{"vulnerability": "2025-17", "sightings": [{"uuid": "8d8406f4-6850-4c1c-8f5d-04bcb888b63e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-1723", "type": "seen", "source": "https://bsky.app/profile/shiojiri.com/post/3ljm6g4mvv224", "content": "", "creation_timestamp": "2025-03-05T04:48:03.602565Z"}, {"uuid": "81c9c632-7b34-49ad-896e-3b316eb5e4b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3ljmavankje2k", "content": "", "creation_timestamp": "2025-03-05T05:32:18.105226Z"}, {"uuid": "9ce0ec18-b10f-447c-9034-b606ae0fae8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lkea5pvarj26", "content": "", "creation_timestamp": "2025-03-14T18:23:04.133122Z"}, {"uuid": "066b08e7-d004-42dd-b864-ac9e9a1e5294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3ljaea3665h2z", "content": "", "creation_timestamp": "2025-02-28T12:00:05.969731Z"}, {"uuid": "5e98a2ad-fbaf-4473-a2e5-3ad2261edbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3ll5hsqjkpv2y", "content": "", "creation_timestamp": "2025-03-24T19:16:37.859852Z"}, {"uuid": "d20c9246-38ad-4677-8e21-552d57af29ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1774", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lklphuq5gl2m", "content": "", "creation_timestamp": "2025-03-17T17:45:53.257795Z"}, {"uuid": "a4a133fd-7b37-4c1e-b097-b96137d093c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1744", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114081745156546660", "content": "", "creation_timestamp": "2025-02-28T13:28:05.851314Z"}, {"uuid": "d4b2b721-5dbc-469f-8ff5-719fede314dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1728", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj4jzu6iwz2c", "content": "", "creation_timestamp": "2025-02-26T23:33:24.324604Z"}, {"uuid": "e0aafa07-ee88-4ee9-a22f-56bc7c5065c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114098943959050372", "content": "", "creation_timestamp": "2025-03-03T14:21:58.578877Z"}, {"uuid": "b808afa6-05cf-4f56-bc50-1e9b7d75f000", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1707", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114150716659663091", "content": "", "creation_timestamp": "2025-03-12T17:48:28.365211Z"}, {"uuid": "cf786e10-5243-4093-b367-f73eb8a7e62e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27", "content": "", "creation_timestamp": "2025-03-14T06:25:41.529941Z"}, {"uuid": "a563cfdc-b11f-4d19-bf30-f52775290132", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "https://bsky.app/profile/remirepo.bsky.social/post/3lkcy2yftts27", "content": "", "creation_timestamp": "2025-03-14T06:25:41.384318Z"}, {"uuid": "06417223-c21f-45e9-96fb-81273d7cc9b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1796", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksr452mrb2w", "content": "", "creation_timestamp": "2025-03-20T13:03:45.563560Z"}, {"uuid": "a853daac-ed3c-4ae5-b88a-453781ce7e04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ljt3nh75y22q", "content": "", "creation_timestamp": "2025-03-07T22:47:08.722455Z"}, {"uuid": "c86e443d-f068-4bfb-87ae-56b3e7d8ebf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ll4qtbygzs25", "content": "", "creation_timestamp": "2025-03-24T12:25:20.592756Z"}, {"uuid": "08b6c766-58c0-4197-9eb1-b56c56e8d78c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://bsky.app/profile/chrisshort.net/post/3lkewby7iur2x", "content": "", "creation_timestamp": "2025-03-15T00:59:08.408406Z"}, {"uuid": "d578492b-96bb-4c17-b876-1dd70dc466f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://hachyderm.io/users/ChrisShort/statuses/114163734880254545", "content": "", "creation_timestamp": "2025-03-15T00:59:10.003412Z"}, {"uuid": "4367df07-abe6-49d9-90e7-4e8238e0da20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://bsky.app/profile/zigmax.bsky.social/post/3lkezuwaid22k", "content": "", "creation_timestamp": "2025-03-15T02:03:24.745187Z"}, {"uuid": "2a71a0aa-cb59-46f9-a89c-c8bbc22f6b32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1717", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114075218651181708", "content": "", "creation_timestamp": "2025-02-27T09:48:19.245597Z"}, {"uuid": "2cbdd989-f5fa-4360-a014-c265f9b3f763", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "seen", "source": "https://bsky.app/profile/cyberalerts.bsky.social/post/3lkffynojlz2m", "content": "", "creation_timestamp": "2025-03-15T05:40:15.230279Z"}, {"uuid": "9931cecb-6271-434d-993d-9e9a9a842484", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114164872072924655", "content": "", "creation_timestamp": "2025-03-15T05:48:22.251894Z"}, {"uuid": "e4484d73-7c27-4144-a06d-9454680dc4bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1724", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkkuoljt5326", "content": "", "creation_timestamp": "2025-03-17T09:46:21.974176Z"}, {"uuid": "8410a263-19bc-433f-9504-4a335fcc41ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1770", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114193892112713477", "content": "", "creation_timestamp": "2025-03-20T08:48:32.932012Z"}, {"uuid": "17ff4d1f-b43d-426b-ba28-e854aaf118eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1702", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljndxyq3w42u", "content": "", "creation_timestamp": "2025-03-05T16:00:12.774391Z"}, {"uuid": "7a5d7f37-49a9-4eb5-ae8c-2f293a0f3fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfo565af326", "content": "", "creation_timestamp": "2025-03-15T08:05:56.245303Z"}, {"uuid": "1c5fbc9f-62c1-48d3-8ef4-e5262889d9ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1773", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkfqwncqot2h", "content": "", "creation_timestamp": "2025-03-15T08:55:58.609687Z"}, {"uuid": "0db4cb07-c5f0-48ff-96d1-57cf8d3f14e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1770", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomi4ed2w", "content": "", "creation_timestamp": "2025-03-20T09:03:30.579582Z"}, {"uuid": "9fa9b98d-110a-42ff-b5d0-b2ca11767f54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1766", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lksdomsi7j2l", "content": "", "creation_timestamp": "2025-03-20T09:03:32.276226Z"}, {"uuid": "6b69b02a-f62f-4bfc-b2ef-6d2b674ac909", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114076163472607966", "content": "", "creation_timestamp": "2025-02-27T13:48:36.516650Z"}, {"uuid": "ce8ec6f2-dda0-49f3-bfb0-71ce911d8045", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj62nkx4ne2p", "content": "", "creation_timestamp": "2025-02-27T14:03:21.738874Z"}, {"uuid": "6d961fa3-79c0-49ef-bece-3d3b45b36515", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114076566903576306", "content": "", "creation_timestamp": "2025-02-27T15:31:12.131352Z"}, {"uuid": "087b5792-a056-49ed-ab01-53403b7fe99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asic76r2w", "content": "", "creation_timestamp": "2025-02-27T15:53:29.166018Z"}, {"uuid": "ba3ae0f8-9c73-4819-ad4b-76c7b92ae25c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1738", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6asjgo6a2v", "content": "", "creation_timestamp": "2025-02-27T15:53:31.732452Z"}, {"uuid": "0c9c06b9-16d3-45eb-8386-904ee10c1392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1756", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114076927570984469", "content": "", "creation_timestamp": "2025-02-27T17:02:55.284127Z"}, {"uuid": "27a346f3-6ebb-4582-b37b-9c482803f2f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1755", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114076927570984469", "content": "", "creation_timestamp": "2025-02-27T17:02:55.354777Z"}, {"uuid": "2c85a128-44da-4a6e-9b13-e6c7bcefa8e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "https://bsky.app/profile/remirepo.bsky.social/post/3lkn5b43pwc2d", "content": "", "creation_timestamp": "2025-03-18T07:25:12.952354Z"}, {"uuid": "7f2d684a-7ee0-48a9-888a-e43c246ea9c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "https://bsky.app/profile/remirepo.bsky.social/post/3lkn5b43pwc2d", "content": "", "creation_timestamp": "2025-03-18T07:25:13.106927Z"}, {"uuid": "9701b2fd-fa22-4f4f-89af-b99e87460d70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1756", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj6hjgazl526", "content": "", "creation_timestamp": "2025-02-27T17:53:44.119031Z"}, {"uuid": "aea1d3cb-aebe-4411-b5be-fcce673ac878", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-1751", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/114077473309699844", "content": "", "creation_timestamp": "2025-02-27T19:21:42.442916Z"}, {"uuid": "e45311f2-05b4-4dd0-9b33-ffc049c5548e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://bsky.app/profile/darkwebinformer.bsky.social/post/3lj6mgurvtl2r", "content": "", "creation_timestamp": "2025-02-27T19:21:46.488927Z"}, {"uuid": "89ca3a15-0951-4a79-a77f-2674a209ecbb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lkfxunefl72t", "content": "", "creation_timestamp": "2025-03-15T11:00:10.532970Z"}, {"uuid": "3001e224-2f3d-469a-a301-de54dc882a55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lkl5xmdc4s2p", "content": "", "creation_timestamp": "2025-03-17T12:32:28.992763Z"}, {"uuid": "7e28fc05-0986-4990-88b0-590ac979e272", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1783", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljujwnet3b2e", "content": "", "creation_timestamp": "2025-03-08T12:35:26.812356Z"}, {"uuid": "68127d78-23ae-4dee-a9d4-43c627fe9c1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://bsky.app/profile/vulnalerts.bsky.social/post/3lj73ymwtee26", "content": "", "creation_timestamp": "2025-02-28T00:00:07.189005Z"}, {"uuid": "ba0587c3-57e4-428f-bbcb-662f743d5463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ljhky6hfrb2b", "content": "", "creation_timestamp": "2025-03-03T08:49:35.615437Z"}, {"uuid": "439c1fde-0af4-4da3-80c4-b41992b14646", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lkqtnbmrbp2j", "content": "", "creation_timestamp": "2025-03-19T18:43:44.484527Z"}, {"uuid": "d52010cb-33db-400c-8d53-97fbe48a2a1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114097868326515021", "content": "", "creation_timestamp": "2025-03-03T09:48:25.913613Z"}, {"uuid": "6113e30e-6a6b-4546-aa85-c8a8c443f0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-151/", "content": "", "creation_timestamp": "2025-03-18T04:00:00.000000Z"}, {"uuid": "79b44948-7970-4bc2-a89a-d1d7be4e3f74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1713", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lj7h5k4eo523", "content": "", "creation_timestamp": "2025-02-28T03:19:42.498442Z"}, {"uuid": "bab51335-b207-449f-aed3-87a7c4806a3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1744", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phjxwmy2y", "content": "", "creation_timestamp": "2025-02-28T05:48:28.628615Z"}, {"uuid": "a6c0be7b-d366-45d7-8f37-1d729226a486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1757", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lj7phl2w3x2w", "content": "", "creation_timestamp": "2025-02-28T05:48:30.992001Z"}, {"uuid": "b4174a25-f6cc-464b-b647-2bf92ea694bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://bsky.app/profile/dinosn.bsky.social/post/3ljlzydyjbs2i", "content": "", "creation_timestamp": "2025-03-05T03:28:48.058639Z"}, {"uuid": "d20f2f48-c923-49fe-8194-b8a8dd596934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1798", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2wpgz24", "content": "", "creation_timestamp": "2025-03-25T08:49:29.107893Z"}, {"uuid": "e469ee85-7bd8-4587-9000-66301be7c398", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lkea5pp6o62d", "content": "", "creation_timestamp": "2025-03-14T18:23:03.375422Z"}, {"uuid": "49ed5dc5-6178-434f-bcdf-d4faa046f5fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lt7xupuihui2", "content": "", "creation_timestamp": "2025-07-05T14:32:27.137798Z"}, {"uuid": "95fc9b3c-bcfc-49ed-9ca9-a372931439aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1793", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114630656268628342", "content": "", "creation_timestamp": "2025-06-05T12:03:24.725910Z"}, {"uuid": "6fc06e68-cd6e-4539-a7f7-31f39a03dc0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-10", "content": "", "creation_timestamp": "2025-07-10T10:00:00.000000Z"}, {"uuid": "8f43b1f9-a4b0-464e-b061-c4c42efc3f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1750", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmncn4ceyx2", "content": "", "creation_timestamp": "2025-06-02T11:11:14.889497Z"}, {"uuid": "1973272b-c652-4794-808a-28a963c7dbf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/mrkoot.bsky.social/post/3ltry5banc223", "content": "", "creation_timestamp": "2025-07-12T18:23:42.326104Z"}, {"uuid": "544f20f0-563b-4c0a-88b7-59ed9ed54903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1792", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqfkeyiu3re2", "content": "", "creation_timestamp": "2025-05-30T15:31:44.925702Z"}, {"uuid": "6acc0caa-e74b-4663-8a9e-a24721c0a2fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1750", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114613801153099153", "content": "", "creation_timestamp": "2025-06-02T12:36:56.402816Z"}, {"uuid": "0873dadd-964d-4e12-9510-cb02176e3283", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1737", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb3qvnyqk2r", "content": "", "creation_timestamp": "2025-07-06T01:13:06.109379Z"}, {"uuid": "589158d2-3a1d-4d0b-b9d7-361643b2a2f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3ltn4r64xke2a", "content": "", "creation_timestamp": "2025-07-10T20:03:03.304788Z"}, {"uuid": "a8a6ec33-4607-492f-84ea-b71ea93cda84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1750", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqmufc74vx2s", "content": "", "creation_timestamp": "2025-06-02T13:17:39.102942Z"}, {"uuid": "baed5066-32ab-42a1-8617-b1fb64842fd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltst6l2nkk2m", "content": "", "creation_timestamp": "2025-07-13T02:27:33.572712Z"}, {"uuid": "c59092c5-c00c-4242-b1f0-a8d1fd2fb1f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1772", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb62kz44s2a", "content": "", "creation_timestamp": "2025-07-06T01:54:15.313481Z"}, {"uuid": "8754f4c6-c0cb-43fc-bca4-fcaa3e98ab0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lttch2p2js2y", "content": "", "creation_timestamp": "2025-07-13T07:00:44.972991Z"}, {"uuid": "4671bd32-56b0-49ed-8188-c9261852447a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/solidot.bsky.social/post/3ltyxirjtkm2e", "content": "", "creation_timestamp": "2025-07-15T13:00:49.168793Z"}, {"uuid": "68e6dc53-817e-454e-a848-ab724e0f605a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://bsky.app/profile/axcheron.bsky.social/post/3ltkbxyml6c2n", "content": "", "creation_timestamp": "2025-07-09T16:58:23.726357Z"}, {"uuid": "f9869d79-b878-4be6-8b8a-423b955af68c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1793", "type": "seen", "source": "https://bsky.app/profile/checkmarxzero.bsky.social/post/3lqva3flhq724", "content": "", "creation_timestamp": "2025-06-05T21:08:11.962725Z"}, {"uuid": "34e64d11-d52f-4018-b573-63a3872a2d63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-c9842170-13df33761d6aa3d7", "content": "", "creation_timestamp": "2025-07-15T14:31:49.791163Z"}, {"uuid": "a6c8a903-3187-4174-b275-3e6024bc2df