Codeinwp/themeisle-companion/commit/47a17c86934cebbfc3f1a812f1afcaa20515c1f7\n6. https://github.com/Codeinwp/themeisle-companion/commit/c311050b372cf38e82d8ec9deadf4f21a8931487", "creation_timestamp": "2025-01-10T15:03:36.000000Z"}, {"uuid": "896cd8d5-0e6c-4801-842c-9007ce00400b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0398", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1338", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0398\n\ud83d\udd39 Description: A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-12T14:00:14.562Z\n\ud83d\udccf Modified: 2025-01-12T14:00:14.562Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.291271\n2. https://vuldb.com/?ctiid.291271\n3. https://vuldb.com/?submit.473316\n4. https://github.com/longpi1/warehouse/issues/4\n5. https://github.com/longpi1/warehouse/issues/4#issue-2765524047", "creation_timestamp": "2025-01-12T14:04:39.000000Z"}, {"uuid": "76a0ff7e-2c3a-4fe4-89d3-a5bdacdb10e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0397", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1337", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0397\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-01-12T12:31:04.239Z\n\ud83d\udccf Modified: 2025-01-12T12:31:04.239Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.291270\n2. https://vuldb.com/?ctiid.291270\n3. https://vuldb.com/?submit.473287\n4. https://github.com/LvZCh/SPPanAdmin/issues/3\n5. https://github.com/LvZCh/SPPanAdmin/issues/3#issue-2765450314", "creation_timestamp": "2025-01-12T13:05:00.000000Z"}, {"uuid": "f1863145-ba49-4f1a-9911-c5f6bd404d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0391", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1292", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0391\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function saveOrUpdate of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController. java. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-01-11T09:00:13.701Z\n\ud83d\udccf Modified: 2025-01-11T09:00:13.701Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.291125\n2. https://vuldb.com/?ctiid.291125\n3. https://gitee.com/erzhongxmu/JEEWMS/issues/IBFKA8", "creation_timestamp": "2025-01-11T10:03:52.000000Z"}, {"uuid": "6fc7a4ae-a196-442f-a585-a1856cf9179b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0392", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1293", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0392\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument store_code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-01-11T11:00:20.311Z\n\ud83d\udccf Modified: 2025-01-11T11:00:20.311Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.291126\n2. https://vuldb.com/?ctiid.291126\n3. https://gitee.com/erzhongxmu/JEEWMS/issues/IBFK93", "creation_timestamp": "2025-01-11T11:03:53.000000Z"}, {"uuid": "fb07d53f-c016-44e9-ab76-7928f5a403c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0399", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1363", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0399\n\ud83d\udd39 Description: A vulnerability was found in StarSea99 starsea-mall 1.0. It has been declared as critical. This vulnerability affects the function UploadController of the file src/main/java/com/siro/mall/controller/common/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-01-12T23:00:12.231Z\n\ud83d\udccf Modified: 2025-01-13T14:57:56.599Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.291274\n2. https://vuldb.com/?ctiid.291274\n3. https://vuldb.com/?submit.473319\n4. https://github.com/StarSea99/starsea-mall/issues/3\n5. https://github.com/StarSea99/starsea-mall/issues/3#issue-2765550309", "creation_timestamp": "2025-01-13T15:08:59.000000Z"}, {"uuid": "7c32c8f0-70a4-42a2-b894-129e19838207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0393", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1469", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0393\n\ud83d\udd39 Description: The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1006. This is due to missing or incorrect nonce validation on the wpr_filter_grid_posts() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-01-14T08:23:13.840Z\n\ud83d\udccf Modified: 2025-01-14T08:23:13.840Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a8e34c05-7431-4acd-91f3-aab5e66f61ad?source=cve\n2. https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1006/classes/modules/wpr-filter-grid-posts.php#L391\n3. https://wordpress.org/plugins/royal-elementor-addons/#developers\n4. https://plugins.trac.wordpress.org/browser/royal-elementor-addons/tags/1.7.1006/classes/modules/wpr-filter-grid-posts.php#L1260\n5. https://plugins.trac.wordpress.org/changeset/3220959/", "creation_timestamp": "2025-01-14T09:10:42.000000Z"}, {"uuid": "e6f798b4-0ce7-478b-a68d-7a94396fbd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0394", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1468", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0394\n\ud83d\udd39 Description: The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner \u2014 Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gh_big_file_upload() function in all versions up to, and including, 3.7.3.5. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-01-14T08:23:14.407Z\n\ud83d\udccf Modified: 2025-01-14T08:23:14.407Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/b2cf3b85-2e2d-43dc-9877-9a740d4fd2fb?source=cve\n2. https://plugins.trac.wordpress.org/browser/groundhogg/tags/3.7.3.5/includes/big-file-uploader.php#L117\n3. https://wordpress.org/plugins/groundhogg/#developers\n4. https://plugins.trac.wordpress.org/changeset/3221208/", "creation_timestamp": "2025-01-14T09:10:41.000000Z"}, {"uuid": "cc5c0bad-e72c-4d14-955e-dd8218d1c0b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/2863", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0314\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting.\n\ud83d\udccf Published: 2025-01-24T02:30:44.273Z\n\ud83d\udccf Modified: 2025-01-24T02:30:44.273Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/512118\n2. https://hackerone.com/reports/2922313", "creation_timestamp": "2025-01-24T03:03:59.000000Z"}, {"uuid": "f1b0cab6-4e32-4987-8364-4a347e7d1501", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0343", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1671", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0343\n\ud83d\udd39 Description: Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constraint isn't met.\n\nImportantly, these constraints are actually required to be true in DER, but that correctness wasn't enforced on the early node parser side so it was incorrect to rely on it later on in decoding, which is what the library did.\n\nThese crashes can be triggered when parsing any DER/BER format object. There is no memory-safety issue here: the crash is a graceful one from the Swift runtime. The impact of this is that it can be used as a denial-of-service vector when parsing BER/DER data from unknown sources, e.g. when parsing TLS certificates.\n\ud83d\udccf Published: 2025-01-15T00:48:07.959Z\n\ud83d\udccf Modified: 2025-01-15T00:48:07.959Z\n\ud83d\udd17 References:\n1. https://github.com/apple/swift-asn1/security/advisories/GHSA-w8xv-rwgf-4fwh", "creation_timestamp": "2025-01-15T01:09:58.000000Z"}, {"uuid": "3d2e1e63-2cf2-4b89-86d8-812714ca1b9a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0354", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1710", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0354\n\ud83d\udd39 Description: Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to inject an arbitrary script via the internet.\n\ud83d\udccf Published: 2025-01-15T07:21:41.810Z\n\ud83d\udccf Modified: 2025-01-15T07:24:04.161Z\n\ud83d\udd17 References:\n1. https://jpn.nec.com/security-info/secinfo/nv25-003_en.html", "creation_timestamp": "2025-01-15T08:28:51.000000Z"}, {"uuid": "e9be484a-fa8f-4fcf-ae6f-9b5fd9769608", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0356", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1709", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0356\n\ud83d\udd39 Description: NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the internet.\n\ud83d\udccf Published: 2025-01-15T07:24:25.831Z\n\ud83d\udccf Modified: 2025-01-15T07:24:25.831Z\n\ud83d\udd17 References:\n1. https://jpn.nec.com/security-info/secinfo/nv25-003_en.html", "creation_timestamp": "2025-01-15T08:28:39.000000Z"}, {"uuid": "5c7f64b1-fc77-4f6c-bc66-b354d3acbbcf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0355", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/1711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0355\n\ud83d\udd39 Description: Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the internet.\n\ud83d\udccf Published: 2025-01-15T07:23:39.481Z\n\ud83d\udccf Modified: 2025-01-15T07:23:39.481Z\n\ud83d\udd17 References:\n1. https://jpn.nec.com/security-info/secinfo/nv25-003_en.html", "creation_timestamp": "2025-01-15T08:29:09.000000Z"}, {"uuid": "856d2326-bf1f-48af-8f22-785fcccf0f7d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0308", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2272", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0308\n\ud83d\udd39 Description: The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the search parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-01-18T05:33:50.432Z\n\ud83d\udccf Modified: 2025-01-18T05:33:50.432Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e3e5bb98-2652-499a-b8cd-4ebfe1c1d890?source=cve\n2. https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.9.1/includes/core/class-member-directory.php#L1877", "creation_timestamp": "2025-01-18T05:57:11.000000Z"}, {"uuid": "abf2bb02-4ffe-47a8-8867-16e855aa66b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0318", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2275", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0318\n\ud83d\udd39 Description: The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.9.1 through different error messages in the responses. This makes it possible for unauthenticated attackers to exfiltrate data from wp_usermeta table.\n\ud83d\udccf Published: 2025-01-18T05:33:49.324Z\n\ud83d\udccf Modified: 2025-01-18T05:33:49.324Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4ee149bf-ffa3-4906-8be2-9c3c40b28287?source=cve\n2. https://plugins.trac.wordpress.org/browser/ultimate-member/tags/2.9.1/includes/core/um-actions-form.php#L944", "creation_timestamp": "2025-01-18T05:57:13.000000Z"}, {"uuid": "9b11f973-fd0e-4d05-9878-6f604679ba56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0369", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2280", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0369\n\ud83d\udd39 Description: The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018list_tag\u2019 parameter in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-18T07:05:10.395Z\n\ud83d\udccf Modified: 2025-01-18T07:05:10.395Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f27979a8-0e68-4a45-9e3e-3667d88361d8?source=cve\n2. https://crocoblock.com/plugins/jetengine/\n3. https://crocoblock.com/changelog/", "creation_timestamp": "2025-01-18T07:57:16.000000Z"}, {"uuid": "84c8a5b8-4d2d-4647-b4bf-a9e0dec0ff41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0371", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2377", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0371\n\ud83d\udd39 Description: The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-21T08:21:51.697Z\n\ud83d\udccf Modified: 2025-01-21T08:21:51.697Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/ded2f366-375c-4cf6-9cbd-c969a3b3d6d5?source=cve\n2. https://crocoblock.com/changelog/", "creation_timestamp": "2025-01-21T09:01:23.000000Z"}, {"uuid": "5e0e08ab-79ab-4dd9-b43e-534a36d8f3e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/2537", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0395\n\ud83d\udd39 Description: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\ud83d\udccf Published: 2025-01-22T13:11:30.406Z\n\ud83d\udccf Modified: 2025-01-22T13:11:30.406Z\n\ud83d\udd17 References:\n1. https://sourceware.org/bugzilla/show_bug.cgi?id=32582", "creation_timestamp": "2025-01-22T14:01:37.000000Z"}, {"uuid": "0b0079e1-7b7a-478a-aa6c-54f3ac0bb4af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0357", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3044", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0357\n\ud83d\udd39 Description: The WPBookit plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'WPB_Profile_controller::handle_image_upload' function in versions up to, and including, 1.6.9. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.\n\ud83d\udccf Published: 2025-01-25T01:44:36.912Z\n\ud83d\udccf Modified: 2025-01-25T01:44:36.912Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/19bf7a68-e76d-4740-9f35-b6084094f59b?source=cve\n2. https://documentation.iqonic.design/wpbookit/versions/change-log", "creation_timestamp": "2025-01-25T02:05:25.000000Z"}, {"uuid": "c8b2ac01-841a-425e-82a3-297c5666aa44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0350", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3072", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0350\n\ud83d\udd39 Description: The Divi Carousel Maker \u2013 Image, Logo, Testimonial, Post Carousel & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Carousel and Logo Carousel in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-01-25T09:22:46.301Z\n\ud83d\udccf Modified: 2025-01-25T09:22:46.301Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9e57a85b-3ea8-46df-ab60-ce835268b1f6?source=cve\n2. https://plugins.trac.wordpress.org/browser/wow-carousel-for-divi-lite/trunk/includes/divi4/modules/ImageCarouselChild/ImageCarouselChild.php#L327\n3. https://plugins.trac.wordpress.org/browser/wow-carousel-for-divi-lite/trunk/includes/divi4/modules/LogoCarouselChild/LogoCarouselChild.php#L168\n4. https://wordpress.org/plugins/wow-carousel-for-divi-lite/#developers\n5. https://plugins.trac.wordpress.org/changeset/3226742/", "creation_timestamp": "2025-01-25T10:05:34.000000Z"}, {"uuid": "c5a948f4-227a-4cfd-934d-da7cf041336d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0374", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3456", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0374\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts.  