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114338036274546789", "content": "", "creation_timestamp": "2025-04-14T19:46:18.053695Z"}, {"uuid": "787cf966-4984-48d5-a910-ac961cec4903", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsf3ccgat2g", "content": "", "creation_timestamp": "2025-04-14T20:18:49.449998Z"}, {"uuid": "f469fbb2-bba3-4c19-b172-e070ab99d147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114338279817379213", "content": "", "creation_timestamp": "2025-04-14T20:48:15.192008Z"}, {"uuid": "4412a4e5-1d82-4f64-a5aa-01bdb9eb66a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://bsky.app/profile/cecallihelper.bsky.social/post/3lmuduoifk22u", "content": "", "creation_timestamp": "2025-04-15T15:02:34.801586Z"}, {"uuid": "93d05eca-ec1e-4f88-8aaa-d009f40fe555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1713", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lrblz4zh6c2e", "content": "", "creation_timestamp": "2025-06-10T19:13:37.932417Z"}, {"uuid": "f1edbbde-6dd0-4b52-9f8e-45ea83a49536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1704", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmy3rydzlv2l", "content": "", "creation_timestamp": "2025-04-17T02:48:38.227238Z"}, {"uuid": "e61c787f-8603-4834-b02d-7740b1903843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/undercodenews.bsky.social/post/3lt4wacpvje2l", "content": "", "creation_timestamp": "2025-07-04T09:23:38.732372Z"}, {"uuid": "a28252ed-c19d-4692-92ce-8716d6e69a30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1704", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114353854618971143", "content": "", "creation_timestamp": "2025-04-17T14:49:06.719289Z"}, {"uuid": "da6c5767-a669-49e3-b1e7-a13b38f2978a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3ltze75nke22h", "content": "", "creation_timestamp": "2025-07-15T16:48:08.680464Z"}, {"uuid": "f3bd74ba-7f26-4afd-81dc-3155f045abf4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/mm-ilsoftware-bot.bsky.social/post/3ltziawzbrd2i", "content": "", "creation_timestamp": "2025-07-15T18:00:39.845487Z"}, {"uuid": "3049055b-ee4a-4826-917f-a859fbe8ae79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3ltzmrlr5xh2q", "content": "", "creation_timestamp": "2025-07-15T19:21:33.379931Z"}, {"uuid": "ec20bd69-e641-4d0c-9e30-98e6ecfb2fd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpkht6a4cf2i", "content": "", "creation_timestamp": "2025-05-19T21:02:15.830370Z"}, {"uuid": "25370330-2a53-456e-960b-36211cf54280", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1706", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpdrl2wynm2j", "content": "", "creation_timestamp": "2025-05-17T05:08:02.734378Z"}, {"uuid": "a8d7b525-5a42-416c-ab38-a9823809fc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-8e663f79-45a3417748370530", "content": "", "creation_timestamp": "2025-04-22T06:11:45.798019Z"}, {"uuid": "7f7c43a5-54db-4e81-8e61-f14954484459", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-8e663f79-45a3417748370530", "content": "", "creation_timestamp": "2025-04-22T06:11:45.883349Z"}, {"uuid": "56f8837e-fc72-4dac-950e-820b1226f8ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gm6mo32b", "content": "", "creation_timestamp": "2025-04-22T07:04:41.667865Z"}, {"uuid": "50ca9707-2d59-4074-9fd7-da9d165d50af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gmmmco2c", "content": "", "creation_timestamp": "2025-04-22T07:04:43.949837Z"}, {"uuid": "1cd46d7a-ac26-4442-bb0e-4dd6c626cb6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1778", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqwhtvl7zt2j", "content": "", "creation_timestamp": "2025-06-06T08:59:48.077647Z"}, {"uuid": "4196f093-ad3a-4614-a91e-60709903d2d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/alcolol.zone/post/3ltu6tbhvjs2d", "content": "", "creation_timestamp": "2025-07-13T15:28:41.593815Z"}, {"uuid": "73b58227-8472-44b6-a5ff-9482e7e1e487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1777", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqwi4tzrbu2m", "content": "", "creation_timestamp": "2025-06-06T09:04:48.443991Z"}, {"uuid": "15387219-53da-430a-b53e-c69610328c46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114381831754523230", "content": "", "creation_timestamp": "2025-04-22T13:24:03.778818Z"}, {"uuid": "84408c53-8280-4376-b579-75934f0a8af6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lnhidyaump2z", "content": "", "creation_timestamp": "2025-04-23T05:43:17.510787Z"}, {"uuid": "ccfaf58f-378c-4893-9885-c586b14da39c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/hnsec.infosec.exchange.ap.brid.gy/post/3lnhkazh7b7w2", "content": "", "creation_timestamp": "2025-04-23T06:20:52.386884Z"}, {"uuid": "f093ac31-bb29-4e00-9d55-97a486cb3c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lnhknrngjq2a", "content": "", "creation_timestamp": "2025-04-23T06:24:32.974523Z"}, {"uuid": "523691c9-6950-4f9b-8751-8d1e6e15ffac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3ltd65rwa322u", "content": "", "creation_timestamp": "2025-07-06T21:01:22.262539Z"}, {"uuid": "738d5816-65b5-42ed-8ab7-fabc176be82e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-1731", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114387399777458382", "content": "", "creation_timestamp": "2025-04-23T13:00:05.357215Z"}, {"uuid": "192c52a6-5f74-4342-b76b-5b54ee073576", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lniodnr2gz2z", "content": "", "creation_timestamp": "2025-04-23T17:03:09.642133Z"}, {"uuid": "6adcdc4e-0067-4aa9-949d-913f638d0e51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lniodnr2gz2z", "content": "", "creation_timestamp": "2025-04-23T17:03:09.723027Z"}, {"uuid": "d4fb3359-9a7e-417c-abd8-726a448db4eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lnji2e7ugn2g", "content": "", "creation_timestamp": "2025-04-24T00:43:13.725654Z"}, {"uuid": "d746bc42-e472-49bd-977c-a598c93e9cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lnji2e7ugn2g", "content": "", "creation_timestamp": "2025-04-24T00:43:13.818932Z"}, {"uuid": "6dcc1c92-9fcd-4811-9550-d7bbaad1dcb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lnjjjgyifn2u", "content": "", "creation_timestamp": "2025-04-24T01:09:33.178502Z"}, {"uuid": "1b2d2bf2-545e-47c7-b1ff-5237a7d6b4f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://bsky.app/profile/r-netsec.bsky.social/post/3lnjjjgyifn2u", "content": "", "creation_timestamp": "2025-04-24T01:09:33.278996Z"}, {"uuid": "f2af60f7-44bb-4263-95f6-bc7cdce32322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lnkcsbiupb2j", "content": "", "creation_timestamp": "2025-04-24T08:41:53.148944Z"}, {"uuid": "a7b3295f-1760-4136-b0e8-d401144a3e87", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lnkcsbiupb2j", "content": "", "creation_timestamp": "2025-04-24T08:41:53.247924Z"}, {"uuid": "79dcf8d3-c1c3-4f12-972a-15be2f2d4e7f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1701", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114625352750029021", "content": "", "creation_timestamp": "2025-06-04T13:34:39.414692Z"}, {"uuid": "720f37b2-b976-4b65-81c3-416c9989eeb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/securitylab-jp.bsky.social/post/3ltdi7zxfhk2e", "content": "", "creation_timestamp": "2025-07-07T00:01:38.463717Z"}, {"uuid": "cae128ed-7db9-4a21-846e-9d4933eb7af7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1701", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrytobufog2", "content": "", "creation_timestamp": "2025-06-04T14:21:03.182758Z"}, {"uuid": "240b1382-43fe-49cc-85bf-9d130ad99d5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/redteamnews.bsky.social/post/3lnkugmoxff2z", "content": "", "creation_timestamp": "2025-04-24T13:57:29.333299Z"}, {"uuid": "2f99ebf6-e4f5-41f8-a201-731fe8212a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1763", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnliq7rlbk2f", "content": "", "creation_timestamp": "2025-04-24T20:00:47.865391Z"}, {"uuid": "d9574ad1-6f79-4af4-b07e-fef0cfd25bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-1731", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-552c5871-8c42dbefd8e7612e", "content": "", "creation_timestamp": "2025-04-26T04:43:24.800479Z"}, {"uuid": "f1032b95-49dd-4ef9-adab-03622c535259", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1725", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqoxt2zripi2", "content": "", "creation_timestamp": "2025-06-03T09:27:51.321358Z"}, {"uuid": "f987cc75-eca6-41c1-93ad-f483cf9dd090", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/pmloik.bsky.social/post/3ltvdmnlkzp2h", "content": "", "creation_timestamp": "2025-07-14T02:27:06.070254Z"}, {"uuid": "14956135-f6a0-4076-8e7e-8e4c9ab8ab5a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lt53y6xj2m2o", "content": "", "creation_timestamp": "2025-07-04T11:06:29.281648Z"}, {"uuid": "f87d479b-b409-4ac3-b2e2-3726e1c66e81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1701", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqsbnv3j3b2e", "content": "", "creation_timestamp": "2025-06-04T16:58:24.621082Z"}, {"uuid": "4945cbce-5bc0-48ef-ac97-f410e70eec38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/tamosan.bsky.social/post/3lu2bczrq662f", "content": "", "creation_timestamp": "2025-07-16T01:29:13.931214Z"}, {"uuid": "49c89b20-c2b3-4007-933d-f116a3ad53ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://bsky.app/profile/cyberresearch.bsky.social/post/3lthecunmk22p", "content": "", "creation_timestamp": "2025-07-08T13:02:14.981598Z"}, {"uuid": "e23ae1fc-c11b-45c4-81c6-166210ea7b7e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1708", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.044446Z"}, {"uuid": "344d4407-c013-4cd4-9b09-180447da8968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1710", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:23.646658Z"}, {"uuid": "c742c529-3120-464a-8e87-6aa48f01022a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1709", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:24.293986Z"}, {"uuid": "83300dc0-c208-4df8-9f38-b5dc882dec01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1711", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114787856061012885", "content": "", "creation_timestamp": "2025-07-03T06:21:25.018001Z"}, {"uuid": "9549146a-85e3-4341-9c8d-d857158d8d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1708", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:54.836127Z"}, {"uuid": "7ced8a01-3725-4cbb-828d-5f606b9965c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1710", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.239987Z"}, {"uuid": "e23d4385-eb77-4436-811d-1c526b43ba99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1709", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lt23lwyqz3d2", "content": "", "creation_timestamp": "2025-07-03T06:23:55.842234Z"}, {"uuid": "e5b4502d-bd3c-4b57-96c4-bd0b1c9aafc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-1793", "type": "seen", "source": "https://bsky.app/profile/Sempf.infosec.exchange.ap.brid.gy/post/3lr6u5vmeomk2", "content": "", "creation_timestamp": "2025-06-09T17:03:55.245940Z"}, {"uuid": "5be834fc-9c25-426f-ad4b-64db66070fd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1725", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqpdwg54sw2q", "content": "", "creation_timestamp": "2025-06-03T13:00:59.195525Z"}, {"uuid": "9b2500bb-6874-41a6-8aaf-9b034fb36730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3ltw5ejbn3323", "content": "", "creation_timestamp": "2025-07-14T10:07:49.315759Z"}, {"uuid": "1fc6589d-8d20-4514-b12f-d87c3f22573f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1753", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq7wr5q552c2", "content": "", "creation_timestamp": "2025-05-28T09:56:02.902471Z"}, {"uuid": "634bfaa1-9a0a-4994-b868-1c9f6da40d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1793", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqtwhbgxgz2k", "content": "", "creation_timestamp": "2025-06-05T08:43:11.332654Z"}, {"uuid": "cd5fb9c9-87e6-4541-8f94-85ac771aa478", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1754", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lsiw3om6z325", "content": "", "creation_timestamp": "2025-06-26T10:27:48.310769Z"}, {"uuid": "5bafeb02-f5bb-482e-b886-ddf4f84bad58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1752", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lot5mx42le42", "content": "", "creation_timestamp": "2025-05-10T14:36:13.270304Z"}, {"uuid": "15436242-150d-431e-8978-ce8a9c7ebad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1752", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lot64h3bfo2t", "content": "", "creation_timestamp": "2025-05-10T14:37:16.317429Z"}, {"uuid": "279123ca-c66a-4466-9ffe-4ff0397c505c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3lot7ocw6ul2n", "content": "", "creation_timestamp": "2025-05-10T15:05:08.814491Z"}, {"uuid": "4c181303-1c45-4746-850e-2924f54e8fb3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/securityrss.bsky.social/post/3ltwxvwa4qa2i", "content": "", "creation_timestamp": "2025-07-14T18:02:50.478114Z"}, {"uuid": "72d2f956-564b-4ddd-a173-0b9142301fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://bsky.app/profile/kubesploit.io/post/3lseorevbdx23", "content": "", "creation_timestamp": "2025-06-24T18:06:08.117807Z"}, {"uuid": "0e7d5d39-748f-4c85-8e66-90efc5cead06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lseouztsbn2n", "content": "", "creation_timestamp": "2025-06-24T18:08:10.203964Z"}, {"uuid": "048af049-8ceb-4515-b876-4d2f293046a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/remirepo.net/post/3lt2wr5vznc2z", "content": "", "creation_timestamp": "2025-07-03T14:27:45.023070Z"}, {"uuid": "c0aa0e53-8136-47f2-b0a8-d43a69750324", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/remirepo.net/post/3lt2wt3iuzk2z", "content": "", "creation_timestamp": "2025-07-03T14:28:49.082559Z"}, {"uuid": "d461d9ec-a092-4149-af77-d534608ff3ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1753", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114585353170777810", "content": "", "creation_timestamp": "2025-05-28T12:02:14.371300Z"}, {"uuid": "08b47b9c-fb0d-4bb6-80a6-85e50b6ed809", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q3/35", "content": "", "creation_timestamp": "2025-07-11T20:15:22.000000Z"}, {"uuid": "f4233f32-3ba3-40a1-8c62-70da4f6763cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/cyberhub.blog/post/3ltxuwmoe7j2i", "content": "", "creation_timestamp": "2025-07-15T02:42:13.267726Z"}, {"uuid": "60175c4d-8a4f-46e9-8753-1291cc4650d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1753", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqadyfchw62q", "content": "", "creation_timestamp": "2025-05-28T13:52:09.396352Z"}, {"uuid": "9a813f9f-26d4-4dff-9b85-75cba0104e52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1763", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqf4s7jkgda2", "content": "", "creation_timestamp": "2025-05-30T11:26:56.782543Z"}, {"uuid": "75a2906a-57f3-4cbd-82f4-b3776629f6b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://bsky.app/profile/ryanhe.mistyreverie.org.ap.brid.gy/post/3ltyji43mhd42", "content": "", "creation_timestamp": "2025-07-15T08:50:23.003546Z"}, {"uuid": "7ebbd63e-9468-43f6-8ecf-4c6d519d034a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1743", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-1743.yaml", "content": "", "creation_timestamp": "2025-05-15T07:39:46.000000Z"}, {"uuid": "ff76c1d0-411d-4e36-b399-91f69244ec4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1718", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-184-01", "content": "", "creation_timestamp": "2025-07-03T10:00:00.000000Z"}, {"uuid": "e96899db-45ea-4cff-8d49-751bfb760b82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1743", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtowso2w", "content": "", "creation_timestamp": "2025-05-15T21:02:29.458766Z"}, {"uuid": "9e1a56c7-5f8b-4a90-a2c7-d5022dfcb656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1713", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lu66dwhdfx2l", "content": "", "creation_timestamp": "2025-07-17T14:46:41.044946Z"}, {"uuid": "60f80ad6-0967-4cfd-b861-ddb400e0f5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lu6sg7fije2j", "content": "", "creation_timestamp": "2025-07-17T20:45:52.737768Z"}, {"uuid": "47baedd7-42da-422a-b753-edaed8f7c1e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-b73bbde9-751543f940567cd2", "content": "", "creation_timestamp": "2025-07-18T14:10:22.893684Z"}, {"uuid": "ce1a685a-7885-453d-9f48-cb1221236a82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://bsky.app/profile/kubesploit.io/post/3luq4zs76xt2h", "content": "", "creation_timestamp": "2025-07-24T18:11:04.454217Z"}, {"uuid": "2c20880d-74f7-43ed-8297-53198f6e0183", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3luq5bhbmgh25", "content": "", "creation_timestamp": "2025-07-24T18:15:19.674478Z"}, {"uuid": "d5008bec-fc3e-4bac-bfc8-d6d22e3d2954", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:58.000000Z"}, {"uuid": "456b8484-0343-4b1b-8eb0-1f2f7449455e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-09-10T07:47:58.000000Z"}, {"uuid": "aaa47d7a-058a-4d14-ac98-41edb87d079f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1708", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-06T13:54:20.000000Z"}, {"uuid": "70c78ab1-822e-40fb-9ab5-db6d76e6afde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "eec63c2e-f8c1-4069-86ab-66fd068d442d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "MISP/f2f93f16-9318-44b1-9be3-2d3346ca540c", "content": "", "creation_timestamp": "2025-08-10T18:27:44.000000Z"}, {"uuid": "fb03b5e4-e64a-4e1a-86ef-c2d9181b3881", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1708", "type": "seen", "source": "MISP/1413a78e-c0b3-4092-97e7-909fb9773448", "content": "", "creation_timestamp": "2025-08-14T11:44:23.000000Z"}, {"uuid": "043b3d22-9fae-4d07-8cfd-78334bc0106c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-5744fe79-a6c56f6f2dd16a71", "content": "", "creation_timestamp": "2025-10-21T06:59:37.395796Z"}, {"uuid": "1213116b-103c-44ab-8096-a883b2acca2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-5744fe79-a6c56f6f2dd16a71", "content": "", "creation_timestamp": "2025-10-21T06:59:37.471476Z"}, {"uuid": "359db6e0-6ab3-40e9-8ab6-a8027ea8031d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-16T01:45:15.000000Z"}, {"uuid": "06dd17fa-88fd-46b0-9ca4-ab7109c650ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1759", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lwoznn3zng2d", "content": "", "creation_timestamp": "2025-08-18T18:28:16.992699Z"}, {"uuid": "dab9129b-be38-4229-99f3-6defc58eae73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1761", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lyejc6w2p62d", "content": "", "creation_timestamp": "2025-09-09T00:59:19.390705Z"}, {"uuid": "3e3c88c6-ab3e-49aa-983e-eb24188d3aaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "MISP/4d9e0694-2872-4bfc-8eee-f1ab846c5ab0", "content": "", "creation_timestamp": "2025-08-19T04:06:37.000000Z"}, {"uuid": "a1c66e50-0f83-4e29-a971-5435cbf2ac16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1786", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "68e86ed2-3dd6-46a7-a218-ce3d8feaf5d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1788", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "f27459c9-0aff-4842-be97-10baa970894b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1791", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "85980461-3200-4e3c-a850-d61cb7a17afa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1799", "type": "seen", "source": "MISP/1e8d1b5a-3537-4a30-907d-acb1720bbd18", "content": "", "creation_timestamp": "2025-08-19T18:29:28.000000Z"}, {"uuid": "095ce8cb-a427-423c-829a-78c32e97f916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "52e566fc-34f9-499c-a028-8831af19a696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1776", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "64ad1d2d-5f95-4d85-a7ce-603a1df74112", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1742", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "de3b974f-a758-446c-97a7-b49b65bbc4b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1745", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "9e291e10-938a-4471-9bc5-8db9f597b831", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1741", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "408579ef-5b72-4469-87c7-a9e4d9c04bab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1756", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "2c39c767-2e7e-4227-8d63-63ebe0138a13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1747", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "3c4615cf-e226-47c4-8206-bf7ef36d42c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1795", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "8bb6deaf-59ac-4b86-8822-d824b5a2730b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1757", "type": "seen", "source": "MISP/af1fbe07-e10c-40c4-844e-d4419bdf6f80", "content": "", "creation_timestamp": "2025-08-22T13:26:18.000000Z"}, {"uuid": "e34dbec7-2d29-4da2-aeec-06573675dba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "dea94706-eea2-4bc8-a46b-13578cb29683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1755", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "e9475934-0a90-4c30-8092-ce3e9761faa0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1743", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:22.000000Z"}, {"uuid": "ad9baacd-37e9-4ed5-b652-063fd53437d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1748", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "9717175c-9ebc-44a4-b3a3-45cc13a53cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1746", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "83a5ec1c-899b-4d19-be40-b2703396e72c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1749", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "d8e404d6-b070-4dbd-bb50-7d5cb4a42854", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1738", "type": "seen", "source": "MISP/24306fae-b16b-4478-9297-d2973cdb583c", "content": "", "creation_timestamp": "2025-08-22T14:52:23.000000Z"}, {"uuid": "63773617-f12e-435d-8b7b-58838b0fcc32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-1740", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lxwgjev75c2u", "content": "", "creation_timestamp": "2025-09-03T10:32:23.148683Z"}, {"uuid": "3ed4c48c-506b-4d1c-8f2d-c568c94a219b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1740", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxwhkd65th2p", "content": "", "creation_timestamp": "2025-09-03T10:50:48.223840Z"}, {"uuid": "5a0f8908-59cf-4b16-bafa-5e08d6226c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1735", "type": "seen", "source": "https://bsky.app/profile/bluesky.awakari.com/post/3lxywhpd2452b", "content": "", "creation_timestamp": "2025-09-04T10:23:05.810251Z"}, {"uuid": "8669911c-d99a-44ea-86f3-259599c0cfee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1743", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3me2rju2j3c24", "content": "", "creation_timestamp": "2026-02-04T21:02:33.607532Z"}, {"uuid": "e5bd6d7e-886e-4f59-89a0-e81df03c596b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1787", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn42qhhhd24", "content": "", "creation_timestamp": "2026-02-24T21:23:59.223887Z"}, {"uuid": "260e1857-7fc3-4af6-bb81-38c679d98298", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1789", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfn4yfxlo32k", "content": "", "creation_timestamp": "2026-02-24T21:40:34.729258Z"}, {"uuid": "ae7077ce-d37b-4da4-8966-2a77b2ff548f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mi2g7kvhxz2r", "content": "", "creation_timestamp": "2026-03-27T15:20:38.406437Z"}, {"uuid": "6b05161b-d62d-4a18-9988-08982dd0d6cd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1752", "type": "seen", "source": "https://gist.github.com/alon710/19880b19ac4856416e56e3d10ef15e03", "content": "", "creation_timestamp": "2026-01-24T21:25:57.000000Z"}, {"uuid": "86ecd543-3e12-415b-a4c2-365b7cd9130e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1752", "type": "seen", "source": "https://gist.github.com/alon710/8bec0449aec297a26867f673b33bf69d", "content": "", "creation_timestamp": "2026-01-24T22:41:21.000000Z"}, {"uuid": "3d8fd290-c7dd-4edb-a9b9-9132072c8db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://t.me/cvedetector/20243", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1767 - Kubernetes GitRepo Volume Git Repository Cloning Remote Code Execution\", \n  \"Content\": \"CVE ID : CVE-2025-1767 \nPublished : March 13, 2025, 5:15 p.m. | 43\u00a0minutes ago \nDescription : This CVE only affects Kubernetes clusters that utilize the in-tree gitRepo volume to clone git repositories from other pods within the same node. Since the in-tree gitRepo volume feature has been deprecated and will not receive security updates upstream, any cluster still using this feature remains vulnerable. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T19:48:21.000000Z"}, {"uuid": "206e28ba-e44e-402a-b5c0-c6d0e03e0806", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1799", "type": "seen", "source": "Telegram/sbYrs_biiwNMO3B0YQRWkNOBqo6iE8GXrK2qeNumeo-har9r", "content": "", "creation_timestamp": "2025-03-02T11:46:59.000000Z"}, {"uuid": "11f3757e-8e39-4ce0-919b-4f8037c99aca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1716", "type": "seen", "source": "Telegram/AYjypq9TrL8W2-jaBfft0eKcopILEbguaFc8w_RkNOIsbN0", "content": "", "creation_timestamp": "2025-11-30T14:31:12.000000Z"}, {"uuid": "5a18f81f-288c-4ccd-9cbc-e9ef7382367b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1797", "type": "seen", "source": "Telegram/UHGJP1qDIjCaUbAzbWTpYjuQ-bhwzczrPVBsQL4gHvETD_eE", "content": "", "creation_timestamp": "2025-03-02T11:46:59.000000Z"}, {"uuid": "7d1850fd-9f27-40d3-8fb2-909aa5f24ac7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1791", "type": "seen", "source": "Telegram/oifamibZC_tGvQEwXqYVNsQN1G7y5Hq6xT0OimiyGYpwN5et", "content": "", "creation_timestamp": "2025-03-02T11:46:59.000000Z"}, {"uuid": "570d2a8d-0318-4f35-9c8b-f8266ca84c93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1788", "type": "seen", "source": "Telegram/k77CC-c3cM7T_vmzRlcS9QhucAuTDv4KB2XC4nxoM81wREE9", "content": "", "creation_timestamp": "2025-03-02T11:46:59.000000Z"}, {"uuid": "9876bc0e-30d3-4845-b5f4-158ab8f70fba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/cvedetector/19324", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1723 - Zohocorp ManageEngine ADSelfService Plus Session Hijacking Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1723 \nPublished : March 3, 2025, 8:15 a.m. | 1\u00a0hour, 46\u00a0minutes ago \nDescription : Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the\u00a0session mishandling. Valid account holders in the setup only have the potential to exploit this bug. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"03 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-03T11:21:43.000000Z"}, {"uuid": "ddcab544-d23b-4df0-b9b5-6a2b43e05980", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1785", "type": "seen", "source": "https://t.me/cvedetector/20204", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1785 - WordPress Download Manager Directory Traversal\", \n  \"Content\": \"CVE ID : CVE-2025-1785 \nPublished : March 13, 2025, 8:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.08 via the 'wpdm_newfile' action. This makes it possible for authenticated attackers, with Author-level access and above, to overwrite select file types outside of the originally intended directory, which may cause a denial of service. \nSeverity: 5.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-13T11:26:18.000000Z"}, {"uuid": "a5f98d4e-7c87-45e1-9c6a-e4ce74c52252", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1786", "type": "seen", "source": "Telegram/vdRzNlP426m6lJFCKYm_qSHAel4wRmXumX0Kn4OWneuONNAR", "content": "", "creation_timestamp": "2025-03-02T11:46:58.000000Z"}, {"uuid": "109b6cc3-c553-40f9-b5d9-5ff87ba1630f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "published-proof-of-concept", "source": "https://t.me/tech_b0lt_Genona/5107", "content": "\u0412 \u043f\u043e\u0441\u0442\u0435 \u043f\u043e\u043a\u0430\u0437\u0430\u043d \u043f\u0440\u0438\u043c\u0435\u0440 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438, \u043e\u043d \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0440\u043e\u0441\u0442.\n\nThere\u2019s a new Kubernetes security vulnerability that\u2019s just been disclosed and I thought it was worth taking a look at it, as there\u2019s a couple of interesting aspects to it. CVE-2025-1767 exists in the gitRepo volume type and can allow users who can create pods with gitRepo volumes to get access to any other git repository on the node where the pod is deployed.\n. . .\nPatching & Mitigation\n\nThe patching situation for this vulnerability is interesting. The CVE description says that a patch will not be provided as gitRepo volumes are deprecated, which is true. However, this volume type is enabled by Kubernetes by default and there is no flag or switch that would allow a cluster operator to disable it.\n\nIn practice, if you don\u2019t use gitRepo volumes, you can mitigate this in a couple of ways. If you don\u2019t need git on your nodes you can just remove it there (assuming un-managed Kubernetes of course), and you can also block the use of these volumes using Validating Admission Policy or similar admission controllers.