This version does not preserve the mode of the input file, and is world-readable.  This applies to files that would normally have restricted visibility, such as /etc/master.passwd.\n\nAn unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts.  This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved.\n\ud83d\udccf Published: 2025-01-30T06:30:49Z\n\ud83d\udccf Modified: 2025-01-30T06:30:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0374\n2. https://security.freebsd.org/advisories/FreeBSD-SA-25:03.etcupdate.asc", "creation_timestamp": "2025-01-30T07:11:35.000000Z"}, {"uuid": "451ab3a2-7ea8-4059-a676-c466789f9562", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0373", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3455", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0373\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: On 64-bit systems, the implementation of VOP_VPTOFH() in the cd9660, tarfs and ext2fs filesystems overflows the destination FID buffer by 4 bytes, a stack buffer overflow.\n\nA NFS server that exports a cd9660, tarfs, or ext2fs file system can be made to panic by mounting and accessing the export with an NFS client.  Further exploitation (e.g., bypassing file permission checking or remote kernel code execution) is potentially possible, though this has not been demonstrated.  In particular, release kernels are compiled with stack protection enabled, and some instances of the overflow are caught by this mechanism, causing a panic.\n\ud83d\udccf Published: 2025-01-30T06:30:49Z\n\ud83d\udccf Modified: 2025-01-30T06:30:49Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0373\n2. https://security.freebsd.org/advisories/FreeBSD-SA-25:02.fs.asc", "creation_timestamp": "2025-01-30T07:11:32.000000Z"}, {"uuid": "ddc66b02-aa8b-4d48-b3e9-a3f52572ba08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0365", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3724", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0365\n\ud83d\udd25 CVSS Score: 6.4 (CVSS_V3)\n\ud83d\udd39 Description: The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0365\n2. https://plugins.trac.wordpress.org/changeset/3231122/jupiterx-core/trunk/includes/extensions/raven/includes/modules/inline-svg/widgets/inline-svg.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/d3bc5ef7-6825-463f-a3ce-d6ab1fc0e030?source=cve", "creation_timestamp": "2025-02-01T07:16:18.000000Z"}, {"uuid": "88c318e4-5f68-4407-b4cc-e7a0b395bfe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3720", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0366\n\ud83d\udd25 CVSS Score: 8.7 (CVSS_V3)\n\ud83d\udd39 Description: The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including, 4.8.7 via the get_svg() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution. In this specific case,  an attacker can create a form that allows SVG uploads, upload an SVG file with malicious content and then include the SVG file in a post to achieve remote code execution. This means it is relatively easy to gain remote code execution as a contributor-level user and above by default.\n\ud83d\udccf Published: 2025-02-01T06:31:01Z\n\ud83d\udccf Modified: 2025-02-01T06:31:01Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0366\n2. https://plugins.trac.wordpress.org/changeset/3231122/jupiterx-core/trunk/includes/extensions/raven/includes/modules/forms/classes/ajax-handler.php\n3. https://plugins.trac.wordpress.org/changeset/3231122/jupiterx-core/trunk/includes/extensions/raven/includes/modules/video/widgets/video.php\n4. https://www.wordfence.com/threat-intel/vulnerabilities/id/1a20dc1d-eb7c-47ac-ad9a-ec4c0d5db62e?source=cve", "creation_timestamp": "2025-02-01T07:16:12.000000Z"}, {"uuid": "f08c5e01-c33f-4abf-b284-52c76c6e97da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0365", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/3736", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0365\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:31.213\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3231122/jupiterx-core/trunk/includes/extensions/raven/includes/modules/inline-svg/widgets/inline-svg.php\n2. https://www.wordfence.com/threat-intel/vulnerabilities/id/d3bc5ef7-6825-463f-a3ce-d6ab1fc0e030?source=cve", "creation_timestamp": "2025-02-01T07:25:39.000000Z"}, {"uuid": "5744c9dd-d959-4238-a8df-1ccdd3f9e27f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/3735", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0366\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2025-02-01T06:15:31.367\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://plugins.trac.wordpress.org/changeset/3231122/jupiterx-core/trunk/includes/extensions/raven/includes/modules/forms/classes/ajax-handler.php\n2. https://plugins.trac.wordpress.org/changeset/3231122/jupiterx-core/trunk/includes/extensions/raven/includes/modules/video/widgets/video.php\n3. https://www.wordfence.com/threat-intel/vulnerabilities/id/1a20dc1d-eb7c-47ac-ad9a-ec4c0d5db62e?source=cve", "creation_timestamp": "2025-02-01T07:25:38.000000Z"}, {"uuid": "c4f44c0f-d8d6-4142-94c6-4970fd10a1e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4227", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0327\n\ud83d\udd25 CVSS Score: 7.7 (CVSS_V3)\n\ud83d\udd39 Description: CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit\ntrail data and the other acting as server managing client request) that could cause a loss of Confidentiality,\nIntegrity and Availability of engineering workstation when an attacker with standard privilege modifies the\nexecutable path of the windows services. To be exploited, services need to be restarted.\n\ud83d\udccf Published: 2025-02-13T09:31:26Z\n\ud83d\udccf Modified: 2025-02-13T09:31:26Z\n\ud83d\udd17 References:\n1. https://nvd.nist.gov/vuln/detail/CVE-2025-0327\n2. https://download.schneider-electric.com/files?p_Doc_Ref=SEVD-2025-042-03&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2025-042-03.pdf", "creation_timestamp": "2025-02-13T10:09:11.000000Z"}, {"uuid": "dcae1e00-063e-4538-83b6-14a79769d606", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0365", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"}, {"uuid": "a7e5dcc3-f623-44ff-93e9-792a5ea74cec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0306", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/4942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0306\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.\n\ud83d\udccf Published: 2025-01-09T04:05:42.194Z\n\ud83d\udccf Modified: 2025-02-21T18:03:34.267Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-0306\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2336100", "creation_timestamp": "2025-02-21T18:18:56.000000Z"}, {"uuid": "381eb599-1a58-4429-97ce-7cfff6129f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5889", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0395\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\ud83d\udccf Published: 2025-01-22T13:11:30.406Z\n\ud83d\udccf Modified: 2025-02-28T13:07:31.672Z\n\ud83d\udd17 References:\n1. https://www.openwall.com/lists/oss-security/2025/01/22/4\n2. https://sourceware.org/bugzilla/show_bug.cgi?id=32582\n3. https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001\n4. https://sourceware.org/pipermail/libc-announce/2025/000044.html", "creation_timestamp": "2025-02-28T13:26:55.000000Z"}, {"uuid": "b621ef88-5a3d-4065-8cab-42364e450248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0370", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6356", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0370\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WP Shortcodes Plugin \u2014 Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018src\u2019 parameter in all versions up to, and including, 7.3.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-04T09:22:37.463Z\n\ud83d\udccf Modified: 2025-03-04T09:22:37.463Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/f0869c35-9ea8-46a5-8bba-23d7ef47355a?source=cve\n2. https://plugins.trac.wordpress.org/browser/shortcodes-ultimate/trunk/includes/shortcodes/lightbox.php#L75\n3. https://wordpress.org/plugins/shortcodes-ultimate/#developers\n4. https://plugins.trac.wordpress.org/changeset/3229060/", "creation_timestamp": "2025-03-04T09:31:52.000000Z"}, {"uuid": "f42436ab-32fd-492f-9ab2-3ba4543024a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6336", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0359\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L)\n\ud83d\udd39 Description: During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:21:34.944Z\n\ud83d\udccf Modified: 2025-03-04T05:21:34.944Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/68/08/c5/cve-2025-0359pdf-en-US-466885.pdf", "creation_timestamp": "2025-03-04T05:30:25.000000Z"}, {"uuid": "e25e3b6b-383f-4b05-a55f-1a2320af89d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0360", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6335", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0360\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.\n\ud83d\udccf Published: 2025-03-04T05:24:00.720Z\n\ud83d\udccf Modified: 2025-03-04T05:24:00.720Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/b1/fe/46/cve-2025-0360pdf-en-US-466887.pdf", "creation_timestamp": "2025-03-04T05:30:24.000000Z"}, {"uuid": "c123566e-2638-4042-bd93-dc9d928c70b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6696", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0337\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access. \n\nThis issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners.\n\ud83d\udccf Published: 2025-03-06T16:29:12.094Z\n\ud83d\udccf Modified: 2025-03-06T16:29:12.094Z\n\ud83d\udd17 References:\n1. https://support.servicenow.com/kb?id=kb_article_view&sysparm_article=KB1948695", "creation_timestamp": "2025-03-06T16:33:52.000000Z"}, {"uuid": "cd08a6e3-64cb-4c3b-ad4c-d849aaa23f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0343", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8473", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0343\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constraint isn't met.\n\nImportantly, these constraints are actually required to be true in DER, but that correctness wasn't enforced on the early node parser side so it was incorrect to rely on it later on in decoding, which is what the library did.\n\nThese crashes can be triggered when parsing any DER/BER format object. There is no memory-safety issue here: the crash is a graceful one from the Swift runtime. The impact of this is that it can be used as a denial-of-service vector when parsing BER/DER data from unknown sources, e.g. when parsing TLS certificates.\n\ud83d\udccf Published: 2025-01-15T00:48:07.959Z\n\ud83d\udccf Modified: 2025-03-24T16:07:03.833Z\n\ud83d\udd17 References:\n1. https://github.com/apple/swift-asn1/security/advisories/GHSA-w8xv-rwgf-4fwh", "creation_timestamp": "2025-03-24T16:23:07.000000Z"}, {"uuid": "d77616ee-2c40-471a-81d0-eb63dde07d52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0360", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8833", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0360\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the VAPIX Device Configuration framework that could lead to an incorrect user privilege level in the VAPIX service account D-Bus API.\n\ud83d\udccf Published: 2025-03-04T05:24:00.720Z\n\ud83d\udccf Modified: 2025-03-26T12:09:06.856Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/b1/fe/46/cve-2025-0360pdf-en-US-466887.pdf", "creation_timestamp": "2025-03-26T12:26:10.000000Z"}, {"uuid": "c0585cc5-d9af-49a6-8fa8-6ec060c9b0ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0359\n\ud83d\udd25 CVSS Score: 8.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L)\n\ud83d\udd39 Description: During an annual penetration test conducted on behalf of Axis Communication, Truesec discovered a flaw in the ACAP Application framework that allowed applications to access restricted D-Bus methods within the framework. \nAxis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution.\n\ud83d\udccf Published: 2025-03-04T05:21:34.944Z\n\ud83d\udccf Modified: 2025-03-28T07:03:53.756Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/68/08/c5/cve-2025-0359pdf-en-US-466885.pdf", "creation_timestamp": "2025-03-28T07:27:23.000000Z"}, {"uuid": "874ff360-5465-4790-a360-95611cee6119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0361", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10848", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0361\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.\n\ud83d\udccf Published: 2025-04-08T05:38:02.631Z\n\ud83d\udccf Modified: 2025-04-08T05:38:02.631Z\n\ud83d\udd17 References:\n1. https://www.axis.com/dam/public/f4/9b/13/cve-2025-0361pdf-en-US-474511.pdf", "creation_timestamp": "2025-04-08T05:47:23.000000Z"}, {"uuid": "fbabfb5d-1ee1-4c50-a2d5-b0d28d14aa44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11554", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0395\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\ud83d\udccf Published: 2025-01-22T13:11:30.406Z\n\ud83d\udccf Modified: 2025-04-13T03:00:13.920Z\n\ud83d\udd17 References:\n1. https://www.openwall.com/lists/oss-security/2025/01/22/4\n2. https://sourceware.org/bugzilla/show_bug.cgi?id=32582\n3. https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2025-0001\n4. https://sourceware.org/pipermail/libc-announce/2025/000044.html", "creation_timestamp": "2025-04-13T04:52:43.000000Z"}, {"uuid": "f347d029-0cf9-47a1-ad97-af4a54b9c62d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0372", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17162", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0372\n\ud83d\udd25 CVSS Score: 5.9 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:A/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L)\n\ud83d\udd39 Description: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in HYPR Passwordless on Windows allows Privilege Escalation.This issue affects HYPR Passwordless: before 10.1.