\nCVE-2025-1767 - Another gitrepo issue\nhttps://raesene.github.io/blog/2025/03/14/cve-2025-1767-another-gitrepo-issue/\n\n\u041f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0439 \u043f\u043e\u0441\u0442 \u0438\u0437 \u044d\u0442\u043e\u0439 \u0441\u0435\u0440\u0438\u0438\nFun With GitRepo Volumes\nhttps://raesene.github.io/blog/2024/07/10/Fun-With-GitRepo-Volumes/\n\n\u0421\u043f\u0430\u0441\u0438\u0431\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u0443 \u0437\u0430 \u0441\u0441\u044b\u043b\u043a\u0443", "creation_timestamp": "2025-03-15T16:15:16.000000Z"}, {"uuid": "d294332f-e684-41c7-b9b8-34dde475fbc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1730", "type": "seen", "source": "Telegram/jARelgEosjUWCb1Vw25TuWIEgD_5fQnxUuzae1G8zxI_XqBX", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "28aafbb5-baa6-45ec-8862-19e1b6cdba79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1783", "type": "seen", "source": "https://t.me/cvedetector/19896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1783 - WordPress Gallery Styles Stored Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-1783 \nPublished : March 8, 2025, 10:15 a.m. | 1\u00a0hour, 41\u00a0minutes ago \nDescription : The Gallery Styles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery Block in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-08T13:30:57.000000Z"}, {"uuid": "862510ee-5e47-4b3d-995d-085c6a48fde6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1748", "type": "seen", "source": "Telegram/hZWHridpXIsqfwtdh9vdBOkCOD4b96302P-siu293DvVIIPj", "content": "", "creation_timestamp": "2025-03-02T11:44:23.000000Z"}, {"uuid": "053af593-dd21-40a5-9adb-15fddf32e699", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1747", "type": "seen", "source": "Telegram/-TikUtwqoacLhSssnw7loeKwJDK_vG2s1h7mFf27GtOZ8Hy8", "content": "", "creation_timestamp": "2025-03-02T11:44:23.000000Z"}, {"uuid": "6d3e9ea5-08c4-42d1-af05-aae5564e46fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1746", "type": "seen", "source": "Telegram/v6Dq628O1KoMfKn9siFOADFiNdy7Bt0WK4C9hQRoXWSc7VlB", "content": "", "creation_timestamp": "2025-03-02T11:44:23.000000Z"}, {"uuid": "d86b50ed-5942-45ad-8e89-1da6dd8e1004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1768", "type": "seen", "source": "https://t.me/cvedetector/19824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1768 - Squirrly SEO WordPress Blind SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1768 \nPublished : March 7, 2025, 11:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4.05 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"07 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-07T14:56:59.000000Z"}, {"uuid": "84445838-5b84-40d2-831c-922f22cf42fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1730", "type": "seen", "source": "https://t.me/cvedetector/19224", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1730 - WordPress Simple Download Counter Arbitrary File Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1730 \nPublished : March 1, 2025, 7:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.0 via the 'simple_download_counter_download_handler'. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including any local file on the server, such as wp-config.php or /etc/passwd. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T10:35:40.000000Z"}, {"uuid": "f1480fa5-3586-4833-a5e9-f26247943e97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1786", "type": "seen", "source": "https://t.me/cvedetector/19228", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1786 - Rizin Rizin PDB Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1786 \nPublished : March 1, 2025, 10:15 a.m. | 36\u00a0minutes ago \nDescription : A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msf_stream_directory_free in the library /librz/bin/pdb/pdb.c. The manipulation of the argument -P leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.0 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T12:16:03.000000Z"}, {"uuid": "e2af5d86-a939-4fd0-a0e0-df735e25d181", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1799", "type": "seen", "source": "https://t.me/cvedetector/19242", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1799 - Zorlan SkyCaiji SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1799 \nPublished : March 1, 2025, 6:15 p.m. | 41\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument data leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T20:02:20.000000Z"}, {"uuid": "fb5f7c0e-fda4-4373-8c2f-3f1997fa265e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1797", "type": "seen", "source": "https://t.me/cvedetector/19239", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1797 - Baiyiyun Asset Management and Operations System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1797 \nPublished : March 1, 2025, 3:15 p.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System up to 20250217. Affected by this issue is some unknown functionality of the file /wuser/anyUserBoundHouse.php. The manipulation of the argument huid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T18:07:12.000000Z"}, {"uuid": "5b896897-feea-42ec-85bc-6964797fa691", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1791", "type": "seen", "source": "https://t.me/cvedetector/19236", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1791 - Zorlan SkyCaiji Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1791 \nPublished : March 1, 2025, 2:15 p.m. | 39\u00a0minutes ago \nDescription : A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument save_data leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T16:27:02.000000Z"}, {"uuid": "3e8e812e-f076-4a61-8947-51b5607204ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1788", "type": "seen", "source": "https://t.me/cvedetector/19237", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1788 - Rizinorg Rizin Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1788 \nPublished : March 1, 2025, 1:15 p.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T16:27:03.000000Z"}, {"uuid": "f49f604e-fa96-4736-a5c5-e83f687ed934", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1795", "type": "seen", "source": "https://t.me/cvedetector/19181", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1795 - Microsoft Exchange Comma Encoding Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1795 \nPublished : Feb. 28, 2025, 7:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T22:03:01.000000Z"}, {"uuid": "3acdcbe2-203b-4f83-84d0-4a565e62823a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1738", "type": "seen", "source": "https://t.me/cvedetector/19044", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1738 - TrivisionSecurity Trivision Camera Password Transmitted over Query String Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1738 \nPublished : Feb. 27, 2025, 1:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party. \nSeverity: 6.2 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T16:45:11.000000Z"}, {"uuid": "bde6de66-77ae-425e-a2f9-f60f406982a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1780", "type": "seen", "source": "https://t.me/cvedetector/19201", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1780 - BuddyPress WooCommerce My Account Unauthorized Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1780 \nPublished : March 1, 2025, 4:15 a.m. | 26\u00a0minutes ago \nDescription : The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bp_delete_page() function in all versions up to, and including, 3.4.25. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins page setting. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-01T06:24:38.000000Z"}, {"uuid": "9d0a489b-2292-413a-8f66-34ce9d5f363a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1776", "type": "seen", "source": "https://t.me/cvedetector/19161", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1776 - Soteshop XSS\", \n  \"Content\": \"CVE ID : CVE-2025-1776 \nPublished : Feb. 28, 2025, 2:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : Cross-Site Scripting (XSS) vulnerability in Soteshop, versions prior to 8.3.4, which could allow remote attackers to execute arbitrary code via the \u2018query\u2019 parameter in /app-google-custom-search/searchResults. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T17:52:00.000000Z"}, {"uuid": "8bfbe65d-d6ad-47dc-83b6-26575d872592", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1749", "type": "seen", "source": "https://t.me/cvedetector/19160", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1749 - OpenCart HTML Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1749 \nPublished : Feb. 28, 2025, 2:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and\u00a0modifying the parameter name in /account/voucher. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T17:51:56.000000Z"}, {"uuid": "01954a51-b26d-4ad8-9c90-45255a65c472", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1748", "type": "seen", "source": "https://t.me/cvedetector/19159", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1748 - OpenCart HTML Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1748 \nPublished : Feb. 28, 2025, 2:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and\u00a0modifying the parameter name in /account/register. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T17:51:56.000000Z"}, {"uuid": "a966018a-d30c-49d3-bf76-6ad51383035c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1747", "type": "seen", "source": "https://t.me/cvedetector/19158", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1747 - OpenCart HTML Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1747 \nPublished : Feb. 28, 2025, 2:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and\u00a0modifying the parameter name in /account/login. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T17:51:55.000000Z"}, {"uuid": "4ea411b6-95b0-446a-941f-53beff90f652", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1743", "type": "seen", "source": "https://t.me/cvedetector/19070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1743 - Zyx0814 Pichome Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1743 \nPublished : Feb. 27, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in zyx0814 Pichome 2.1.0. This affects an unknown part of the file /index.php?mod=textviewer. The manipulation of the argument src leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T20:56:15.000000Z"}, {"uuid": "1a559440-7b38-43b6-90d6-ce919539c4c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1746", "type": "seen", "source": "https://t.me/cvedetector/19162", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1746 - OpenCart Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-1746 \nPublished : Feb. 28, 2025, 2:15 p.m. | 2\u00a0hours, 5\u00a0minutes ago \nDescription : Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the search in the /product/search endpoint. This vulnerability could be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T17:52:01.000000Z"}, {"uuid": "901b998d-2585-4bb3-97c6-5eb365aea59d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1744", "type": "seen", "source": "https://t.me/cvedetector/19122", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1744 - Radareorg Radare2 Heap-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-1744 \nPublished : Feb. 28, 2025, 4:15 a.m. | 1\u00a0hour, 44\u00a0minutes ago \nDescription : Out-of-bounds Write vulnerability in radareorg radare2 allows   \n  \nheap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.\nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T07:49:36.000000Z"}, {"uuid": "6b225f0d-524d-470b-a389-558cbd09a248", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1757", "type": "seen", "source": "https://t.me/cvedetector/19118", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1757 - WordPress Portfolio Builder - Portfolio Gallery Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1757 \nPublished : Feb. 28, 2025, 5:15 a.m. | 44\u00a0minutes ago \nDescription : The WordPress Portfolio Builder \u2013 Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfhub_portfolio' and 'pfhub_portfolio_portfolio' shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-28T07:49:34.000000Z"}, {"uuid": "64cfa1df-21e7-46bf-93c0-ce72548e1052", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1745", "type": "seen", "source": "https://t.me/cvedetector/19071", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1745 - LinZhaoguan pb-cms Cross-Site Request Forgery (CSRF)\", \n  \"Content\": \"CVE ID : CVE-2025-1745 \nPublished : Feb. 27, 2025, 6:15 p.m. | 1\u00a0hour, 21\u00a0minutes ago \nDescription : A vulnerability has been found in LinZhaoguan pb-cms 2.0 and classified as problematic. This vulnerability affects unknown code of the component Logout. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T20:56:16.000000Z"}, {"uuid": "8a960181-61ee-4e3e-a630-2cce8135c55d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1756", "type": "seen", "source": "https://t.me/cvedetector/19056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1756 - MongoDB mongosh Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-1756 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\\node_modules\\. This issue affects mongosh prior to 2.3.0 \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:46.000000Z"}, {"uuid": "444cebbe-d267-4976-b227-718593f4fea3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1741", "type": "seen", "source": "https://t.me/cvedetector/19063", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1741 - BigMail Remote PHP Object Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1741 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched remotely. Upgrading to version 7.4.1-pl2 is able to address this issue. The identifier of the patch is 4816c8b748f6a5b965c8994e2cf10861bf6e68aa. It is recommended to upgrade the affected component. The vendor acted highly professional and even fixed this issue in the discontinued commercial edition as b1gMail 7.4.0-pl3. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:57.000000Z"}, {"uuid": "24c59bd5-e726-4103-b6a1-c91b862039f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1755", "type": "seen", "source": "https://t.me/cvedetector/19060", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1755 - MongoDB Compass Local Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1755 \nPublished : Feb. 27, 2025, 4:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\\node_modules\\. This issue affects MongoDB Compass prior to 1.42.1 \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:52.000000Z"}, {"uuid": "e6a02fbd-a38e-4bea-8434-977c910e4e75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1742", "type": "seen", "source": "https://t.me/cvedetector/19047", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1742 - PiHome Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1742 \nPublished : Feb. 27, 2025, 5:15 p.m. | 17\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument page_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T19:15:36.000000Z"}, {"uuid": "1ea92be4-6c16-471d-a78f-f5daac81b86f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "seen", "source": "https://t.me/cvedetector/19045", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1739 - TrivisionSecurity Trivision Camera Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1739 \nPublished : Feb. 27, 2025, 1:15 p.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to \"/en/player/activex_pal.asp\" and successfully authenticating the application. \nSeverity: 7.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T16:45:12.000000Z"}, {"uuid": "9429712c-a767-4836-896e-81d2a1a8ead8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://t.me/cvedetector/19035", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1751 - ATISoluciones Ciges SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1751 \nPublished : Feb. 27, 2025, 12:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T14:33:53.000000Z"}, {"uuid": "f93f01e7-a28c-4477-a1b7-d1676280bdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1717", "type": "seen", "source": "https://t.me/cvedetector/19026", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1717 - WordPress Login Me Now Plugin Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1717 \nPublished : Feb. 27, 2025, 8:15 a.m. | 1\u00a0hour, 3\u00a0minutes ago \nDescription : The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. This is due to insecure authentication based on an arbitrary transient name in the 'AutoLogin::listen()' function. This makes it possible for unauthenticated attackers to log in an existing user on the site, even an administrator. Note: this vulnerability requires using a transient name and value from another software, so the plugin is not inherently vulnerable on it's own. \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"27 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-27T10:22:16.000000Z"}, {"uuid": "b637c6d9-add5-44af-9144-8edf918e168e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1726", "type": "seen", "source": "https://t.me/cvedetector/18959", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1726 - Esri ArcGIS Monitor SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1726 \nPublished : Feb. 26, 2025, 8:15 p.m. | 31\u00a0minutes ago \nDescription : There is a SQL injection issue\u00a0in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and Linux that allows a remote, authenticated attacker with low privileges to improperly read limited database schema information by passing crafted queries. While it is possible to enumerate some internal database identifiers, the impact to the confidentiality vector is \"LOW' because any sensitive data returned in a response is encrypted. There is no evidence of impact to the integrity or availability vectors. This issue is addressed in ArcGIS Monitor 2024.1. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Feb 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-02-26T21:48:49.000000Z"}, {"uuid": "b8b9c9dc-80c9-4f5f-9951-f740efd14fc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/78970", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #0day\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2025-1739\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a n0n4m3x41\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a None\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-04-05 17:49:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\n0day PoC for CVE-2025-1739\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-04-05T18:00:12.000000Z"}, {"uuid": "851baa0e-73be-4d28-912b-48901929d4da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1738", "type": "published-proof-of-concept", "source": "Telegram/oC27DQT4xZV-8lp0UswjYxOsGpwwrpKobXivNSJC49azays", "content": "", "creation_timestamp": "2026-04-05T19:00:10.000000Z"}, {"uuid": "aafc0754-229a-4b28-bcef-54d05f6feb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "published-proof-of-concept", "source": "Telegram/oC27DQT4xZV-8lp0UswjYxOsGpwwrpKobXivNSJC49azays", "content": "", "creation_timestamp": "2026-04-05T19:00:10.000000Z"}, {"uuid": "08d0f3c6-f480-44a4-97a7-726b390f227d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1738", "type": "published-proof-of-concept", "source": "Telegram/FSLrga5GWrvpmeBVVaiQjjslIGqlG9dAkDvrcZ703Y3a2_k", "content": "", "creation_timestamp": "2026-04-06T03:00:06.000000Z"}, {"uuid": "1b79550a-9ba3-4f24-9a59-8dc20812c261", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "published-proof-of-concept", "source": "Telegram/FSLrga5GWrvpmeBVVaiQjjslIGqlG9dAkDvrcZ703Y3a2_k", "content": "", "creation_timestamp": "2026-04-06T03:00:06.000000Z"}, {"uuid": "8dba1304-26b1-49e8-8935-6fe2b25eb522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1717", "type": "seen", "source": "Telegram/cGa8yDyNVwYsWwQDKbAEW9iF4JktgxdPCEl6-1qKx7qpCzI", "content": "", "creation_timestamp": "2026-04-08T23:29:45.000000Z"}, {"uuid": "f4d8df2d-38fe-4bdc-9ca6-740859864919", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1768", "type": "seen", "source": "Telegram/hAnCs2baKLmiyeqz9pMQXFTfQp9h6yy0RV9cGQxFGrCMqGXQ", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "4817ead6-ed69-4838-b9f1-998fd8831795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1714", "type": "seen", "source": "Telegram/l6fnjHQPC74HlRO8caao2nzTTThWw04jV0814J5_AWHrV90p", "content": "", "creation_timestamp": "2025-03-08T04:34:56.000000Z"}, {"uuid": "91e6bfc8-4baf-4c6b-b560-215ed7a59546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1757", "type": "seen", "source": "Telegram/pWDAxd_HwPfhqeXNFTKBKgcEJaDGeaX8wVuvV9XlClRR3Akf", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "e9006cc5-24d9-4bf0-b310-948bda6186ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5665", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1751\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A SQL Injection vulnerability has been found in Ciges 2.15.5 from ATISoluciones. This vulnerability allows an attacker to retrieve, create, update and delete database via $idServicio parameter in /modules/ajaxBloqueaCita.php endpoint.\n\ud83d\udccf Published: 2025-02-27T12:03:10.610Z\n\ud83d\udccf Modified: 2025-02-27T12:03:10.610Z\n\ud83d\udd17 References:\n1. https://www.atisoluciones.com/incidentes-cve", "creation_timestamp": "2025-02-27T12:25:35.000000Z"}, {"uuid": "d8061946-e7e1-467b-9b93-9d4bcd9d8d56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1746", "type": "seen", "source": "https://gist.github.com/sergkurilenko/55cbff41f8ef423d7ee6fc274e5e79a9", "content": "", "creation_timestamp": "2026-04-27T20:30:12.000000Z"}, {"uuid": "63454afa-2d73-4b2c-946a-5c4c124c609f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1702", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6537", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1702\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' parameter in all versions up to, and including, 2.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-05T11:22:09.425Z\n\ud83d\udccf Modified: 2025-03-05T11:22:09.425Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/34adbae5-d615-4f8d-a845-6741d897f06c?source=cve\n2. https://wordpress.org/plugins/ultimate-member/#developers\n3. https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/includes/core/class-member-directory.php#L1775\n4. https://plugins.trac.wordpress.org/browser/ultimate-member/trunk/includes/core/class-member-directory.php#L1863\n5. https://github.com/ultimatemember/ultimatemember/pull/1654/commits/74647d42cc8d63f5d4f687efcd0792c246c23039\n6. https://plugins.trac.wordpress.org/changeset/3249862/", "creation_timestamp": "2025-03-05T11:37:37.000000Z"}, {"uuid": "47abff38-2e20-44e6-8a37-38c3b9582e18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1714", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6553", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1714\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7\u00a0on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server\n\ud83d\udccf Published: 2025-03-05T14:56:53.962Z\n\ud83d\udccf Modified: 2025-03-05T14:56:53.962Z\n\ud83d\udd17 References:\n1. https://perforce1.lightning.force.com/lightning/r/a91PA000001ScY1YAK/view", "creation_timestamp": "2025-03-05T15:32:59.000000Z"}, {"uuid": "a82caf86-929a-4382-b780-d01e1c0c0773", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1780", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6036", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1780\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bp_delete_page() function in all versions up to, and including, 3.4.25. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins page setting.\n\ud83d\udccf Published: 2025-03-01T03:22:19.179Z\n\ud83d\udccf Modified: 2025-03-01T03:22:19.179Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/dc138cbb-2713-4b0a-8e3a-8e1a9266637f?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3248127%40wc4bp&new=3248127%40wc4bp&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-01T04:27:33.000000Z"}, {"uuid": "0c8fc763-ff9d-4c20-b6b3-8ea815ce6177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1728", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5634", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1728\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: N/A\n\ud83d\udccf Modified: 2025-02-26T21:32:32.272Z\n\ud83d\udd17 References:\nNo references available.", "creation_timestamp": "2025-02-26T22:24:35.000000Z"}, {"uuid": "cb3fda11-f0f3-45ad-bce0-eaa1d95249cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1716", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5513", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1716\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: picklescan before 0.0.21 does not treat 'pip' as an unsafe global. An attacker could craft a malicious model that uses Pickle to pull in a malicious PyPI package (hosted, for example, on pypi.org or GitHub) via `pip.main()`. Because pip is not a restricted global, the model, when scanned with picklescan, would pass security checks and appear to be safe, when it could instead prove to be problematic.\n\ud83d\udccf Published: 2025-02-26T14:51:38.085Z\n\ud83d\udccf Modified: 2025-02-26T14:54:43.708Z\n\ud83d\udd17 References:\n1. https://sites.google.com/sonatype.com/vulnerabilities/cve-2025-1716\n2. https://github.com/mmaitre314/picklescan/commit/78ce704227c51f070c0c5fb4b466d92c62a7aa3d", "creation_timestamp": "2025-02-26T15:26:18.000000Z"}, {"uuid": "f830eec9-ccd6-44d5-827f-31f72cf769d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1726", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5604", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1726\n\ud83d\udd25 CVSS Score: 4.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: There is a SQL injection issue\u00a0in Esri ArcGIS Monitor versions 2023.0 through 2024.x on Windows and Linux that allows a remote, authenticated attacker with low privileges to improperly read limited database schema information by passing crafted queries. While it is possible to enumerate some internal database identifiers, the impact to the confidentiality vector is \"LOW' because any sensitive data returned in a response is encrypted. There is no evidence of impact to the integrity or availability vectors. This issue is addressed in ArcGIS Monitor 2024.1.\n\ud83d\udccf Published: 2025-02-26T19:28:51.480Z\n\ud83d\udccf Modified: 2025-02-26T19:28:51.480Z\n\ud83d\udd17 References:\n1. https://www.esri.com/arcgis-blog/products/monitor/administration/whats-new-in-arcgis-monitor-2024-1/", "creation_timestamp": "2025-02-26T20:25:01.000000Z"}, {"uuid": "717b72ef-2389-4d87-add1-cdcac6c9397c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5671", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1739\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_1, Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vulnerability allows an attacker to retrieve administrator's credentials in cleartext by sending a request against the server using curl with random credentials to \"/en/player/activex_pal.asp\" and successfully authenticating the application.\n\ud83d\udccf Published: 2025-02-27T12:45:26.314Z\n\ud83d\udccf Modified: 2025-02-27T12:47:10.616Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-trivision-camera-nc227wf", "creation_timestamp": "2025-02-27T13:27:42.000000Z"}, {"uuid": "a60de0db-e48b-49c3-b49e-aa70771b0ad8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1738", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5673", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1738\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A Password Transmitted over Query String vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity, exposing this sensitive information to a third party.\n\ud83d\udccf Published: 2025-02-27T12:20:29.340Z\n\ud83d\udccf Modified: 2025-02-27T12:41:19.664Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-trivision-camera-nc227wf", "creation_timestamp": "2025-02-27T13:27:44.000000Z"}, {"uuid": "39129bee-1c12-4382-82fe-8bf08cc1c4ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1755", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5711", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1755\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privileges, when a crafted file is stored in C:\\node_modules\\. This issue affects MongoDB Compass prior to 1.42.1\n\ud83d\udccf Published: 2025-02-27T15:24:07.174Z\n\ud83d\udccf Modified: 2025-02-27T16:07:45.320Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/COMPASS-9058", "creation_timestamp": "2025-02-27T16:26:09.000000Z"}, {"uuid": "f9d569ac-4d4c-4c36-8a8c-9a8abd5c0a15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1741", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5707", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1741\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in b1gMail up to 7.4.1-pl1. Affected by this vulnerability is an unknown functionality of the file src/admin/users.php of the component Admin Page. The manipulation of the argument query/q leads to deserialization. The attack can be launched remotely. Upgrading to version 7.4.1-pl2 is able to address this issue. The identifier of the patch is 4816c8b748f6a5b965c8994e2cf10861bf6e68aa. It is recommended to upgrade the affected component. The vendor acted highly professional and even fixed this issue in the discontinued commercial edition as b1gMail 7.4.0-pl3.\n\ud83d\udccf Published: 2025-02-27T16:00:08.945Z\n\ud83d\udccf Modified: 2025-02-27T16:10:50.259Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.297829\n2. https://vuldb.com/?ctiid.297829\n3. https://vuldb.com/?submit.505838\n4. https://gist.github.com/mcdruid/cb0b848c12fd6a6bc0c1b3357b983d30\n5. https://www.b1gmail.eu/forum/thread/217-security-update-to-b1gmail-7-4-1-released/\n6. https://github.com/b1gMail-OSS/b1gMail/commit/4816c8b748f6a5b965c8994e2cf10861bf6e68aa\n7. https://github.com/b1gMail-OSS/b1gMail/releases/tag/7.4.1-pl2", "creation_timestamp": "2025-02-27T16:26:02.000000Z"}, {"uuid": "95c4b003-39f9-4811-917b-e75980373bd9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1756", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5713", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1756\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized actions on a user's system with elevated privilege, when a crafted file is stored in C:\\node_modules\\. This issue affects mongosh prior to 2.3.0\n\ud83d\udccf Published: 2025-02-27T15:28:11.633Z\n\ud83d\udccf Modified: 2025-02-27T16:06:31.860Z\n\ud83d\udd17 References:\n1. https://jira.mongodb.org/browse/MONGOSH-2028", "creation_timestamp": "2025-02-27T16:26:11.000000Z"}, {"uuid": "98a04b66-87e5-4b5c-9820-4330a62c4cb1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1742", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5723", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1742\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in pihome-shc PiHome 2.0. Affected by this issue is some unknown functionality of the file /home.php. The manipulation of the argument page_name leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-02-27T17:00:06.917Z\n\ud83d\udccf Modified: 2025-02-27T17:00:06.917Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.297830\n2. https://vuldb.com/?ctiid.297830\n3. https://vuldb.com/?submit.502501\n4. https://www.singto.io/pocsforexploits/pihomehvac_xss_home.md", "creation_timestamp": "2025-02-27T17:25:17.000000Z"}, {"uuid": "c2dcb57a-291f-4207-acec-6b053344a09d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1757", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5836", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1757\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The WordPress Portfolio Builder \u2013 Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfhub_portfolio' and 'pfhub_portfolio_portfolio' shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-02-28T04:21:56.133Z\n\ud83d\udccf Modified: 2025-02-28T04:21:56.133Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/36dcf1c4-1e0a-4ab6-a1b3-a9fe3aaddd0b?source=cve\n2. https://plugins.trac.wordpress.org/browser/uber-grid/trunk/src/Frontend.php#L542\n3. https://plugins.trac.wordpress.org/browser/uber-grid/trunk/src/Frontend.php#L39", "creation_timestamp": "2025-02-28T05:26:30.000000Z"}, {"uuid": "6fa31b7e-18aa-4f8d-8979-207012b82e27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1785", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7403", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1785\n\ud83d\udd25 CVSS Score: 5.