\n\ud83d\udccf Published: 2025-05-21T17:12:08.134Z\n\ud83d\udccf Modified: 2025-05-21T17:12:08.134Z\n\ud83d\udd17 References:\n1. https://www.hypr.com/trust-center/security-advisories", "creation_timestamp": "2025-05-21T17:43:17.000000Z"}, {"uuid": "80fe9d60-7011-4994-b752-507db4b62ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0320", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18586", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-0320\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges in Citrix Secure Access Client for Windows\n\ud83d\udccf Published: 2025-06-17T13:25:22.351Z\n\ud83d\udccf Modified: 2025-06-17T13:25:22.351Z\n\ud83d\udd17 References:\n1. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX694724", "creation_timestamp": "2025-06-17T13:39:36.000000Z"}, {"uuid": "a86bb29d-ffb6-4446-9ddd-97534e878290", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://t.me/cvedetector/16249", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0314 - GitLab CE/EE Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0314 \nPublished : Jan. 24, 2025, 3:15 a.m. | 39\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.6.4, 17.7 before 17.7.3, and 17.8 before 17.8.1. Improper rendering of certain file types lead to cross-site scripting. \nSeverity: 8.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-24T05:12:08.000000Z"}, {"uuid": "38c36e04-51d5-486c-9faa-b4b02d800b14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0354", "type": "seen", "source": "https://t.me/cvedetector/15410", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0354 - NEC Corporation Aterm Wireless Router XSS\", \n  \"Content\": \"CVE ID : CVE-2025-0354 \nPublished : Jan. 15, 2025, 8:15 a.m. | 45\u00a0minutes ago \nDescription : Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to inject an arbitrary script via the internet. \nSeverity: 7.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T10:05:20.000000Z"}, {"uuid": "8b61a8eb-b342-4686-856d-8496e114e451", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://t.me/cvedetector/17982", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0327 - Apache Server Windows Service Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0327 \nPublished : Feb. 13, 2025, 7:15 a.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit  \ntrail data and the other acting as server managing client request) that could cause a loss of Confidentiality,  \nIntegrity and Availability of engineering workstation when an attacker with standard privilege modifies the  \nexecutable path of the windows services. To be exploited, services need to be restarted. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-13T11:18:30.000000Z"}, {"uuid": "78e0031e-77cb-463f-8a32-ed64666f04d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/15895", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-0364: BigAnt Server RCE Exploit\nURL\uff1ahttps://github.com/vulncheck-oss/cve-2025-0364\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-02-27T19:32:00.000000Z"}, {"uuid": "f9238fdf-028c-4f26-9997-aeed38e19557", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/49541", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCustom IPC Client and Proof of Concept exploit for CVE-2025-0309 (Netskope Windows Client LPE)\nURL\uff1ahttps://github.com/AC8999/CVE-2025-49113\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-08-29T20:45:51.000000Z"}, {"uuid": "e8f7e2ea-1938-4fd8-a8b2-1967c04d2efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "published-proof-of-concept", "source": "https://t.me/thebugbountyhunter/10168", "content": "Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309)\n\nhttps://blog.amberwolf.com/blog/2025/august/advisory---netskope-client-for-windows---local-privilege-escalation-via-rogue-server/", "creation_timestamp": "2025-08-30T19:48:17.000000Z"}, {"uuid": "01749fd6-2170-4a52-82d5-852195d20890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://t.me/TopCyberTechNews/592", "content": "Top Security News for Today\n\nTrend Vision One Integrates Microsoft Defender for Endpoint  \nhttps://www.trendmicro.com/en_us/research/25/h/vision-one-integrates-microsoft-defender.html\n\nNetskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309)  \nhttps://www.reddit.com/r/netsec/comments/1n43kvo/netskope_client_for_windows_local_privilege/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-08-31T09:30:12.000000Z"}, {"uuid": "a117d4f5-0bf2-4ab1-a698-5ad3c8065028", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://t.me/cvedetector/17901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0376 - GitLab CE/EE Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0376 \nPublished : Feb. 12, 2025, 3:15 p.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via a change page. \nSeverity: 8.7 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:43.000000Z"}, {"uuid": "e39aa04c-4e9c-4841-80d0-7df0a9c8eddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0332", "type": "seen", "source": "https://t.me/cvedetector/17891", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0332 - Telerik UI for WinForms Archive Decompression Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0332 \nPublished : Feb. 12, 2025, 4:15 p.m. | 46\u00a0minutes ago \nDescription : In Progress\u00ae Telerik\u00ae UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-12T18:33:29.000000Z"}, {"uuid": "6c596d37-afd4-4b18-a295-24d8b1525374", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://t.me/hackyourmom/10727", "content": "\ud83d\udee1 \u0412\u0438\u044f\u0432\u043b\u0435\u043d\u043e 0-day \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c (CVE-2025-0364) \u0443 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c\u0443 \u0447\u0430\u0442\u0456 BigAnt Server, \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0430\u0442\u0430\u043a\u0443\u0432\u0430\u043b\u044c\u043d\u0438\u043a\u0430\u043c \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u0434\u043e\u0432\u0456\u043b\u044c\u043d\u0438\u0439 \u043a\u043e\u0434 \u0432 Cloud Drive \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0456\u0457 \ud83c\udf10 #cybernews", "creation_timestamp": "2025-03-04T17:25:52.000000Z"}, {"uuid": "fe1cea59-27f8-4216-ac01-c18720aa0548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://t.me/hackyourmom/10631", "content": "\ud83d\udea8 \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c \u0443 WordPress-\u043f\u043b\u0430\u0433\u0456\u043d\u0456 Jupiter X Core \u0437\u0430\u0433\u0440\u043e\u0436\u0443\u0454 90 000 \u0441\u0430\u0439\u0442\u0456\u0432! \u0412\u0438\u044f\u0432\u043b\u0435\u043d\u043e \u0441\u0435\u0440\u0439\u043e\u0437\u043d\u0443 \u0443\u0440\u0430\u0437\u043b\u0438\u0432\u0456\u0441\u0442\u044c CVE-2025-0366 \u0456\u0437 CVSS 8.8, \u044f\u043a\u0430 \u0434\u043e\u0437\u0432\u043e\u043b\u044f\u0454 \u0437\u043b\u043e\u0432\u043c\u0438\u0441\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0432\u0430\u043d\u0442\u0430\u0436\u0443\u0432\u0430\u0442\u0438 \u0448\u043a\u0456\u0434\u043b\u0438\u0432\u0456 SVG-\u0444\u0430\u0439\u043b\u0438 \u0442\u0430 \u0432\u0438\u043a\u043e\u043d\u0443\u0432\u0430\u0442\u0438 \u0432\u0456\u0434\u0434\u0430\u043b\u0435\u043d\u0438\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0456 \ud83c\udf10 #cybernews", "creation_timestamp": "2025-02-20T17:21:39.000000Z"}, {"uuid": "4c166d01-b369-4f0f-929f-0b69e5f4c3c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0367", "type": "seen", "source": "https://t.me/cvedetector/16811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0367 - Splunk SA-ldapsearch Regular Expression Denial of Service (ReDoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0367 \nPublished : Jan. 30, 2025, 5:15 p.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T20:57:51.000000Z"}, {"uuid": "48a00e8a-72ac-4bc0-ae25-aa65150caab9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0358", "type": "seen", "source": "Telegram/VQ0FQ5ZLin3xUorKYhfcFNtdNKkFwfxKkGrKdLfMt-CdeI0", "content": "", "creation_timestamp": "2025-06-02T09:01:34.000000Z"}, {"uuid": "cbc16779-5d0d-4df6-87ea-315c3c0917b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0373", "type": "seen", "source": "https://t.me/cvedetector/16744", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0373 - NFS Server VOP_VPTOFH Stack Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-0373 \nPublished : Jan. 30, 2025, 5:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : On 64-bit systems, the implementation of VOP_VPTOFH() in the cd9660, tarfs and ext2fs filesystems overflows the destination FID buffer by 4 bytes, a stack buffer overflow.  \n  \nA NFS server that exports a cd9660, tarfs, or ext2fs file system can be made to panic by mounting and accessing the export with an NFS client.  Further exploitation (e.g., bypassing file permission checking or remote kernel code execution) is potentially possible, though this has not been demonstrated.  In particular, release kernels are compiled with stack protection enabled, and some instances of the overflow are caught by this mechanism, causing a panic. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:49.000000Z"}, {"uuid": "02f9c833-af15-4baa-ab0e-3342f699ac85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0374", "type": "seen", "source": "https://t.me/cvedetector/16741", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0374 - Pi Viola etcupdate Etcupdate Version Preservation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0374 \nPublished : Jan. 30, 2025, 5:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : When etcupdate encounters conflicts while merging files, it saves a version containing conflict markers in /var/db/etcupdate/conflicts.  This version does not preserve the mode of the input file, and is world-readable.  This applies to files that would normally have restricted visibility, such as /etc/master.passwd.  \n  \nAn unprivileged local user may be able to read encrypted root and user passwords from the temporary master.passwd file created in /var/db/etcupdate/conflicts.  This is possible only when conflicts within the password file arise during an update, and the unprotected file is deleted when conflicts are resolved. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-30T08:24:44.000000Z"}, {"uuid": "093bc3f5-2b98-49ee-940f-18eaf6209d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0353", "type": "seen", "source": "https://t.me/cvedetector/16680", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0353 - \"Divi Torque Lite Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2025-0353 \nPublished : Jan. 29, 2025, 12:15 p.m. | 1\u00a0hour, 48\u00a0minutes ago \nDescription : The Divi Torque Lite \u2013 Best Divi Addon, Extensions, Modules & Social Modules plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 4.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"29 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-29T15:41:07.000000Z"}, {"uuid": "9482a858-1674-42d1-8547-4107a60d0494", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0361", "type": "seen", "source": "https://t.me/cvedetector/22396", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0361 - Axis Communications VAPIX Device Configuration SSH Management API Unauthenticated Username Enumeration Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0361 \nPublished : April 8, 2025, 6:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-08T09:48:29.000000Z"}, {"uuid": "3f9bfda4-bb72-450a-bca0-73425a94baa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0321", "type": "seen", "source": "https://t.me/cvedetector/16585", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0321 - ElementsKit Pro WordPress DOM-Based Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0321 \nPublished : Jan. 28, 2025, 8:15 a.m. | 58\u00a0minutes ago \nDescription : The ElementsKit Pro plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the \u2018url\u2019 parameter in all versions up to, and including, 3.7.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-28T10:25:45.000000Z"}, {"uuid": "69f74e2e-6711-4218-ab18-39f009eda8c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0362", "type": "seen", "source": "https://t.me/cvedetector/22675", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0362 - GitLab CE/EE Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0362 \nPublished : April 10, 2025, 3:16 p.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : An issue has been discovered in GitLab CE/EE affecting all versions from 7.7 before 17.8.7, 17.9 before 17.9.6, and 17.10 before 17.10.4. Under certain conditions, an attacker could potentially trick users into unintentionally authorizing sensitive actions on their behalf. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-10T19:32:38.000000Z"}, {"uuid": "281ad8c2-12c7-4f0c-a760-469e8f2dfe74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0350", "type": "seen", "source": "https://t.me/cvedetector/16383", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0350 - Divi Carousel Maker WordPress Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-0350 \nPublished : Jan. 25, 2025, 10:15 a.m. | 50\u00a0minutes ago \nDescription : The Divi Carousel Maker \u2013 Image, Logo, Testimonial, Post Carousel & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Carousel and Logo Carousel in all versions up to, and including, 2.0.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-25T12:09:14.000000Z"}, {"uuid": "86a4b48f-15f9-4154-8849-49c4a4f22d08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "https://t.me/cvedetector/19721", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0337 - ServiceNow Now Platform Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0337 \nPublished : March 6, 2025, 5:15 p.m. | 1\u00a0hour ago \nDescription : ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access.   \n  \nThis issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"06 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-06T19:41:40.000000Z"}, {"uuid": "593ccbef-7a51-4594-a922-38be74ed373a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0315", "type": "seen", "source": "https://t.me/cvedetector/20720", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0315 - Ollama Ollama Memory Allocation Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0315 \nPublished : March 20, 2025, 10:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability in ollama/ollama <=0.3.14\nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T13:13:15.000000Z"}, {"uuid": "d693b15b-9ed6-4b2e-a2c6-1b58d11ee1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0313", "type": "seen", "source": "https://t.me/cvedetector/20719", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0313 - Ollama Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0313 \nPublished : March 20, 2025, 10:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability in ollama/ollama versions <=0.3.14\nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T13:13:14.000000Z"}, {"uuid": "c0753760-e432-41fa-8adc-2a5f60956b8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0317", "type": "seen", "source": "https://t.me/cvedetector/20724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0317 - Ollama Denial of Service (DoS) Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0317 \nPublished : March 20, 2025, 10:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability in ollama/ollama versions <=0.3.14\nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T13:13:21.000000Z"}, {"uuid": "021964df-69c2-44f3-b053-537aac685a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0330", "type": "seen", "source": "https://t.me/cvedetector/20722", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0330 - Berriai Litellm API Key Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0330 \nPublished : March 20, 2025, 10:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfuse_secret and langfuse_public_key, which can provide full access to the Langfuse project storing all requests. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T13:13:20.000000Z"}, {"uuid": "48ab3277-f59c-40d4-9ebd-54c143b37e05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0312", "type": "seen", "source": "https://t.me/cvedetector/20717", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0312 - Ollama Ollama Null Pointer Dereference Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-0312 \nPublished : March 20, 2025, 10:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability in ollama/ollama versions <=0.3.14\nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T13:13:13.000000Z"}, {"uuid": "86bcc86b-8b16-4f80-a1ec-25fad1b30a36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0356", "type": "seen", "source": "https://t.me/cvedetector/15412", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0356 - NEC Aterm Router Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0356 \nPublished : Jan. 15, 2025, 8:15 a.m. | 45\u00a0minutes ago \nDescription : NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the internet. \nSeverity: 4.8 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T10:05:21.000000Z"}, {"uuid": "f030c0fd-3d69-4f1d-aba6-31670117de80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0355", "type": "seen", "source": "https://t.me/cvedetector/15411", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0355 - NEC Corporation Aterm Wi-Fi Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-0355 \nPublished : Jan. 15, 2025, 8:15 a.m. | 45\u00a0minutes ago \nDescription : Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the internet. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T10:05:21.000000Z"}, {"uuid": "307e6655-ee3c-4232-bbf8-7694f8427eed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0343", "type": "seen", "source": "https://t.me/cvedetector/15401", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0343 - Apple Swift ASN.1 Denial of Service\", \n  \"Content\": \"CVE ID : CVE-2025-0343 \nPublished : Jan. 15, 2025, 1:15 a.m. | 40\u00a0minutes ago \nDescription : Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constraint isn't met.  \n  \nImportantly, these constraints are actually required to be true in DER, but that correctness wasn't enforced on the early node parser side so it was incorrect to rely on it later on in decoding, which is what the library did.  \n  \nThese crashes can be triggered when parsing any DER/BER format object. There is no memory-safety issue here: the crash is a graceful one from the Swift runtime. The impact of this is that it can be used as a denial-of-service vector when parsing BER/DER data from unknown sources, e.g. when parsing TLS certificates. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-15T03:24:17.000000Z"}, {"uuid": "e7216c2f-91d8-4cc1-acd5-0ed94c57248f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://t.me/cvedetector/17222", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0364 - BigAntSoft BigAnt Server Unauthenticated Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-0364 \nPublished : Feb. 4, 2025, 6:15 p.m. | 57\u00a0minutes ago \nDescription : BigAntSoft BigAnt Server, up to and including version 5.6.06, is vulnerable to unauthenticated remote code execution via account registration. An unauthenticated remote attacker can create an administrative user through the default exposed SaaS registration mechanism. Once an administrator, the attacker can upload and execute arbitrary PHP code using the \"Cloud Storage Addin,\" leading to unauthenticated code execution. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T20:34:59.000000Z"}, {"uuid": "e8009407-7c2c-408b-8481-39643a81b852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0368", "type": "seen", "source": "https://t.me/cvedetector/17143", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0368 - \"Banner Garden WordPress XSRF Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0368 \nPublished : Feb. 4, 2025, 6:15 a.m. | 35\u00a0minutes ago \nDescription : The Banner Garden Plugin for WordPress plugin through 0.1.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin or unauthenticated users. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"04 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-04T08:02:03.000000Z"}, {"uuid": "9a40904f-1b89-4db6-b5ef-ff91049ab705", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "https://t.me/cvedetector/16992", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0366 - \"Jupiter X Core WordPress Remote Code Execution Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0366 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including, 4.8.7 via the get_svg() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution. In this specific case,  an attacker can create a form that allows SVG uploads, upload an SVG file with malicious content and then include the SVG file in a post to achieve remote code execution. This means it is relatively easy to gain remote code execution as a contributor-level user and above by default. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:17.000000Z"}, {"uuid": "f8be4028-bbb5-4743-b69e-fef3fbab4f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0365", "type": "seen", "source": "https://t.me/cvedetector/16990", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0365 - Jupiter X Core WordPress Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0365 \nPublished : Feb. 1, 2025, 6:15 a.m. | 21\u00a0minutes ago \nDescription : The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-01T08:07:15.000000Z"}, {"uuid": "5c24434c-8fba-4065-adea-d1d0a02de3bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0371", "type": "seen", "source": "https://t.me/cvedetector/15909", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0371 - JetElements WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0371 \nPublished : Jan. 21, 2025, 9:15 a.m. | 37\u00a0minutes ago \nDescription : The JetElements plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 2.7.2.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T11:06:15.000000Z"}, {"uuid": "99c249b4-d2b4-411d-88a4-d56f56e26001", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0318", "type": "seen", "source": "https://t.me/cvedetector/15780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0318 - Ultimate Member WordPress Information Exposure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0318 \nPublished : Jan. 18, 2025, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.9.1 through different error messages in the responses. This makes it possible for unauthenticated attackers to exfiltrate data from wp_usermeta table. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T07:52:13.000000Z"}, {"uuid": "5fb96c37-5b7c-4054-baa0-5b4f323dfc67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0369", "type": "seen", "source": "https://t.me/cvedetector/15786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0369 - JetEngine Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0369 \nPublished : Jan. 18, 2025, 7:15 a.m. | 18\u00a0minutes ago \nDescription : The JetEngine plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018list_tag\u2019 parameter in all versions up to, and including, 3.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T08:42:24.000000Z"}, {"uuid": "b42daa31-d74d-4115-bee9-22412e34905d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0308", "type": "seen", "source": "https://t.me/cvedetector/15783", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0308 - WordPress Ultimate Member Time-Based SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-0308 \nPublished : Jan. 18, 2025, 6:15 a.m. | 29\u00a0minutes ago \nDescription : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the search parameter in all versions up to, and including, 2.9.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-18T07:52:15.000000Z"}, {"uuid": "8cb079a9-6594-44b7-9f83-a114b9342d74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0392", "type": "seen", "source": "https://t.me/cvedetector/15057", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0392 - Guangzhou Huayi Intelligent Technology Jeewms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0392 \nPublished : Jan. 11, 2025, 11:15 a.m. | 43\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. Affected is the function datagridGraph of the file /graphReportController.do. The manipulation of the argument store_code leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T13:14:51.000000Z"}, {"uuid": "8dbaae38-659f-4e97-9a5c-780ec07b5c97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0391", "type": "seen", "source": "https://t.me/cvedetector/15056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0391 - Guangzhou Huayi Intelligent Technology Jeewms SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0391 \nPublished : Jan. 11, 2025, 9:15 a.m. | 22\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This issue affects the function saveOrUpdate of the file org/jeecgframework/web/cgform/controller/build/CgFormBuildController. java. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T10:44:28.000000Z"}, {"uuid": "5f8489ce-11c1-4193-9d6e-96e2ec1b7d33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://t.me/cvedetector/16091", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0395 - GNU C Library Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0395 \nPublished : Jan. 22, 2025, 1:15 p.m. | 19\u00a0minutes ago \nDescription : When the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-22T14:43:03.000000Z"}, {"uuid": "3df1e9bc-e831-46be-8dcc-0d23fb9e2c89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0377", "type": "seen", "source": "https://t.me/cvedetector/15977", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0377 - HashiCorp go-slug Zip Slip Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2025-0377 \nPublished : Jan. 21, 2025, 4:15 p.m. | 25\u00a0minutes ago \nDescription : HashiCorp\u2019s go-slug library is vulnerable to a zip-slip style attack when a non-existing user-provided path is extracted from the tar entry. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"21 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-21T17:48:29.000000Z"}, {"uuid": "0c8cf198-231b-4823-a9ba-035dbe934e2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0390", "type": "seen", "source": "https://t.me/cvedetector/15044", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0390 - Guangzhou Huayi Intelligent Technology Jeewms Path Traversal Vuln\", \n  \"Content\": \"CVE ID : CVE-2025-0390 \nPublished : Jan. 11, 2025, 8:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability affects unknown code of the file /wmOmNoticeHController.do. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 20250101 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-11T09:54:09.000000Z"}, {"uuid": "0182c6a6-ef13-4c0e-98cd-7905e59c621e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0311", "type": "seen", "source": "https://t.me/cvedetector/14950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0311 - Orbit Fox by ThemeIsle Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0311 \nPublished : Jan. 10, 2025, 7:15 a.m. | 32\u00a0minutes ago \nDescription : The Orbit Fox by ThemeIsle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Pricing Table widget in all versions up to, and including, 2.10.43 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-10T08:49:22.000000Z"}, {"uuid": "705acccb-e424-4280-80d5-f77c2dd33988", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0341", "type": "seen", "source": "https://t.me/cvedetector/14801", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0341 - CampCodes Computer Laboratory Management System File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0341 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in CampCodes Computer Laboratory Management System 1.0. Affected by this issue is some unknown functionality of the file /class/edit/edit. The manipulation of the argument e_photo leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T10:13:44.000000Z"}, {"uuid": "dac81f4a-277b-4178-8983-d08613843a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0336", "type": "seen", "source": "https://t.me/cvedetector/14798", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0336 - Codezips Project Management System SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-0336 \nPublished : Jan. 9, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability was found in Codezips Project Management System 1.0. It has been classified as critical. This affects an unknown part of the file /pages/forms/teacher.php. The manipulation of the argument name leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T09:23:32.000000Z"}, {"uuid": "bdc34810-2de5-4c2a-9642-2021ca45f56e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0339", "type": "seen", "source": "https://t.me/cvedetector/14790", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0339 - \"Code-projects Online Bike Rental Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0339 \nPublished : Jan. 9, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in code-projects Online Bike Rental 1.0. Affected is an unknown function of the file /vehical-details.php of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T09:23:23.000000Z"}, {"uuid": "d76037ad-549e-4937-b6fd-505fc82d4615", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0335", "type": "seen", "source": "https://t.me/cvedetector/14786", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0335 - Apache Code-projects Online Bike Rental System Arbitrary File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0335 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Online Bike Rental System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the component Change Image Handler. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other endpoints might be affected as well. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:13.000000Z"}, {"uuid": "ed56be63-383b-4276-9b20-8e253bcaa8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0334", "type": "seen", "source": "https://t.me/cvedetector/14785", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0334 - Leiyuxi Cy-Fast SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0334 \nPublished : Jan. 9, 2025, 6:15 a.m. | 19\u00a0minutes ago \nDescription : A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /sys/user/listData. The manipulation of the argument order leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T07:43:09.000000Z"}, {"uuid": "0c960608-3a15-4258-adb6-70bce056d8c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0328", "type": "seen", "source": "https://t.me/cvedetector/14780", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0328 - KaiYuanTong ECT Platform Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0328 \nPublished : Jan. 9, 2025, 5:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in KaiYuanTong ECT Platform up to 2.0.0. Affected by this issue is some unknown functionality of the file /public/server/runCode.php of the component HTTP POST Request Handler. The manipulation of the argument code leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:52:57.000000Z"}, {"uuid": "7b52fe22-5f5a-4b21-be4c-6c9879be243d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0347", "type": "seen", "source": "https://t.me/cvedetector/14826", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0347 - Code-Projects Admission Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0347 \nPublished : Jan. 9, 2025, 10:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Admission Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file index.php of the component Login. The manipulation of the argument u_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T11:54:27.000000Z"}, {"uuid": "f5031227-5cfe-4b15-afc8-25f94e04e904", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0348", "type": "seen", "source": "https://t.me/cvedetector/14825", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0348 - CampCodes DepEd Equipment Inventory System Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0348 \nPublished : Jan. 9, 2025, 10:15 a.m. | 33\u00a0minutes ago \nDescription : A vulnerability was found in CampCodes DepEd Equipment Inventory System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /data/add_employee.php. The manipulation of the argument data leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T11:54:26.000000Z"}, {"uuid": "555e3363-c1c5-4ba6-8307-a2594f273569", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0345", "type": "seen", "source": "https://t.me/cvedetector/14822", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0345 - Leiyuxi Cy-Fast SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-0345 \nPublished : Jan. 9, 2025, 9:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this issue is the function listData of the file /sys/menu/listData. The manipulation of the argument order leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T11:04:21.000000Z"}, {"uuid": "3992cf12-1f75-45c0-84f6-90aa383f0dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0346", "type": "seen", "source": "https://t.me/cvedetector/14821", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0346 - Code-projects Content Management System File Upload Vulnerability (Remote Unrestricted Upload)\", \n  \"Content\": \"CVE ID : CVE-2025-0346 \nPublished : Jan. 9, 2025, 9:15 a.m. | 41\u00a0minutes ago \nDescription : A vulnerability was found in code-projects Content Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/publishnews.php of the component Publish News Page. The manipulation of the argument image leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T11:04:20.000000Z"}, {"uuid": "e6c84f55-ad40-4e23-92b0-d434f85d6a73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0344", "type": "seen", "source": "https://t.me/cvedetector/14803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0344 - Leiyuxi Cy-Fast SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0344 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in leiyuxi cy-fast 1.0 and classified as critical. Affected by this vulnerability is the function listData of the file /commpara/listData. The manipulation of the argument order leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T10:13:45.000000Z"}, {"uuid": "c3f8e3d9-a534-4397-9a0e-9ce600ad3d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0342", "type": "seen", "source": "https://t.me/cvedetector/14802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0342 - CampCodes Computer Laboratory Management System Cross-Site Scripting Vuln\", \n  \"Content\": \"CVE ID : CVE-2025-0342 \nPublished : Jan. 9, 2025, 8:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in CampCodes Computer Laboratory Management System 1.0. This affects an unknown part of the file /class/edit/edit. The manipulation of the argument s_lname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T10:13:44.000000Z"}, {"uuid": "c2bd0fb4-2ac8-415c-b285-d09a0fcc0149", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0340", "type": "seen", "source": "https://t.me/cvedetector/14792", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0340 - \"Cinema Seat Reservation System SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-0340 \nPublished : Jan. 9, 2025, 7:15 a.m. | 40\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Cinema Seat Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/deleteBooking.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T09:23:24.000000Z"}, {"uuid": "fec5a3c6-d8cd-4b10-981b-d58cca6ee74a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0331", "type": "seen", "source": "https://t.me/cvedetector/14779", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0331 - YunzMall Remote Weak Password Recovery Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0331 \nPublished : Jan. 9, 2025, 5:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in YunzMall up to 2.4.2. This issue affects the function changePwd of the file /app/platform/controllers/ResetpwdController.php of the component HTTP POST Request Handler. The manipulation of the argument pwd leads to weak password recovery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:52:56.000000Z"}, {"uuid": "8672d72b-63ee-49fc-a027-d07ae70618d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0333", "type": "seen", "source": "https://t.me/cvedetector/14778", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0333 - Leiyuxi Cy-Fast SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0333 \nPublished : Jan. 9, 2025, 5:15 a.m. | 28\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in leiyuxi cy-fast 1.0. Affected is the function listData of the file /sys/role/listData. The manipulation of the argument order leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:52:55.000000Z"}, {"uuid": "404c4626-66c4-4d2e-b802-9f7fe15debf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0306", "type": "seen", "source": "https://t.me/cvedetector/14769", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0306 - Ruby RSASSA-PSS Implementation Forgery and Decryption\", \n  \"Content\": \"CVE ID : CVE-2025-0306 \nPublished : Jan. 9, 2025, 4:15 a.m. | 38\u00a0minutes ago \nDescription : A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-09T06:02:40.000000Z"}, {"uuid": "dbaf5518-31be-420d-8727-dd44359c2d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0397", "type": "seen", "source": "https://t.me/cvedetector/15102", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0397 - Reckn SPPanAdmin Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-0397 \nPublished : Jan. 12, 2025, 1:15 p.m. | 38\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in reckcn SPPanAdmin 1.0. Affected is an unknown function of the file /;/admin/role/edit. The manipulation of the argument name leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-12T15:09:58.000000Z"}, {"uuid": "4b839d1d-da35-43cc-9c2e-bde6c2acab62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0301", "type": "seen", "source": "https://t.me/cvedetector/14587", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0301 - Online Book Shop Cross Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-0301 \nPublished : Jan. 7, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in code-projects Online Book Shop 1.0. Affected by this issue is some unknown functionality of the file /subcat.php. The manipulation of the argument catnm leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T19:44:21.000000Z"}, {"uuid": "9ab30d7c-5845-4d11-9fb7-80b74ca0d845", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0300", "type": "seen", "source": "https://t.me/cvedetector/14573", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0300 - Code-projects Online Book Shop SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0300 \nPublished : Jan. 7, 2025, 5:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in code-projects Online Book Shop 1.0. Affected by this vulnerability is an unknown functionality of the file /subcat.php. The manipulation of the argument cat leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-07T18:53:58.000000Z"}, {"uuid": "ed39fd42-6690-4a08-8f40-a442212be0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0394", "type": "seen", "source": "https://t.me/cvedetector/15236", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0394 - Groundhogg WordPress Plugin Remote File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0394 \nPublished : Jan. 14, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner \u2014 Groundhogg plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the gh_big_file_upload() function in all versions up to, and including, 3.7.3.5. This makes it possible for authenticated attackers, with Author-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T10:38:36.000000Z"}, {"uuid": "751be43d-22ce-479f-a936-1619129e2967", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0393", "type": "seen", "source": "https://t.me/cvedetector/15235", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0393 - The Royal Elementor Addons and Templates plugin fo\", \n  \"Content\": \"CVE ID : CVE-2025-0393 \nPublished : Jan. 14, 2025, 9:15 a.m. | 17\u00a0minutes ago \nDescription : The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1006. This is due to missing or incorrect nonce validation on the wpr_filter_grid_posts() function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-14T10:38:36.000000Z"}, {"uuid": "fde81d25-830f-4d25-8e9f-5bce3a70486d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0399", "type": "seen", "source": "https://t.me/cvedetector/15109", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0399 - StarSea99 starsea-mall Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0399 \nPublished : Jan. 12, 2025, 11:15 p.m. | 46\u00a0minutes ago \nDescription : A vulnerability was found in StarSea99 starsea-mall 1.0. It has been declared as critical. This vulnerability affects the function UploadController of the file src/main/java/com/siro/mall/controller/common/uploadController.java. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-13T01:11:21.000000Z"}, {"uuid": "5ad6d4dc-7f4c-4e42-a748-ca814f10df89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0398", "type": "seen", "source": "https://t.me/cvedetector/15103", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0398 - Longpi1 Warehouse Cross Site Scripting in Backend\", \n  \"Content\": \"CVE ID : CVE-2025-0398 \nPublished : Jan. 12, 2025, 2:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability has been found in longpi1 warehouse 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /resources/..;/inport/updateInport of the component Backend. The manipulation of the argument remark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 2.4 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-12T16:00:09.000000Z"}, {"uuid": "94d6ce41-73b7-4756-b8d9-9ef1af4a1541", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0396", "type": "seen", "source": "https://t.me/cvedetector/15101", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-0396 - Exelban Stats XPC Service Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-0396 \nPublished : Jan. 12, 2025, 12:15 p.m. | 37\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of the component XPC Service. The manipulation leads to command injection. It is possible to launch the attack on the local host. Upgrading to version 2.11.22 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 Jan 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-01-12T14:19:47.000000Z"}, {"uuid": "1a3cb9b4-9ad7-4893-adf3-9642a91b7f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0354", "type": "seen", "source": "Telegram/ZWGrMuFl33w0a6CfH86pLDcW2wCdW3KE2NFe6Y82c7gbDVLt", "content": "", "creation_timestamp": "2025-02-17T15:38:32.000000Z"}, {"uuid": "b3b76462-704b-4f13-ad7b-939e336f15d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "Telegram/6FKcA-FsJ8oX18nnojMaQq5TkYHy4-90wtvw1J5jFsjNocin", "content": "", "creation_timestamp": "2025-02-14T10:08:08.000000Z"}, {"uuid": "08a748b8-15ab-42ef-9eb1-b181abad12c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0332", "type": "seen", "source": "Telegram/kEH8S4oWrhC1f90vwtaI8p1npOtQGsL2UAIKZ4od3FNgfzpf", "content": "", "creation_timestamp": "2025-02-21T15:03:13.000000Z"}, {"uuid": "5dc6a2d1-62f3-4af2-89c4-0ffd10f7911f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "Telegram/qj-WOD_Rl2Wm-gy2laxUipdaBjMeXug_e8ejl9jGCHI-kxHP", "content": "", "creation_timestamp": "2025-02-14T10:06:09.000000Z"}, {"uuid": "fe3fe885-27a8-470e-a84b-4e1f42804f0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0357", "type": "seen", "source": "Telegram/aG_9MUoYNwdm4OuG7B_s6NZcfp-Pum3I_qBb0H2WiDqwHbg", "content": "", "creation_timestamp": "2025-01-25T04:00:24.000000Z"}, {"uuid": "de9f052a-6535-4b64-bacd-9c07a2e3c51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0366", "type": "seen", "source": "Telegram/jqHlZcVW7N6JZgqy4JNpu-JezM0Op8STZAFLGpCFPj_hssY", "content": "", "creation_timestamp": "2025-02-01T07:30:22.000000Z"}, {"uuid": "093c6cb8-f4f4-4664-aae9-6cd473b6535e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0308", "type": "seen", "source": "Telegram/KazCIgKnzit1pVzqZXsZDwvPUN3fR3H7F44F3DtrmoSM4o4", "content": "", "creation_timestamp": "2025-01-18T07:00:31.000000Z"}, {"uuid": "3dc6bb69-6024-4fb3-a944-70d3f4643bbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0316", "type": "seen", "source": "Telegram/a4ML4rJ7PDohDZy91Y3JO0IRrEPrVoHj-deWqwXuPbJrzb8", "content": "", "creation_timestamp": "2025-02-08T23:00:40.000000Z"}, {"uuid": "6de4c046-4a9c-4d6b-8a0a-e1bb7dbf1e82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0304", "type": "seen", "source": "Telegram/IerIdYHyCYjk9e9f3UzGGFXZvQWD23q4RzQI3MG9pl9FjTg", "content": "", "creation_timestamp": "2025-02-07T11:30:43.000000Z"}, {"uuid": "32dd5a1d-b9b7-478d-9c62-40fa9a03a212", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0303", "type": "seen", "source": "Telegram/IerIdYHyCYjk9e9f3UzGGFXZvQWD23q4RzQI3MG9pl9FjTg", "content": "", "creation_timestamp": "2025-02-07T11:30:43.000000Z"}, {"uuid": "991f936d-7724-4c17-ba83-4047e58dfb26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0396", "type": "published-proof-of-concept", "source": "Telegram/EdlCwQMwMIdhwHeNoKLza_SZaNDOtjZfoAllin0vhB-8XPA", "content": "", "creation_timestamp": "2025-01-13T23:02:33.000000Z"}, {"uuid": "3b5eaedf-9146-4dba-8fc0-eb8de808de0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "published-proof-of-concept", "source": "Telegram/UIIil_OEKPCpY2SMStXdCBJaH7xM-W5ZaJi2JXSjxGtvPOo", "content": "", "creation_timestamp": "2025-02-28T04:00:06.000000Z"}, {"uuid": "4de4659c-946d-4e13-bf28-4a723998e2f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0349", "type": "published-proof-of-concept", "source": "Telegram/9JyUOGlH1AFfvE2rWJplX_1VYzArBgajTKXA0RO0J9WqJQk", "content": "", "creation_timestamp": "2025-01-09T22:17:09.000000Z"}, {"uuid": "07707fe7-4e18-4e64-a75c-c2c013fac2f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0347", "type": "published-proof-of-concept", "source": "Telegram/-ZXHShNp33TiW6JXEA0T4wlSaPHWLNnpHtguMwoWiQkFpDU", "content": "", "creation_timestamp": "2025-01-09T11:30:12.000000Z"}, {"uuid": "cc10c7c2-5039-443b-850f-25dc6a30c755", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0340", "type": "seen", "source": "Telegram/6Xd0mzg1boItA1fZIUrpXyA0e6p4R1LDzXlQMvJO6o5GNhw", "content": "", "creation_timestamp": "2025-01-09T08:30:24.000000Z"}, {"uuid": "0decbb0e-9068-4b08-859c-435d6024cbc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0328", "type": "seen", "source": "Telegram/8yLQE_YHuFm2P9jfpZuMD16xPrzq90MvJfQF_ekftEGUX0o", "content": "", "creation_timestamp": "2025-01-09T06:30:28.000000Z"}, {"uuid": "4e35a9d0-d970-4685-ba7b-3c60ad17d27b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0306", "type": "seen", "source": "Telegram/orHfN9iURPgbf5_TRp1ZrcAP6UlCotnDHzRFOOskz-xdlp0", "content": "", "creation_timestamp": "2025-01-09T05:30:30.000000Z"}, {"uuid": "f2059334-7fe8-4626-836b-8b601fe6a178", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "published-proof-of-concept", "source": "Telegram/x-xQYLiT6c2KwAclOItHPJ6mMLNM1F62QdJruxX3gagbh9k", "content": "", "creation_timestamp": "2025-03-01T00:00:11.000000Z"}, {"uuid": "3bcc6d3f-8cef-4500-9af0-f0fea99954b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "Telegram/rku_lDFM50Y2tsB8sOK5kFmdDaTBp5BPVD7jmWhsBckzAZY", "content": "", "creation_timestamp": "2025-02-13T08:02:30.000000Z"}, {"uuid": "06ca0f7b-e870-48f7-bfad-cd65476fca40", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0360", "type": "seen", "source": "Telegram/KMaUn6LoquU53d7iffCrOSuKlQToZrYIsgCGQ54aBz77qLY", "content": "", "creation_timestamp": "2025-03-04T07:01:11.000000Z"}, {"uuid": "2a9b571d-29c1-4dad-a05d-a9e0023df53d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0359", "type": "seen", "source": "Telegram/KMaUn6LoquU53d7iffCrOSuKlQToZrYIsgCGQ54aBz77qLY", "content": "", "creation_timestamp": "2025-03-04T07:01:11.000000Z"}, {"uuid": "273d4126-a734-4a3e-a8f6-ee81b921e4bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0330", "type": "seen", "source": "Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y", "content": "", "creation_timestamp": "2025-03-20T13:05:08.000000Z"}, {"uuid": "ed5f15fc-e516-4e35-a679-3b3de15b3c4e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0312", "type": "seen", "source": "Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y", "content": "", "creation_timestamp": "2025-03-20T13:05:08.000000Z"}, {"uuid": "0f43991c-fae8-45a5-8125-686ea1ca6618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0317", "type": "seen", "source": "Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y", "content": "", "creation_timestamp": "2025-03-20T13:05:08.000000Z"}, {"uuid": "ff79ac7e-692f-4b7a-9acb-6461aa89fbe4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0313", "type": "seen", "source": "Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y", "content": "", "creation_timestamp": "2025-03-20T13:05:08.000000Z"}, {"uuid": "19be81bc-14fd-4afc-98a3-463444192487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0315", "type": "seen", "source": "Telegram/0tokKlWnGavu1g5EFwRDRnlGnj7brX6W2ajJgncmBMXjS3Y", "content": "", "creation_timestamp": "2025-03-20T13:05:08.000000Z"}, {"uuid": "634e30ba-f3df-4f62-ac6f-d1cd71fdd4d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0312", "type": "seen", "source": "Telegram/upPWP2sUMbEWnWlPNMmauyzdLInA1hngR5FV-CN2EdOX-IE", "content": "", "creation_timestamp": "2025-03-20T13:05:10.000000Z"}, {"uuid": "83b6d350-0fcc-4484-b43a-f8d4a2779e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://t.me/suboxone_chatroom/7437", "content": "CVE-2025-0376 and other: Multiple vulnerabilitites in GitLab, 4.2 - 8.7 rating\u2757\ufe0f\n\nWith the new release, GitLab has disclosed several vulnerabilities, including XSS injection, DoS and others.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/50gFr\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/02/12/patch-release-gitlab-17-8-2-released/", "creation_timestamp": "2025-04-01T12:37:19.000000Z"}, {"uuid": "cc59e08e-be60-4071-9207-043949538ca8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://t.me/purp_sec/339", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-23388 \u0438 CVE-2025-23389 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Rancher. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DOS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 Android, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u043e\u0442 05.03.2025.\n\n\ud83d\udd35CVE-2025-0364 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BigAnt Server, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0447\u0430\u0442\u0435 \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 PHP-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35CVE-2025-27423 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Vim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\n\u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c (\u0441\u0436\u0430\u0442\u044b\u0435 \u0438\u043b\u0438 \u043d\u0435\u0441\u0436\u0430\u0442\u044b\u0435) tar-\u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2025-0912 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PHP Object Injection \u0432 GiveWP, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u043e\u043d\u0430\u0442\u043e\u0432 \u0432 WordPress. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043e\u0431\u044a\u0435\u043a\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441. \u0415\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:25.399216Z"}, {"uuid": "ede109eb-9535-4598-acba-6449baa28996", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "https://t.me/purp_sec/351", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27607 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 python-json-logger, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f JSON-\u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c msgspec-python313-pre. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0430 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0441 \u0442\u0430\u043a\u0438\u043c \u0436\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u0438, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-0337 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now \u043e\u0442 ServiceNow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now.\n\n\ud83d\udd35CVE-2025-1316 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u043c\u0435\u0440\u0430\u0445 Edimax IC-7100 IP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0411\u043e\u0442\u043d\u0435\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Mirai \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u0430\u043c\u0435\u0440\u044b.\n\n\ud83d\udd35CVE-2024-50394 \u2014 CVE \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Helpdesk, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:26.062778Z"}, {"uuid": "ad5abdb4-46ff-4ac8-a42c-bab5dc96af5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5377", "content": "Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309) Please provide the text you would like me to summarize in 5 hashtags! https://blog.amberwolf.com/blog/2025/august/advisory---netskope-client-for-windows---local-privilege-escalation-via-rogue-server/", "creation_timestamp": "2026-08-02T00:00:08.515173Z"}, {"uuid": "b1143d6a-ca6f-40c1-aba5-7c248cc3249c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0337", "type": "seen", "source": "https://t.me/purp_sec/351", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-27607 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 python-json-logger, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f JSON-\u0436\u0443\u0440\u043d\u0430\u043b\u043e\u0432. \u0412 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e\u0441\u0442\u044c msgspec-python313-pre. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u043d\u0430 PyPI \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0441 \u0442\u0430\u043a\u0438\u043c \u0436\u0435 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435\u043c \u0438, \u0442\u0435\u043c \u0441\u0430\u043c\u044b\u043c, \u0441\u043e\u0432\u0435\u0440\u0448\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0443.\n\n\ud83d\udd35CVE-2025-0337 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now \u043e\u0442 ServiceNow, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0430\u043d\u043d\u044b\u043c, \u0445\u0440\u0430\u043d\u044f\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Now.\n\n\ud83d\udd35CVE-2025-1316 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043a\u0430\u043c\u0435\u0440\u0430\u0445 Edimax IC-7100 IP, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u0443\u0442\u0435\u043c \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u0411\u043e\u0442\u043d\u0435\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 Mirai \u0443\u0436\u0435 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044e\u0442 \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0435 \u043a\u0430\u043c\u0435\u0440\u044b.\n\n\ud83d\udd35CVE-2024-50394 \u2014 CVE \u0432 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0438 Helpdesk, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:08.844266Z"}, {"uuid": "356c6af4-82ec-40aa-8121-6111cc463df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7madfxm2a", "content": "Three days later, researchers published details of CVE-2025-0305, a use-after-free vulnerability in the Linux kernel's io_uring subsystem. The flaw affects virtually every distribution running kernel versions 5.10 through 6.13, granting unprivileged local users the ability to escalate to root.", "creation_timestamp": "2026-05-08T07:32:00.102751Z"}, {"uuid": "c27f8586-60aa-448a-ace5-d5f2c9ccc2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7mb7uwa2u", "content": "An attacker with access to a machine running local inference\u2014through a compromised application, a shared development server, or even a malicious model file\u2014could exploit CVE-2025-0305 to own the entire system.", "creation_timestamp": "2026-05-08T07:32:00.864215Z"}, {"uuid": "3694a650-f068-428e-b2af-059c3e9f4f94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7mc5gcm2w", "content": "They run stable LTS distributions specifically to avoid surprises. CVE-2025-0305 lived unpatched on LTS kernels for months because the vulnerability window opened after those versions shipped. Local inference adoption just put production workloads onto systems with known root exploits.", "creation_timestamp": "2026-05-08T07:32:01.626786Z"}, {"uuid": "6130b583-464b-428e-9596-eb25b294b216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0305", "type": "seen", "source": "https://bsky.app/profile/dusk-services.bsky.social/post/3mld7md2b5u2w", "content": "The cost savings from skipping API fees evaporate quickly if you're rebuilding security practices from scratch. The collision between ds4 and CVE-2025-0305 is a warning shot.", "creation_timestamp": "2026-05-08T07:32:02.439846Z"}, {"uuid": "d1623a5e-6128-4729-a352-f478f87265f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://t.me/purp_sec/339", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-23388 \u0438 CVE-2025-23389 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Rancher. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u0434\u0430\u0432\u0430\u0442\u044c \u0441\u0435\u0431\u044f \u0437\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c DOS-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35\u0411\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044c \u043f\u043e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Android \u2014 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e \u0441\u0432\u0435\u0436\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u041e\u0421 Android, \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043a \u043d\u0438\u043c \u043e\u0442 05.03.2025.\n\n\ud83d\udd35CVE-2025-0364 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 BigAnt Server, \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u043c \u0447\u0430\u0442\u0435 \u0434\u043b\u044f Windows, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0440\u0430\u0437\u0432\u0435\u0440\u043d\u0443\u0442\u044c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u0438 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0443 PHP-\u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35CVE-2025-27423 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u043c \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0435 Vim, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0438\n\u043f\u0440\u043e\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0442\u044c (\u0441\u0436\u0430\u0442\u044b\u0435 \u0438\u043b\u0438 \u043d\u0435\u0441\u0436\u0430\u0442\u044b\u0435) tar-\u0444\u0430\u0439\u043b\u044b \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35CVE-2025-0912 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c PHP Object Injection \u0432 GiveWP, \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c \u043f\u043b\u0430\u0433\u0438\u043d\u0435 \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0434\u043e\u043d\u0430\u0442\u043e\u0432 \u0432 WordPress. \u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 PHP-\u043e\u0431\u044a\u0435\u043a\u0442 \u0432 \u0437\u0430\u043f\u0440\u043e\u0441. \u0415\u0441\u043b\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u0435\u0442 POP-\u0446\u0435\u043f\u043e\u0447\u043a\u0430, \u044d\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 (RCE) \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:09.413631Z"}, {"uuid": "dacc0c62-3ffb-473f-b640-954448358bac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://t.me/purp_sec/195", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SMA1000 Appliance Management Console (AMC) \u0438 Central Management Console (CMC). \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041a\u0430\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 SonicWall, \u0435\u0435 \u0443\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\ud83d\udd35\u0421\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 CVE \u0432 GitLab \u2014 CVE-2025-0314 (\u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0444\u0430\u0439\u043b\u043e\u0432, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c), CVE-2024-11931 (\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0440\u043e\u0432\u043d\u044f \u00ab\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u00bb \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CI lint \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c CI/CD) \u0438 CVE-2024-6324 (\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0447\u0430\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0443 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043c\u0435\u0436\u0434\u0443 Epics).\n\n\ud83d\udd35CVE-2024-54507 \u2014 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 XNU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 macOS \u0438 iOS. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u043f\u0430\u0442\u0447\u0435\u043c \u043e\u0442 11 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f. CVE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 (sysctl), \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0438\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c.\n\n\ud83d\udd35CVE-2024-50050 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0434\u043d\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c opensource \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 GenAI. \u0424\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 pyzmq, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35CVE-2020-11023 \u2014 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u044f\u0442\u0438\u043b\u0435\u0442\u043d\u044e\u044e \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u044c, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 jQuery \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u0435\u0440\u0435\u0434\u0430\u0447\u0430 HTML-\u043a\u043e\u0434\u0430 (\u0441 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438  \u0438\u0437 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432) \u0432 \u043e\u0434\u0438\u043d \u0438\u0437 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 jQuery \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 DOM (.html(), .append() \u0438 \u0434\u0440\u0443\u0433\u0438\u0435) \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u041f\u0430\u0442\u0447 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0435\u0449\u0435 \u0432 2020 \u0433\u043e\u0434\u0443. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:14.814866Z"}, {"uuid": "86522e3b-8304-43b0-a408-c4a8fd22190b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://www.acn.gov.it/portale/w/vulnerabilita-in-prodotti-schneider-electric-11", "content": "", "creation_timestamp": "2026-05-12T04:05:34.000000Z"}, {"uuid": "e8354086-4b6e-41b0-aa57-dac31c42179d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0327", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mlnybqzs6w2w", "content": "\ud83d\udd17 CVE : CVE-2025-0327, CVE-2026-4827, CVE-2026-6332, CVE-2026-6866", "creation_timestamp": "2026-05-12T14:20:40.340949Z"}, {"uuid": "ba09d885-f493-46c3-b5cf-6f6b8835308f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0395", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "View CSAF\n\nSummary\n\nRuggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens Ruggedcom Rox are affected:\n\n\n\nRUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.8\nSiemens\nSiemens Ruggedcom Rox\nUncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13103\n<div class=\"csaf-accordion-content\">\n\nA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13104\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13106\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14192\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14193\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14194\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14195\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14196\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14197\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.0\n9.1\nCRITICAL\nCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14198\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14199\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14200\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14201\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14202\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14203\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14204\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2020-10648\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-2347\n<div class=\"csaf-accordion-content\">\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30552\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30790\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-34835\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the \"i2c md\" command enables the corruption of the return address pointer of the do_i2c_md function.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-3019\n<div class=\"csaf-accordion-content\">\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-27043\n<div class=\"csaf-accordion-content\">\n\nThe email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-3447\n<div class=\"csaf-accordion-content\">\n\nA heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-22365\n<div class=\"csaf-accordion-content\">\n\nlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57256\n<div class=\"csaf-accordion-content\">\n\nAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57258\n<div class=\"csaf-accordion-content\">\n\nInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-0395\n<div class=\"csaf-accordion-content\">\n\nWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-131 Incorrect Calculation of Buffer Size\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-3576\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-328 Use of Weak Hash\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6020\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9714\n<div class=\"csaf-accordion-content\">\n\nUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-46836\n<div class=\"csaf-accordion-content\">\n\nnet-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49794\n<div class=\"csaf-accordion-content\">\n\nA use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-825 Expired Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49796\n<div class=\"csaf-accordion-content\">\n\nA vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-577017 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-577017 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "692f6135-b138-4ea9-a9f8-5e7528289e07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://t.me/purp_sec/195", "content": "\u041d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0432\u0435\u0436\u0438\u0445 CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2025-23006 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 SMA1000 Appliance Management Console (AMC) \u0438 Central Management Console (CMC). \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445. \u0412 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u041e\u0421 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u041a\u0430\u043a \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u0442 SonicWall, \u0435\u0435 \u0443\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438.\n\n\ud83d\udd35\u0421\u0440\u0430\u0437\u0443 \u0442\u0440\u0438 CVE \u0432 GitLab \u2014 CVE-2025-0314 (\u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0442\u0438\u043f\u043e\u0432 \u0444\u0430\u0439\u043b\u043e\u0432, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c), CVE-2024-11931 (\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0443\u0440\u043e\u0432\u043d\u044f \u00ab\u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u00bb \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e CI lint \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c CI/CD) \u0438 CVE-2024-6324 (\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043d\u0430\u0447\u0430\u0442\u044c DoS-\u0430\u0442\u0430\u043a\u0443 \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u0446\u0438\u043a\u043b\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0441\u0441\u044b\u043b\u043e\u043a \u043c\u0435\u0436\u0434\u0443 Epics).\n\n\ud83d\udd35CVE-2024-54507 \u2014 \u043e\u0447\u0435\u043d\u044c \u0445\u043e\u0440\u043e\u0448\u0438\u0439 \u043e\u0431\u0437\u043e\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u044f\u0434\u0440\u0435 XNU, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u043c \u0432 macOS \u0438 iOS. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043e \u043f\u0430\u0442\u0447\u0435\u043c \u043e\u0442 11 \u0434\u0435\u043a\u0430\u0431\u0440\u044f \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u0432\u0441\u0435 \u0440\u0430\u0432\u043d\u043e \u0441\u0442\u043e\u0438\u0442 \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u044f. CVE \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 (sysctl), \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0438 \u0438\u043d\u044b\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430\u043c.\n\n\ud83d\udd35CVE-2024-50050 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043e\u0434\u043d\u043e\u043c \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u043c opensource \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0438 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u043d\u0430 GenAI. \u0424\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 pyzmq, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0447\u0435\u0440\u0435\u0437 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e.\n\n\ud83d\udd35CVE-2020-11023 \u2014 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u044f\u0442\u0438\u043b\u0435\u0442\u043d\u044e\u044e \u0434\u0430\u0432\u043d\u043e\u0441\u0442\u044c, XSS-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 jQuery \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u0442 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c\u0438. \u041f\u0435\u0440\u0435\u0434\u0430\u0447\u0430 HTML-\u043a\u043e\u0434\u0430 (\u0441 \u044d\u043b\u0435\u043c\u0435\u043d\u0442\u0430\u043c\u0438  \u0438\u0437 \u043d\u0435\u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0445 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u043e\u0432) \u0432 \u043e\u0434\u0438\u043d \u0438\u0437 \u043c\u0435\u0442\u043e\u0434\u043e\u0432 jQuery \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 DOM (.html(), .append() \u0438 \u0434\u0440\u0443\u0433\u0438\u0435) \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430. \u041f\u0430\u0442\u0447 \u0441 \u0440\u0435\u0448\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u0435\u0449\u0435 \u0432 2020 \u0433\u043e\u0434\u0443. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:09.755820Z"}, {"uuid": "6bff5118-2d6f-44b7-96db-fb0647e5082d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://t.me/brutsecurity/1353", "content": "CVE-2025-0314 and other: Multiple vulnerabilities in GitLab, 4.3 - 8.7 rating\u2757\ufe0f\n\nIn a recent advisory, GitLab writed about three vulnerabilities, including stored XSS, resource exhaustion, and protected CI/CD variables exfiltration.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BNKS8\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/01/22/patch-release-gitlab-17-8-1-released/", "creation_timestamp": "2026-07-09T03:00:10.136944Z"}, {"uuid": "61c72ad1-3680-4069-b587-400d5293e152", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://t.me/brutsecurity/1520", "content": "CVE-2025-0376 and other: Multiple vulnerabilitites in GitLab, 4.2 - 8.7 rating\u2757\ufe0f\n\nWith the new release, GitLab has disclosed several vulnerabilities, including XSS injection, DoS and others.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/50gFr\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/02/12/patch-release-gitlab-17-8-2-released/", "creation_timestamp": "2026-07-09T03:00:09.812386Z"}, {"uuid": "d3c871f9-469b-4af2-b00c-a9b6838c9823", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://t.me/brutsecurity/1353", "content": "CVE-2025-0314 and other: Multiple vulnerabilities in GitLab, 4.3 - 8.7 rating\u2757\ufe0f\n\nIn a recent advisory, GitLab writed about three vulnerabilities, including stored XSS, resource exhaustion, and protected CI/CD variables exfiltration.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BNKS8\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/01/22/patch-release-gitlab-17-8-1-released/", "creation_timestamp": "2026-07-10T00:00:33.809775Z"}, {"uuid": "e378d6cb-5de1-4516-9968-cc1bf559549f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://t.me/brutsecurity/1520", "content": "CVE-2025-0376 and other: Multiple vulnerabilitites in GitLab, 4.2 - 8.7 rating\u2757\ufe0f\n\nWith the new release, GitLab has disclosed several vulnerabilities, including XSS injection, DoS and others.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/50gFr\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/02/12/patch-release-gitlab-17-8-2-released/", "creation_timestamp": "2026-07-10T00:00:33.474587Z"}, {"uuid": "8a1a0351-aaaa-406a-9b37-ed1e2c62efab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://t.me/brutsecurity/1353", "content": "CVE-2025-0314 and other: Multiple vulnerabilities in GitLab, 4.3 - 8.7 rating\u2757\ufe0f\n\nIn a recent advisory, GitLab writed about three vulnerabilities, including stored XSS, resource exhaustion, and protected CI/CD variables exfiltration.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BNKS8\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/01/22/patch-release-gitlab-17-8-1-released/", "creation_timestamp": "2026-07-11T15:00:05.266170Z"}, {"uuid": "6555bbd1-f655-410d-9d86-d204c4104567", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://t.me/brutsecurity/1520", "content": "CVE-2025-0376 and other: Multiple vulnerabilitites in GitLab, 4.2 - 8.7 rating\u2757\ufe0f\n\nWith the new release, GitLab has disclosed several vulnerabilities, including XSS injection, DoS and others.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/50gFr\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/02/12/patch-release-gitlab-17-8-2-released/", "creation_timestamp": "2026-07-11T15:00:05.585747Z"}, {"uuid": "9c75720e-dfbb-4e96-b888-366b0a685e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0314", "type": "seen", "source": "https://t.me/brutsecurity/1353", "content": "CVE-2025-0314 and other: Multiple vulnerabilities in GitLab, 4.3 - 8.7 rating\u2757\ufe0f\n\nIn a recent advisory, GitLab writed about three vulnerabilities, including stored XSS, resource exhaustion, and protected CI/CD variables exfiltration.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/BNKS8\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/01/22/patch-release-gitlab-17-8-1-released/", "creation_timestamp": "2026-07-12T00:00:47.068949Z"}, {"uuid": "f1fb1cbf-1ab1-4181-ba13-fb4304e71db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0376", "type": "seen", "source": "https://t.me/brutsecurity/1520", "content": "CVE-2025-0376 and other: Multiple vulnerabilitites in GitLab, 4.2 - 8.7 rating\u2757\ufe0f\n\nWith the new release, GitLab has disclosed several vulnerabilities, including XSS injection, DoS and others.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/50gFr\n\ud83d\udc49 Dork: http.favicon.hash_sha256:72a2cad5025aa931d6ea56c3201d1f18e68a8cd39788c7c80d5b2b82aa5143ef OR http.headers.set_cookie:\"gitlab\" OR http.headers.location:\"gitlab\"\n\nVendor's advisory: https://about.gitlab.com/releases/2025/02/12/patch-release-gitlab-17-8-2-released/", "creation_timestamp": "2026-07-12T00:00:47.305444Z"}, {"uuid": "ff3cf498-fa89-4207-8c6a-641aeaca54ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "seen", "source": "https://t.me/cyberwarehouse/725", "content": "vulncheck-oss/cve-2025-0364: CVE-2025-0364: BigAnt Server RCE Exploit\nhttps://github.com/vulncheck-oss/cve-2025-0364", "creation_timestamp": "2026-07-26T02:00:13.692914Z"}, {"uuid": "95506cd9-8ac7-4522-abb8-296f7ee43635", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0364", "type": "published-proof-of-concept", "source": "https://t.me/cyberwarehouse/725", "content": "vulncheck-oss/cve-2025-0364: CVE-2025-0364: BigAnt Server RCE Exploit\nhttps://github.com/vulncheck-oss/cve-2025-0364", "creation_timestamp": "2026-07-27T00:00:28.863270Z"}, {"uuid": "ca272ca1-ab72-4658-bf0a-b4fbef5ceabd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://t.me/reverseame/5377", "content": "Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309) Please provide the text you would like me to summarize in 5 hashtags! https://blog.amberwolf.com/blog/2025/august/advisory---netskope-client-for-windows---local-privilege-escalation-via-rogue-server/", "creation_timestamp": "2026-07-29T12:02:02.027879Z"}, {"uuid": "321fa027-bb97-4d0b-b980-22cf21035f39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://t.me/reverseame/5377", "content": "Advisory - Netskope Client for Windows - Local Privilege Escalation via Rogue Server (CVE-2025-0309) Please provide the text you would like me to summarize in 5 hashtags! https://blog.amberwolf.com/blog/2025/august/advisory---netskope-client-for-windows---local-privilege-escalation-via-rogue-server/", "creation_timestamp": "2026-07-30T00:02:13.309563Z"}, {"uuid": "7ef90911-0b36-4f53-86cd-d4a0e862f309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "seen", "source": "https://t.me/purp_sec/1447", "content": "Bypass \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f CVE-2025-0309 (LPE \u0432 Netskope Client \u0434\u043b\u044f Windows)\n\nCVE-2025-0309 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043b\u0438\u0435\u043d\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 CA-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 MSI-\u043f\u0430\u043a\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM.\n\n\u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2025 \u0433\u043e\u0434\u0430 Netskope \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443: enrolment hostname \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u043e\u043c *.goskope.com. \u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0431\u044b\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 subdomain check \u0431\u0435\u0437 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (\u0447\u0435\u0440\u0435\u0437 \u0442\u043e\u0442 \u0436\u0435 TLS/\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c). \u0422\u0430\u043a \u0447\u0442\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0445\u0432\u0430\u0442\u0438\u043b\u043e Netskope Reverse Proxy (*.rproxy.goskope.com), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b unauthenticated passthrough \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, *.azurewebsites.net.rproxy.goskope.com \u0438 *.azureedge.net.rproxy.goskope.com.\n\n\u0421\u0445\u0435\u043c\u0430 \u043f\u0440\u043e\u0441\u0442\u0430\u044f:\n\n\ud83d\udd34\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442 rogue-\u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 Azure App Service (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, addon-test.azurewebsites.net)\n\ud83d\udd34\u0414\u043e\u0441\u0442\u0443\u043f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 addon-test.azurewebsites.net.rproxy.goskope.com \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\ud83d\udd34\u041a\u043b\u0438\u0435\u043d\u0442 \u0432\u0438\u0434\u0438\u0442 \u0434\u043e\u043c\u0435\u043d \u043a\u0430\u043a \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d *.goskope.com, \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\n\ud83d\udd34\u041a\u043b\u0438\u0435\u043d\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c\u0443 rogue-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e\n\ud83d\udd34\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 IPC-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 enroll \u0438 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c hostname. \u0427\u0435\u0440\u0435\u0437 ~30 \u0441\u0435\u043a\u0443\u043d\u0434 rogue-\u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 cmd.exe \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 SYSTEM.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-14T18:00:06.646518Z"}, {"uuid": "9ac36c78-f40c-4959-8722-afb417bcb508", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-0309", "type": "published-proof-of-concept", "source": "https://t.me/purp_sec/1447", "content": "Bypass \u043f\u0430\u0442\u0447\u0430 \u0434\u043b\u044f CVE-2025-0309 (LPE \u0432 Netskope Client \u0434\u043b\u044f Windows)\n\nCVE-2025-0309 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u0437\u0430\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043a\u043b\u0438\u0435\u043d\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u043e\u043c\u0443 \u0441\u0435\u0440\u0432\u0435\u0440\u0443. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435 \u043a\u043b\u0438\u0435\u043d\u0442 \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u043b \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 CA-\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0438 MSI-\u043f\u0430\u043a\u0435\u0442, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u043e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM.\n\n\u0412 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2025 \u0433\u043e\u0434\u0430 Netskope \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447, \u0434\u043e\u0431\u0430\u0432\u0438\u0432 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0443\u044e \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443: enrolment hostname \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d\u043e\u043c *.goskope.com. \u041e\u0434\u043d\u0430\u043a\u043e \u044d\u0442\u043e \u0431\u044b\u043b \u043f\u0440\u043e\u0441\u0442\u043e\u0439 subdomain check \u0431\u0435\u0437 \u0432\u0435\u0440\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0433\u043e \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (\u0447\u0435\u0440\u0435\u0437 \u0442\u043e\u0442 \u0436\u0435 TLS/\u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442 \u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c). \u0422\u0430\u043a \u0447\u0442\u043e \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u0445\u0432\u0430\u0442\u0438\u043b\u043e Netskope Reverse Proxy (*.rproxy.goskope.com), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u043b unauthenticated passthrough \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0434\u043e\u043c\u0435\u043d\u043e\u0432, \u0432 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, *.azurewebsites.net.rproxy.goskope.com \u0438 *.azureedge.net.rproxy.goskope.com.\n\n\u0421\u0445\u0435\u043c\u0430 \u043f\u0440\u043e\u0441\u0442\u0430\u044f:\n\n\ud83d\udd34\u0410\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442 rogue-\u0441\u0435\u0440\u0432\u0435\u0440 \u043d\u0430 Azure App Service (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, addon-test.azurewebsites.net)\n\ud83d\udd34\u0414\u043e\u0441\u0442\u0443\u043f \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 addon-test.azurewebsites.net.rproxy.goskope.com \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438\n\ud83d\udd34\u041a\u043b\u0438\u0435\u043d\u0442 \u0432\u0438\u0434\u0438\u0442 \u0434\u043e\u043c\u0435\u043d \u043a\u0430\u043a \u043f\u043e\u0434\u0434\u043e\u043c\u0435\u043d *.goskope.com, \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442\n\ud83d\udd34\u041a\u043b\u0438\u0435\u043d\u0442 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u043a \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u043c\u0443 rogue-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e\n\ud83d\udd34\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u043d\u0438\u0437\u043a\u043e\u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442 IPC-\u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0435 \u0441 \u043a\u043e\u043c\u0430\u043d\u0434\u043e\u0439 enroll \u0438 \u043f\u0440\u043e\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c hostname. \u0427\u0435\u0440\u0435\u0437 ~30 \u0441\u0435\u043a\u0443\u043d\u0434 rogue-\u0441\u0435\u0440\u0432\u0435\u0440 \u0437\u0430\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u043a\u043b\u0438\u0435\u043d\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0438\u0435 \u043a \u0437\u0430\u043f\u0443\u0441\u043a\u0443 cmd.exe \u043e\u0442 \u0438\u043c\u0435\u043d\u0438 SYSTEM.\n\n\u041f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u043f\u043e \u0441\u0441\u044b\u043b\u043a\u0435.\n\n#red_team", "creation_timestamp": "2026-09-15T00:00:11.325396Z"}]}