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L)\n\ud83d\udd39 Description: The Download Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.3.08 via the 'wpdm_newfile' action. This makes it possible for authenticated attackers, with Author-level access and above, to overwrite select file types outside of the originally intended directory, which may cause a denial of service.\n\ud83d\udccf Published: 2025-03-13T07:31:39.039Z\n\ud83d\udccf Modified: 2025-03-13T07:31:39.039Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/bc5c7974-4c10-4880-8823-2accee3c0da4?source=cve\n2. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3252990%40download-manager&new=3252990%40download-manager&sfp_email=&sfph_mail=#file4", "creation_timestamp": "2025-03-13T07:43:27.000000Z"}, {"uuid": "56ab39b4-d75f-45e3-a3b4-dc7b36f64fa1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1749", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5903", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1749\n\ud83d\udd25 CVSS Score: 4.7 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N)\n\ud83d\udd39 Description: HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and\u00a0modifying the parameter name in /account/voucher.\n\ud83d\udccf Published: 2025-02-28T13:43:25.866Z\n\ud83d\udccf Modified: 2025-02-28T14:11:59.634Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/incibe-cert/alerta-temprana/avisos/multiples-vulnerabilidades-en-opencart", "creation_timestamp": "2025-02-28T14:27:20.000000Z"}, {"uuid": "ec3c9f0f-a537-4153-b264-71537fc96143", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1776", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5904", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1776\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: Cross-Site Scripting (XSS) vulnerability in Soteshop, versions prior to 8.3.4, which could allow remote attackers to execute arbitrary code via the \u2018query\u2019 parameter in /app-google-custom-search/searchResults. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.\n\ud83d\udccf Published: 2025-02-28T13:46:38.948Z\n\ud83d\udccf Modified: 2025-02-28T14:08:03.217Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-soteshop", "creation_timestamp": "2025-02-28T14:27:21.000000Z"}, {"uuid": "537d4b30-d7ff-4bb3-97a5-a5e6d7129bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1795", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5952", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1795\n\ud83d\udd25 CVSS Score: 2.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.\n\ud83d\udccf Published: 2025-02-28T18:59:31.784Z\n\ud83d\udccf Modified: 2025-02-28T19:16:32.270Z\n\ud83d\udd17 References:\n1. https://github.com/python/cpython/issues/100884\n2. https://github.com/python/cpython/pull/100885\n3. https://github.com/python/cpython/pull/119099\n4. https://github.com/python/cpython/commit/09fab93c3d857496c0bd162797fab816c311ee48\n5. https://github.com/python/cpython/commit/70754d21c288535e86070ca7a6e90dcb670b8593\n6. https://github.com/python/cpython/commit/9148b77e0af91cdacaa7fe3dfac09635c3fe9a74\n7. https://mail.python.org/archives/list/security-announce@python.org/thread/MB62IZMEC3UM6SGHP5LET5JX2Y7H4ZUR/", "creation_timestamp": "2025-02-28T19:26:55.000000Z"}, {"uuid": "af46a690-8440-405d-bea8-36e3e67462df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1730", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6055", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1730\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.0 via the 'simple_download_counter_download_handler'. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including any local file on the server, such as wp-config.php or /etc/passwd.\n\ud83d\udccf Published: 2025-03-01T06:39:28.498Z\n\ud83d\udccf Modified: 2025-03-01T06:39:28.498Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/d0eafb20-4ef2-448b-9da7-ad8aa9e45215?source=cve\n2. https://plugins.trac.wordpress.org/browser/simple-download-counter/tags/2.0/inc/functions-core.php#L328\n3. https://plugins.trac.wordpress.org/browser/simple-download-counter/tags/2.0/inc/functions-core.php#L354\n4. https://plugins.trac.wordpress.org/changeset/3247987/", "creation_timestamp": "2025-03-01T07:27:00.000000Z"}, {"uuid": "c77e6d91-05ff-46ec-b561-1410c89cf12e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1786", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6070", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1786\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msf_stream_directory_free in the library /librz/bin/pdb/pdb.c. The manipulation of the argument -P leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.0 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-03-01T10:00:07.495Z\n\ud83d\udccf Modified: 2025-03-01T10:00:07.495Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298007\n2. https://vuldb.com/?ctiid.298007\n3. https://vuldb.com/?submit.502317\n4. https://github.com/rizinorg/rizin/issues/4893\n5. https://github.com/user-attachments/files/18765730/rz-bin-6fb50-poc.zip\n6. https://github.com/rizinorg/rizin/milestone/18", "creation_timestamp": "2025-03-01T10:27:49.000000Z"}, {"uuid": "388999d0-cdd0-4653-bba9-a4bea4e48651", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1788", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6074", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1788\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.\n\ud83d\udccf Published: 2025-03-01T12:31:08.574Z\n\ud83d\udccf Modified: 2025-03-01T12:31:08.574Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298011\n2. https://vuldb.com/?ctiid.298011\n3. https://vuldb.com/?submit.502345\n4. https://github.com/rizinorg/rizin/issues/4910\n5. https://github.com/rizinorg/rizin/issues/4910#issuecomment-2662963253\n6. https://github.com/user-attachments/files/18817099/rz-bin-poc-01.zip\n7. https://github.com/rizinorg/rizin/pull/4762", "creation_timestamp": "2025-03-01T13:27:28.000000Z"}, {"uuid": "92672fba-1f13-4374-9d25-00a574857770", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1797", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6077", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1797\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System up to 20250217. Affected by this issue is some unknown functionality of the file /wuser/anyUserBoundHouse.php. The manipulation of the argument huid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-01T14:31:04.156Z\n\ud83d\udccf Modified: 2025-03-01T14:31:04.156Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298028\n2. https://vuldb.com/?ctiid.298028\n3. https://vuldb.com/?submit.502649\n4. https://github.com/chichi24-ver/CVE/blob/main/CVE_1.md", "creation_timestamp": "2025-03-01T15:29:56.000000Z"}, {"uuid": "c2e91476-5afa-4264-90d2-522cc9d7227c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1799", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6080", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1799\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument data leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-03-01T17:31:04.651Z\n\ud83d\udccf Modified: 2025-03-01T17:31:04.651Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.298029\n2. https://vuldb.com/?ctiid.298029\n3. https://vuldb.com/?submit.502650\n4. https://github.com/sheratan4/cve/issues/6", "creation_timestamp": "2025-03-01T18:31:58.000000Z"}, {"uuid": "a456e418-43a0-4a17-9431-e915d9db901f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6160", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1723\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Zohocorp ManageEngine ADSelfService Plus versions 6510 and below are vulnerable to account takeover due to the\u00a0session mishandling. Valid account holders in the setup only have the potential to exploit this bug.\n\ud83d\udccf Published: 2025-03-03T07:40:10.789Z\n\ud83d\udccf Modified: 2025-03-03T07:40:10.789Z\n\ud83d\udd17 References:\n1. https://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html", "creation_timestamp": "2025-03-03T08:29:28.000000Z"}, {"uuid": "c25164ba-3f5a-44ed-97c7-9ea549dc221d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1783", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6935", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1783\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Gallery Styles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery Block in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-08T09:22:55.376Z\n\ud83d\udccf Modified: 2025-03-08T09:22:55.376Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/c9443e36-648c-4984-8b06-28e9da959e26?source=cve\n2. https://plugins.trac.wordpress.org/browser/gallery-styles/tags/1.3.4/gallery-styles.php#L34\n3. https://plugins.trac.wordpress.org/changeset/3251908/gallery-styles/trunk/gallery-styles.php", "creation_timestamp": "2025-03-08T09:35:57.000000Z"}, {"uuid": "abecb87a-6f13-4388-b2cb-a7003318ae8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1768", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/6828", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1768\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4.05 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.\n\ud83d\udccf Published: 2025-03-07T11:12:54.091Z\n\ud83d\udccf Modified: 2025-03-07T11:12:54.091Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/1a23ee5c-275f-4d51-8199-1cc2b0086f73?source=cve\n2. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/models/Snippet.php?rev=3207037#L96\n3. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/models/Snippet.php?rev=3207037#L118\n4. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/Onboarding.php?rev=3207037#L62\n5. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/Assistant.php?rev=3207037#L55\n6. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/Audits.php?rev=3207037#L86\n7. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/BulkSeo.php?rev=3207037#L148\n8. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/FocusPages.php?rev=3207037#L107\n9. https://plugins.trac.wordpress.org/browser/squirrly-seo/trunk/controllers/Post.php?rev=3207037#L480\n10. https://wordpress.org/plugins/squirrly-seo/#developers\n11. https://plugins.trac.wordpress.org/changeset/3248412/\n12. https://plugins.trac.wordpress.org/changeset/3250395/", "creation_timestamp": "2025-03-07T11:34:47.000000Z"}, {"uuid": "99262977-ea7c-4bbf-a2da-dc666bffabaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1764", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7535", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1764\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. The 'WPBRIGADE_SDK__DEV_MODE' constant must be set to 'true' to exploit the vulnerability.\n\ud83d\udccf Published: 2025-03-14T05:24:01.947Z\n\ud83d\udccf Modified: 2025-03-14T05:24:01.947Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9df6a2b4-2dc4-43dd-8282-5c05b0fa13f6?source=cve\n2. https://plugins.svn.wordpress.org/loginpress/trunk/lib/wpb-sdk/views/wpb-debug.php\n3. https://pt.wordpress.org/plugins/loginpress/\n4. https://plugins.trac.wordpress.org/changeset/3253283/", "creation_timestamp": "2025-03-14T05:46:57.000000Z"}, {"uuid": "44edbd64-64ba-4eb3-8e43-fdc3a00a5454", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1773", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7663", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1773\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Traveler theme for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-15T04:22:07.432Z\n\ud83d\udccf Modified: 2025-03-15T04:22:07.432Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/46c9dae7-d811-4b59-94c1-71a83652a14d?source=cve\n2. https://travelerwp.com/traveler-changelog/", "creation_timestamp": "2025-03-15T04:45:12.000000Z"}, {"uuid": "a2bea28f-43d7-4e69-a3ca-458f0f792db5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7662", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1771\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotel_alone_load_more_post' function 'style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included.\n\ud83d\udccf Published: 2025-03-15T04:22:07.953Z\n\ud83d\udccf Modified: 2025-03-15T04:22:07.953Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/da3e3d6c-7643-4f22-aa88-2c4ce80aed1f?source=cve\n2. https://travelerwp.com/traveler-changelog/", "creation_timestamp": "2025-03-15T04:45:12.000000Z"}, {"uuid": "940cf8f8-7f74-466d-8c56-7ae93c66205f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1724", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7741", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1724\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N)\n\ud83d\udd39 Description: Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token.\n\ud83d\udccf Published: 2025-03-17T06:57:44.497Z\n\ud83d\udccf Modified: 2025-03-17T06:57:44.497Z\n\ud83d\udd17 References:\n1. https://www.manageengine.com/analytics-plus/CVE-2025-1724.html\n2. https://www.zoho.com/analytics/onpremise/CVE-2025-1724.html", "creation_timestamp": "2025-03-17T07:46:20.000000Z"}, {"uuid": "97986283-ded4-4f0b-b3c8-dd19bfc3717a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1796", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8270", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1796\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random number generator (PRNG) used for generating password reset codes. The application uses `random.randint` for this purpose, which is not suitable for cryptographic use and can be cracked. An attacker with access to workflow tools can extract the PRNG output and predict future password reset codes, leading to a complete compromise of the application.\n\ud83d\udccf Published: 2025-03-20T10:08:46.897Z\n\ud83d\udccf Modified: 2025-03-20T19:04:03.713Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/a60f3039-5394-4e22-8de7-a7da9c6a6e00", "creation_timestamp": "2025-03-20T19:18:36.000000Z"}, {"uuid": "034b9cfa-23c3-4c1b-8e85-76d63ba2c0b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1798", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8598", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1798\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The  does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-03-25T06:00:14.685Z\n\ud83d\udccf Modified: 2025-03-25T06:00:14.685Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c5c30191-857c-419c-9096-d1fe14d34eaa/", "creation_timestamp": "2025-03-25T06:23:31.000000Z"}, {"uuid": "9f0f6f5a-fd64-4eec-a36c-59116d08c40e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1784", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8810", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1784\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Spectra \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uagb block in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-26T05:22:53.484Z\n\ud83d\udccf Modified: 2025-03-26T05:22:53.484Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/9ac33fd5-602b-4810-96e1-850ea6ee739d?source=cve\n2. https://plugins.trac.wordpress.org/browser/ultimate-addons-for-gutenberg/tags/2.19.0/classes/class-uagb-init-blocks.php#L1276\n3. https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3243058%40ultimate-addons-for-gutenberg&new=3243058%40ultimate-addons-for-gutenberg&sfp_email=&sfph_mail=", "creation_timestamp": "2025-03-26T06:25:19.000000Z"}, {"uuid": "dca15326-680a-4ad2-858b-21140e33489c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1703", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8821", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1703\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Ultimate Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-03-26T09:21:48.784Z\n\ud83d\udccf Modified: 2025-03-26T09:21:48.784Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/a2520d98-3cee-4431-bf9c-b2fd01a584ce?source=cve\n2. https://plugins.trac.wordpress.org/browser/ultimate-blocks/trunk/src/extensions/responsive-control/class-responsive-control.php#L46\n3. https://wordpress.org/plugins/ultimate-blocks/#developers\n4. https://plugins.trac.wordpress.org/changeset/3260377\n5. https://plugins.trac.wordpress.org/changeset/3260377/ultimate-blocks/trunk/src/extensions/responsive-control/class-responsive-control.php", "creation_timestamp": "2025-03-26T10:25:18.000000Z"}, {"uuid": "ad74d662-8932-446b-a6ea-6d875dc1febf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1769", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8828", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1769\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: The Product Import Export for WooCommerce \u2013 Import Export Product CSV Suite plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.0 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary log files on the server, which can contain sensitive information.\n\ud83d\udccf Published: 2025-03-26T11:22:09.346Z\n\ud83d\udccf Modified: 2025-03-26T11:22:09.346Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/4df60fbe-4475-4cbf-b497-a9c5251bc91f?source=cve\n2. https://plugins.trac.wordpress.org/browser/product-import-export-for-woo/trunk/admin/modules/history/history.php#L753\n3. https://wordpress.org/plugins/product-import-export-for-woo/#developers\n4. https://plugins.trac.wordpress.org/changeset/3261194/", "creation_timestamp": "2025-03-26T11:25:20.000000Z"}, {"uuid": "b0980c7c-b365-4c6a-95aa-62fdca3c5532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1762", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1762\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack\n\ud83d\udccf Published: 2025-03-28T06:00:03.726Z\n\ud83d\udccf Modified: 2025-03-28T06:00:03.726Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/d5cefdee-2ba0-465d-b176-0dff39fc322c/", "creation_timestamp": "2025-03-28T06:29:39.000000Z"}, {"uuid": "c2924641-d094-4c98-8600-11e5ef10f6dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1705", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9281", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1705\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation within the td_ajax_get_views AJAX action. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-03-28T08:23:44.395Z\n\ud83d\udccf Modified: 2025-03-28T08:23:44.395Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2aaa8c34-cf7b-4630-adc8-cbb534deff89?source=cve\n2. https://tagdiv.com/tagdiv-composer-page-builder-basics/\n3. https://themeforest.net/item/newspaper/5489609\n4. https://tagdiv.com/newspaper-changelog/", "creation_timestamp": "2025-03-28T08:27:22.000000Z"}, {"uuid": "02a73619-edce-44bc-b01c-395e5804fee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9546", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1734\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers.\n\ud83d\udccf Published: 2025-03-30T05:43:35.771Z\n\ud83d\udccf Modified: 2025-03-30T05:43:35.771Z\n\ud83d\udd17 References:\n1. https://github.com/php/php-src/security/advisories/GHSA-pcmh-g36c-qc44", "creation_timestamp": "2025-03-30T06:32:02.000000Z"}, {"uuid": "4c658d80-7cb7-416f-af92-892c926975ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9545", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1736\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted.\n\ud83d\udccf Published: 2025-03-30T05:49:14.551Z\n\ud83d\udccf Modified: 2025-03-30T05:49:14.551Z\n\ud83d\udd17 References:\n1. https://github.com/php/php-src/security/advisories/GHSA-hgf5-96fm-v528", "creation_timestamp": "2025-03-30T06:32:01.000000Z"}, {"uuid": "659a207a-d9fb-4de0-83fc-bbe9250beaf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11676", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1782\n\ud83d\udd25 CVSS Score: 9.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized \nbefore being used and can be misused to include an arbitrary file in the\n PHP code allowing an attacker to do anything as the web server user. \nThis flaw requires the attacker to be authenticated with a valid user account.\n\ud83d\udccf Published: 2025-04-14T18:41:21.745Z\n\ud83d\udccf Modified: 2025-04-14T18:41:21.745Z\n\ud83d\udd17 References:\n1. https://www.ifax.com/security/CVE-2025-1782.html", "creation_timestamp": "2025-04-14T18:54:04.000000Z"}, {"uuid": "238eb063-4f9b-4cee-a2a5-22a1537918fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1704", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12172", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1704\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 124.0.6367.34 on Chromebooks allows enrolled users with local access to unenroll devices \nand intercept device management requests via loading components from the unencrypted stateful partition.\n\ud83d\udccf Published: 2025-04-16T23:06:28.279Z\n\ud83d\udccf Modified: 2025-04-16T23:06:28.279Z\n\ud83d\udd17 References:\n1. https://issuetracker.google.com/issues/359915523\n2. https://issues.chromium.org/issues/b/359915523", "creation_timestamp": "2025-04-16T23:58:39.000000Z"}, {"uuid": "f01499a0-2ea5-459f-96d6-658112f8dd6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12791", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1731\n\ud83d\udd25 CVSS Score: 7.8 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An incorrect permission assignment vulnerability in the PostgreSQL commands of the USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid.\n\ud83d\udccf Published: 2025-04-22T01:52:04.064Z\n\ud83d\udccf Modified: 2025-04-22T01:52:04.064Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025", "creation_timestamp": "2025-04-22T03:02:53.000000Z"}, {"uuid": "2c0df224-3d79-4eea-91c0-11286da83207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12790", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1732\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: An improper privilege management vulnerability in the recovery function of the USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device.\n\ud83d\udccf Published: 2025-04-22T01:57:35.395Z\n\ud83d\udccf Modified: 2025-04-22T01:57:35.395Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-incorrect-permission-assignment-and-improper-privilege-management-vulnerabilities-in-usg-flex-h-series-firewalls-04-22-2025", "creation_timestamp": "2025-04-22T03:02:52.000000Z"}, {"uuid": "a6d66873-3dce-4634-a1b5-aad8837605d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1752", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15892", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1752\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process.\n\ud83d\udccf Published: 2025-05-10T13:21:30.866Z\n\ud83d\udccf Modified: 2025-05-10T13:21:30.866Z\n\ud83d\udd17 References:\n1. https://huntr.com/bounties/cd7b9082-7d75-42e4-84f5-dbee23cbc467\n2. https://github.com/run-llama/llama_index/commit/3c65db2947271de3bd1927dc66a044da385de4da", "creation_timestamp": "2025-05-10T13:27:13.000000Z"}, {"uuid": "a452f7d3-03f5-41d2-a4d5-273f6f11d600", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1706", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16767", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1706\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kernel exceptions.\n\ud83d\udccf Published: 2025-05-17T00:40:28.729Z\n\ud83d\udccf Modified: 2025-05-17T00:40:28.729Z\n\ud83d\udd17 References:\n1. https://www.imaginationtech.com/gpu-driver-vulnerabilities/", "creation_timestamp": "2025-05-17T01:35:08.000000Z"}, {"uuid": "a9918aa1-5817-447e-89a1-2f4c1aeb3aad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1792", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18204", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1792\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: Mattermost versions 10.7.x <= 10.7.0, 10.5.x <= 10.5.3, 9.11.x <= 9.11.12 fail to properly enforce access controls for guest users accessing channel member information, allowing authenticated guest users to view metadata about members of public channels via the channel members API endpoint.\n\ud83d\udccf Published: 2025-05-30T14:22:08.404Z\n\ud83d\udccf Modified: 2025-06-12T17:07:00.539Z\n\ud83d\udd17 References:\n1. https://mattermost.com/security-updates", "creation_timestamp": "2025-06-12T17:35:05.000000Z"}, {"uuid": "7c2b7b2c-2a99-4bab-b4a6-41c1cbd41e13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1718", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19327", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1718\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to improper disk space management.\n\ud83d\udccf Published: 2025-06-24T11:24:17.579Z\n\ud83d\udccf Modified: 2025-06-24T11:24:17.579Z\n\ud83d\udd17 References:\n1. https://publisher.hitachienergy.com/preview?DocumentID=8DBD000174&LanguageCode=en&DocumentPartId=&Action=Launch", "creation_timestamp": "2025-06-24T11:50:54.000000Z"}, {"uuid": "428de7a6-e208-46eb-a892-8e652a03cf17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1754", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19572", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-1754\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 17.2 before 17.11.5, 18.0 before 18.0.3, and 18.1 before 18.1.1 that could have allowed unauthenticated attackers to upload arbitrary files to public projects by sending crafted API requests, potentially leading to resource abuse and unauthorized content storage.\n\ud83d\udccf Published: 2025-06-26T05:31:40.856Z\n\ud83d\udccf Modified: 2025-06-26T05:31:40.856Z\n\ud83d\udd17 References:\n1. https://gitlab.com/gitlab-org/gitlab/-/issues/521619\n2. https://hackerone.com/reports/3009067", "creation_timestamp": "2025-06-26T05:49:26.000000Z"}, {"uuid": "d15f99fb-5ff0-46de-a616-77c3eac51392", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1757", "type": "seen", "source": "Telegram/f6f8yt3oUHqV9tYWymXzZbqmGbJC7f42iwxruw4qTp-fEY3r", "content": "", "creation_timestamp": "2025-03-02T11:44:22.000000Z"}, {"uuid": "7756e914-fe2a-469d-8e92-f27ec799688c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1718", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/41716", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-1718 - Hitachi Energy FTP Reboot Vulnerability Scanner\nURL\uff1ahttps://github.com/issamjr/CVE-2025-1718-Scanner\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-06-24T13:07:47.000000Z"}, {"uuid": "58756147-3f8c-46b7-a37f-b1b86ef61753", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "published-proof-of-concept", "source": "https://t.me/ics_cert/1234", "content": "\u0628\u062e\u0634 \u06f2 \u0627\u0632 \u06f3\n\u067e\u0631\u0648\u062a\u06a9\u0644 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u062a\u0635\u0627\u0644 \u0627\u0632 \u0631\u0627\u0647 \u062f\u0648\u0631 \u0627\u0632 \u0637\u0631\u06cc\u0642 RF \u0628\u0631\u0627\u06cc \u067e\u0627\u06cc\u0627\u0646 \u0642\u0637\u0627\u0631 \u0648 \u0627\u0628\u062a\u062f\u0627\u06cc \u0642\u0637\u0627\u0631 (\u06a9\u0647 \u0628\u0627 \u0646\u0627\u0645 FRED \u0646\u06cc\u0632 \u0634\u0646\u0627\u062e\u062a\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f) \u0628\u0631\u0627\u06cc \u0627\u06cc\u062c\u0627\u062f \u0628\u0633\u062a\u0647 \u0628\u0647 \u06cc\u06a9 \u0645\u062c\u0645\u0648\u0639 \u06a9\u0646\u062a\u0631\u0644\u06cc BCH \u0645\u062a\u06a9\u06cc \u0627\u0633\u062a. \u0645\u06cc\u200c\u062a\u0648\u0627\u0646 \u0627\u06cc\u0646 \u0628\u0633\u062a\u0647\u200c\u0647\u0627\u06cc EoT \u0648 HoT \u0631\u0627 \u0628\u0627 \u06cc\u06a9 \u0631\u0627\u062f\u06cc\u0648\u06cc \u062a\u0639\u0631\u06cc\u0641\u200c\u0634\u062f\u0647 \u062a\u0648\u0633\u0637 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f \u0648 \u062f\u0633\u062a\u0648\u0631\u0627\u062a \u06a9\u0646\u062a\u0631\u0644 \u062a\u0631\u0645\u0632 \u0631\u0627 \u0628\u0647 \u062f\u0633\u062a\u06af\u0627\u0647 EoT \u0635\u0627\u062f\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u0628\u0627\u0639\u062b \u0627\u062e\u062a\u0644\u0627\u0644 \u062f\u0631 \u0639\u0645\u0644\u06cc\u0627\u062a \u06cc\u0627 \u0627\u062d\u062a\u0645\u0627\u0644\u0627\u064b \u0627\u0632 \u06a9\u0627\u0631 \u0627\u0641\u062a\u0627\u062f\u0646 \u0633\u06cc\u0633\u062a\u0645\u200c\u0647\u0627\u06cc \u062a\u0631\u0645\u0632 \u0645\u06cc\u200c\u0634\u0648\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u0627 \u0634\u0646\u0627\u0633\u0647 CVE-2025-1727 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a. \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 CVSS \u0646\u0633\u062e\u0647 \u06f3 \u0622\u0646 \u06f8.\u06f1 \u0627\u0633\u062a \u06a9\u0647 \u0646\u0634\u0627\u0646\u200c\u062f\u0647\u0646\u062f\u0647 \u0634\u062f\u062a \u0628\u0627\u0644\u0627 \u0627\u0633\u062a. \u062a\u062d\u062a \u0633\u06cc\u0633\u062a\u0645 \u062c\u062f\u06cc\u062f\u062a\u0631 CVSS \u0646\u0633\u062e\u0647 \u06f4\u060c \u0627\u0645\u062a\u06cc\u0627\u0632 \u067e\u0627\u06cc\u0647 \u0622\u0646 \u06f7.\u06f2 \u0627\u0633\u062a.\n\n\u0646\u06cc\u0644 \u0627\u0633\u0645\u06cc\u062a \u0648 \u0627\u0631\u06cc\u06a9 \u0631\u0648\u06cc\u062a\u0631 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u0628\u0647 CISA \u06af\u0632\u0627\u0631\u0634 \u062f\u0627\u062f\u0646\u062f.\n\n\u0627\u06cc\u0646 \u0622\u0698\u0627\u0646\u0633 \u0627\u0641\u0632\u0648\u062f \u06a9\u0647 AAR \u062f\u0631 \u062d\u0627\u0644 \u067e\u06cc\u06af\u06cc\u0631\u06cc \u062a\u062c\u0647\u06cc\u0632\u0627\u062a \u0648 \u067e\u0631\u0648\u062a\u06a9\u0644\u200c\u0647\u0627\u06cc \u062c\u062f\u06cc\u062f\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627\u06cc\u062f \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc \u0633\u0646\u062a\u06cc End-of-Train \u0648 Head-of-Train \u0634\u0648\u0646\u062f. \u06a9\u0645\u06cc\u062a\u0647\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f \u062f\u0631\u06af\u06cc\u0631 \u062f\u0631 \u0627\u06cc\u0646 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc\u200c\u0647\u0627 \u0627\u0632 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0622\u06af\u0627\u0647 \u0647\u0633\u062a\u0646\u062f \u0648 \u062f\u0631 \u062d\u0627\u0644 \u0628\u0631\u0631\u0633\u06cc \u0631\u0627\u0647\u200c\u062d\u0644\u200c\u0647\u0627\u06cc \u06a9\u0627\u0647\u0634\u200c\u062f\u0647\u0646\u062f\u0647 \u0622\u0646 \u0647\u0633\u062a\u0646\u062f.\n\n\u06a9\u0645\u06cc\u062a\u0647 \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f\u0647\u0627\u06cc \u0627\u0644\u06a9\u062a\u0631\u0648\u0646\u06cc\u06a9 \u0631\u0627\u0647\u200c\u0622\u0647\u0646 AAR (RESC) \u0627\u06cc\u0646 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0631\u0627 \u062d\u0641\u0638 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0686\u0646\u062f\u06cc\u0646 \u062a\u0648\u0644\u06cc\u062f\u06a9\u0646\u0646\u062f\u0647 \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u0635\u0646\u0639\u062a\u060c \u0627\u0632 \u062c\u0645\u0644\u0647 Hitachi Rail STS USA\u060c Wabtec\u060c Siemens \u0648 \u062f\u06cc\u06af\u0631\u0627\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f. \n\nCISA \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627\u06cc EoT/HoT \u062e\u0648\u0627\u0633\u062a \u062a\u0627 \u062f\u0631 \u0635\u0648\u0631\u062a \u062f\u0627\u0634\u062a\u0646 \u0647\u0631\u06af\u0648\u0646\u0647 \u0633\u0648\u0627\u0644 \u0628\u0627 \u062a\u0648\u0644\u06cc\u062f\u06a9\u0646\u0646\u062f\u06af\u0627\u0646 \u062f\u0633\u062a\u06af\u0627\u0647 \u062e\u0648\u062f \u062a\u0645\u0627\u0633 \u0628\u06af\u06cc\u0631\u0646\u062f. \u0627\u06cc\u0646 \u0647\u0634\u062f\u0627\u0631 \u067e\u0633 \u0627\u0632 \u0628\u0631\u0622\u0648\u0631\u062f\u0647\u0627\u06cc \u0627\u062e\u06cc\u0631 \u0645\u0628\u0646\u06cc \u0628\u0631 \u0646\u06cc\u0627\u0632 \u062d\u062f\u0648\u062f \u06f2\u06f5\u06f0\u06f0\u06f0 \u0644\u0648\u06a9\u0648\u0645\u0648\u062a\u06cc\u0648 \u0628\u0627\u0631\u06cc \u0628\u0647 \u0627\u0631\u062a\u0642\u0627\u0621 \u0633\u06cc\u0633\u062a\u0645 Head-of-Train (HOT) \u0645\u0646\u062a\u0634\u0631 \u0634\u062f\u060c \u062f\u0631 \u062d\u0627\u0644\u06cc \u06a9\u0647 \u062a\u0642\u0631\u06cc\u0628\u0627\u064b \u06f4\u06f5\u06f0\u06f0\u06f0 \u062f\u0633\u062a\u06af\u0627\u0647 EOT \u062f\u0631 \u062d\u0627\u0644 \u062d\u0627\u0636\u0631 \u062f\u0631 \u0646\u0627\u0648\u06af\u0627\u0646 \u0645\u0644\u06cc \u062f\u0631 \u062d\u0627\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0633\u062a\u0646\u062f.\n\n\u0646\u06cc\u0644\u0632 \u062f\u0631 \u062a\u0627\u067e\u06cc\u06a9 \u062e\u0648\u062f \u062f\u0631 X \u0646\u0648\u0634\u062a: \u00ab\u0645\u0646 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0631\u0627 \u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f2 \u06af\u0632\u0627\u0631\u0634 \u062f\u0627\u062f\u0645\u060c \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u062f\u0631 ICS-CERT \u0628\u0633\u06cc\u0627\u0631 \u0641\u0639\u0627\u0644 \u0628\u0648\u062f\u0645 \u0648 \u062a\u062d\u0642\u06cc\u0642\u0627\u062a \u0627\u0645\u0646\u06cc\u062a\u06cc \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc \u062c\u0627\u0633\u0627\u0632\u06cc\u200c\u0634\u062f\u0647 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0627\u062f\u0645. ICS-CERT \u06af\u0631\u0648\u0647 \u0646\u0648\u067e\u0627 \u0648 \u062a\u0627\u0632\u0647\u200c\u06a9\u0627\u0631\u06cc \u0628\u0648\u062f\u060c \u0627\u0645\u0627 \u06af\u0631\u0648\u0647 \u0641\u0648\u0642\u200c\u0627\u0644\u0639\u0627\u062f\u0647\u200c\u0627\u06cc \u0628\u0648\u062f \u06a9\u0647 \u0647\u0631 \u06a9\u0627\u0631\u06cc \u0627\u0632 \u062f\u0633\u062a\u0634 \u0628\u0631 \u0645\u06cc\u200c\u0622\u0645\u062f \u0628\u0631\u0627\u06cc \u06a9\u0645\u06a9 \u0628\u0647 \u062d\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627\u06cc \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u200c\u0647\u0627\u06cc \u062d\u06cc\u0627\u062a\u06cc \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc\u200c\u062f\u0627\u062f.\u00bb \u0627\u0648 \u0627\u0641\u0632\u0648\u062f: \u00ab\u0627\u0632 \u06f2\u06f0\u06f1\u06f2 \u062a\u0627 \u06f2\u06f0\u06f1\u06f6\u060c \u0628\u0646\u200c\u0628\u0633\u062a\u06cc \u0628\u06cc\u0646 ICS-CERT \u0648 \u0627\u0646\u062c\u0645\u0646 \u0631\u0627\u0647\u200c\u0622\u0647\u0646 \u0622\u0645\u0631\u06cc\u06a9\u0627 (AAR) \u0648\u062c\u0648\u062f \u062f\u0627\u0634\u062a. \u0648\u0642\u062a\u06cc \u062f\u0631 \u062d\u0627\u0644 \u0645\u0639\u06a9\u0648\u0633 \u06a9\u0631\u062f\u0646 \u06cc\u06a9 \u067e\u0631\u0648\u062a\u06a9\u0644 \u062f\u0631 \u0622\u0632\u0645\u0627\u06cc\u0634\u06af\u0627\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0631\u0627\u062f\u06cc\u0648\u06cc\u06cc \u0634\u0628\u06cc\u0647\u200c\u0633\u0627\u0632\u06cc\u200c\u0634\u062f\u0647 \u0647\u0633\u062a\u06cc\u062f\u060c \u0647\u0645\u0647 \u0686\u06cc\u0632 \u0641\u0642\u0637 \u00ab\u0646\u0638\u0631\u06cc\u00bb \u0627\u0633\u062a \u0648 AAR \u0641\u0642\u0637 \u062f\u0631 \u0635\u0648\u0631\u062a\u06cc \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u062a\u0623\u06cc\u06cc\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u0628\u062a\u0648\u0627\u0646\u06cc\u0645 \u0622\u0646 \u0631\u0627 \u062f\u0631 \u062f\u0646\u06cc\u0627\u06cc \u0648\u0627\u0642\u0639\u06cc \u0627\u062b\u0628\u0627\u062a \u06a9\u0646\u06cc\u0645.\u00bb\n\n\u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f6\u060c \u0646\u06cc\u0644\u0632 \u0645\u0642\u0627\u0644\u0647\u200c\u0627\u06cc \u062f\u0631 \u0628\u0648\u0633\u062a\u0648\u0646 \u0631\u06cc\u0648\u06cc\u0648 \u0645\u0646\u062a\u0634\u0631 \u06a9\u0631\u062f \u06a9\u0647 \u062f\u0631 \u0622\u0646 \u0628\u0647 \u062a\u0641\u0635\u06cc\u0644 \u062a\u0648\u0636\u06cc\u062d \u062f\u0627\u062f\u0647 \u0628\u0648\u062f \u06a9\u0647 \u0686\u06af\u0648\u0646\u0647 \u0627\u062f\u0627\u0631\u0647 \u0631\u0627\u0647\u200c\u0622\u0647\u0646 \u0641\u062f\u0631\u0627\u0644 (FRA) \u062a\u0623\u0633\u06cc\u0633\u0627\u062a \u062a\u0633\u062a \u0645\u0633\u06cc\u0631 \u062e\u0648\u062f \u0631\u0627 \u0627\u062f\u0627\u0631\u0647 \u0646\u0645\u06cc\u200c\u06a9\u0646\u062f \u0648 \u0686\u06af\u0648\u0646\u0647 \u0627\u0646\u062c\u0645\u0646 \u0631\u0627\u0647\u200c\u0622\u0647\u0646 \u0622\u0645\u0631\u06cc\u06a9\u0627 (AAR) \u0628\u0647 \u0637\u0648\u0631 \u0645\u0639\u0645\u0648\u0644 \u0622\u0632\u0645\u0627\u06cc\u0634\u200c\u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0628\u0627 \u0627\u0645\u0646\u06cc\u062a \u0631\u0627 \u06a9\u0647 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u062f \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc\u200c\u0647\u0627 \u0631\u0627 \u0622\u0634\u06a9\u0627\u0631 \u06a9\u0646\u062f\u060c \u0645\u0633\u062f\u0648\u062f \u0645\u06cc\u200c\u06a9\u0646\u062f. AAR \u0628\u0639\u062f\u0627\u064b \u0628\u0627 \u0631\u062f\u06cc\u0647\u200c\u0627\u06cc \u062a\u062d\u0642\u06cc\u0631\u0622\u0645\u06cc\u0632 \u062f\u0631 \u0645\u062c\u0644\u0647 \u0641\u0648\u0631\u0686\u0648\u0646 \u067e\u0627\u0633\u062e \u062f\u0627\u062f: \u00ab\u0628\u0639\u062f \u0627\u0632 \u0622\u0646 \u0645\u0642\u0627\u0644\u0647\u060c \u0645\u062f\u062a\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u062e\u0633\u062a\u0647 \u0634\u062f\u0645. \u0627\u062d\u0633\u0627\u0633 \u0645\u06cc\u200c\u06a9\u0631\u062f\u0645 \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0647\u0631\u06af\u0632 \u0628\u0647 \u0645\u0631\u062d\u0644\u0647 \u0627\u062c\u0631\u0627 \u0646\u062e\u0648\u0627\u0647\u062f \u0631\u0633\u06cc\u062f \u0648 \u0645\u0646 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0644\u0627\u0628\u06cc\u200c\u06af\u0631\u06cc \u0634\u0631\u06a9\u062a\u200c\u0647\u0627\u06cc \u0628\u0632\u0631\u06af \u067e\u06cc\u0631\u0648\u0632 \u0646\u062e\u0648\u0627\u0647\u0645 \u0634\u062f.\u00bb\n\n\u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f1\u06f8\u060c \u0627\u0631\u06cc\u06a9 \u0631\u0648\u06cc\u062a\u0631 \u0628\u0647\u200c\u0637\u0648\u0631 \u0645\u0633\u062a\u0642\u0644 \u0647\u0645\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0631\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0631\u062f\u060c \u00ab\u0627\u0645\u0627 \u0641\u0642\u0637 \u062f\u0631 defcon \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0633\u062e\u0646\u0631\u0627\u0646\u06cc \u06a9\u0631\u062f. \u0627\u06af\u0631 \u0645\u06cc\u200c\u062e\u0648\u0627\u0647\u06cc\u062f \u062c\u0632\u0626\u06cc\u0627\u062a \u0628\u06cc\u0634\u062a\u0631\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0645\u0647\u0646\u062f\u0633\u06cc \u0645\u0639\u06a9\u0648\u0633 \u0627\u06cc\u0646 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631\u06cc \u0628\u062f\u0627\u0646\u06cc\u062f\u060c \u0627\u06a9\u06cc\u062f\u0627\u064b \u062a\u0648\u0635\u06cc\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0645 PyEOT \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f.\u00bb\n\n\u0646\u06cc\u0644\u0632 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0631\u062f \u06a9\u0647 \u00ab\u062f\u0631 \u0633\u0627\u0644 \u06f2\u06f0\u06f2\u06f4\u060c \u0645\u062a\u0648\u062c\u0647 \u0634\u062f\u0645 \u06a9\u0647 ICS-CERT \u0686\u0646\u062f\u06cc\u0646 \u0628\u0627\u0631 \u0633\u0627\u0632\u0645\u0627\u0646\u062f\u0647\u06cc \u0645\u062c\u062f\u062f \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u062a\u0635\u0645\u06cc\u0645 \u06af\u0631\u0641\u062a\u0645 \u06cc\u06a9 \u062a\u06cc\u06a9\u062a \u062c\u062f\u06cc\u062f \u0628\u0627 \u0622\u0646\u0647\u0627 \u0628\u0627\u0632 \u06a9\u0646\u0645 \u062a\u0627 \u0628\u0628\u06cc\u0646\u0645 \u0686\u0647 \u0627\u062a\u0641\u0627\u0642\u06cc \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0627\u0641\u062a\u0627\u062f\u0647 \u0627\u0633\u062a\u061f \u0622\u06cc\u0627 \u0622\u0646\u0647\u0627 \u062a\u0633\u0644\u06cc\u0645 \u0634\u062f\u0647\u200c\u0627\u0646\u062f\u061f\u00bb\n\n\u0627\u0648 \u06af\u0641\u062a: \u00ab\u0647\u06cc\u0686\u200c\u06a9\u0633 \u0648\u0627\u0642\u0639\u0627\u064b \u0646\u0645\u06cc\u200c\u062f\u0627\u0646\u062f \u0686\u0647 \u0627\u062a\u0641\u0627\u0642\u06cc \u0628\u0631\u0627\u06cc\u0634 \u0627\u0641\u062a\u0627\u062f\u0647\u060c \u0627\u0645\u0627 \u0627\u06cc\u0646 \u0628\u0627\u0631 \u0622\u0646\u0647\u0627 \u06f1\u06f0\u06f0\u066a \u062f\u0631 \u062d\u0644 \u0645\u0634\u06a9\u0644 \u0639\u0642\u0628 \u0628\u0648\u062f\u0646\u062f. \u0645\u0627 \u0686\u0646\u062f \u0645\u0627\u0647 \u0628\u0627 \u0641\u0631\u0648\u0634\u0646\u062f\u06af\u0627\u0646 \u0648 AAR \u062f\u0631 \u062a\u0645\u0627\u0633 \u0628\u0648\u062f\u06cc\u0645 \u062a\u0627 \u0637\u0631\u0641\u200c\u0647\u0627\u06cc \u0645\u0646\u0627\u0633\u0628 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0631\u0633\u06cc\u062f\u06af\u06cc \u0628\u0647 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u0645.\u00bb \u00ab\u0645\u062f\u06cc\u0631 \u0627\u0645\u0646\u06cc\u062a \u0627\u0637\u0644\u0627\u0639\u0627\u062a AAR \u062a\u0635\u0645\u06cc\u0645 \u06af\u0631\u0641\u062a \u06a9\u0647 \u0627\u06cc\u0646 \u0645\u0648\u0636\u0648\u0639 \u0686\u0646\u062f\u0627\u0646 \u0645\u0647\u0645 \u0646\u06cc\u0633\u062a \u0648 \u0622\u0646\u0647\u0627 \u0642\u0631\u0627\u0631 \u0646\u06cc\u0633\u062a \u06a9\u0627\u0631\u06cc \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0646 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u0646\u062f \u0632\u06cc\u0631\u0627 \u062f\u0633\u062a\u06af\u0627\u0647\u200c\u0647\u0627 \u0648 \u067e\u0631\u0648\u062a\u06a9\u0644 \u00ab\u067e\u0627\u06cc\u0627\u0646 \u0639\u0645\u0631\u00bb \u062e\u0648\u062f \u0631\u0627 \u062a\u062c\u0631\u0628\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u06a9\u0647 \u0637\u0639\u0646\u0647\u200c\u0622\u0645\u06cc\u0632 \u0627\u0633\u062a \u0632\u06cc\u0631\u0627 \u0622\u0646\u0647\u0627 \u0647\u0646\u0648\u0632 \u062f\u0631 \u062d\u0627\u0644 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0647\u0633\u062a\u0646\u062f. AAR \u0686\u0646\u062f\u06cc\u0646 \u0628\u0627\u0631 \u0627\u0632 \u0635\u062d\u0628\u062a \u0628\u0627 CISA \u0637\u0641\u0631\u0647 \u0631\u0641\u062a.\u00bb\n\n\u0627\u0648 \u062f\u0631 \u062a\u0648\u06cc\u06cc\u062a\u06cc \u0646\u0648\u0634\u062a: \u00abCISA \u0628\u0627\u0644\u0627\u062e\u0631\u0647 \u0628\u0627 \u0645\u0646 \u0645\u0648\u0627\u0641\u0642\u062a \u06a9\u0631\u062f \u06a9\u0647 \u0627\u0646\u062a\u0634\u0627\u0631 \u0627\u06cc\u0646 \u0627\u0637\u0644\u0627\u0639\u0627\u062a \u062a\u0646\u0647\u0627 \u06af\u0632\u06cc\u0646\u0647 \u0628\u0627\u0642\u06cc\u200c\u0645\u0627\u0646\u062f\u0647 \u0628\u0631\u0627\u06cc \u0627\u0639\u0645\u0627\u0644 \u0641\u0634\u0627\u0631 \u0628\u0631 AAR \u0628\u0631\u0627\u06cc \u0631\u0641\u0639 \u0627\u06cc\u0646 \u0645\u0634\u06a9\u0644 \u0627\u0633\u062a. \u0648 \u062a\u0627 \u062d\u062f\u0648\u062f\u06cc \u0647\u0645 \u062c\u0648\u0627\u0628 \u062f\u0627\u062f. \u062f\u0631 \u0645\u0627\u0647 \u0622\u0648\u0631\u06cc\u0644\u060c \u0622\u0646\u0647\u0627 \u0627\u0639\u0644\u0627\u0645 \u06a9\u0631\u062f\u0646\u062f \u06a9\u0647 802.16t \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0622\u0633\u06cc\u0628\u200c\u067e\u0630\u06cc\u0631 EOT/HOT \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u0627\u06cc\u0646 \u0627\u062a\u0641\u0627\u0642 \u0686\u0647 \u0632\u0645\u0627\u0646\u06cc \u062e\u0648\u0627\u0647\u062f \u0627\u0641\u062a\u0627\u062f\u061f \u062f\u0631 \u0628\u0647\u062a\u0631\u06cc\u0646 \u062d\u0627\u0644\u062a \u062a\u0627 \u0633\u0627\u0644 2027.\u00bb\n\ud83c\udfed \u0648\u0628\u0633\u0627\u06cc\u062a \u0648 \u06a9\u0627\u0646\u0627\u0644 \u062a\u062e\u0635\u0635\u06cc \u0627\u0645\u0646\u06cc\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a\u0647\u0627\u06cc \u0627\u062a\u0648\u0645\u0627\u0633\u06cc\u0648\u0646 \u0648 \u06a9\u0646\u062a\u0631\u0644 \u0635\u0646\u0639\u062a\u06cc\n\u0627\u062f\u0645\u06cc\u0646:\n\u200fhttps://t.me/pedram_kiani\n\u06a9\u0627\u0646\u0627\u0644 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ics_cert\n\u06af\u0631\u0648\u0647 \u062a\u0644\u06af\u0631\u0627\u0645:\nhttps://t.me/ICSCERT_IR\n\u06af\u0631\u0648\u0647 \u0627\u06cc\u062a\u0627:\nhttps://eitaa.com/joinchat/1866007784Cfd023f90b2", "creation_timestamp": "2025-07-15T17:49:42.000000Z"}, {"uuid": "c38d0b79-3720-49b5-aa73-1bcd82083f26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/11", "content": "", "creation_timestamp": "2025-03-28T23:01:42.000000Z"}, {"uuid": "5ae70cd9-8e8a-45f8-92fb-949d917135f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://t.me/habr_com_news/38545", "content": "\u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u0437\u0430\u0449\u0438\u0442\u0435 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0421\u0428\u0410 (CISA) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u043e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-1727 (8,1 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441\u0432\u044f\u0437\u0438 End\u2011of\u2011Train \u0438 Head\u2011of\u2011Train (EOT/HOT) \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432 \u0442\u043e\u0432\u0430\u0440\u043d\u044b\u0445 \u043f\u043e\u0435\u0437\u0434\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0442\u043e\u0440\u0443\u044e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e \u0440\u0430\u0434\u0438\u043e \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430. \u0412 \u043e\u0442\u0440\u0430\u0441\u043b\u0438 \u0437\u043d\u0430\u043b\u0438 \u043e\u0431 \u044d\u0442\u043e\u043c \u0443\u0436\u0435 \u0431\u043e\u043b\u0435\u0435 13 \u043b\u0435\u0442. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043d\u0443\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0431\u0430\u0437\u0435 802.16t.\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c #\u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442", "creation_timestamp": "2025-07-21T10:12:31.000000Z"}, {"uuid": "ba912d34-f634-4f74-a4f1-0702363959ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://t.me/DarkWebInformer_News/1309", "content": "\ud83d\udea8 News Alert!\n\nSource: Dark Web Informer - Cyber Threat Intelligence\nTitle: CVE-2025-1751: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\nLink: https://darkwebinformer.com/cve-2025-1751-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection/", "creation_timestamp": "2025-02-27T19:21:33.000000Z"}, {"uuid": "946fcaa3-e4c7-46c1-8afb-c5a3a1c22fe6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/463", "content": "Top Security News for Today\n\nLocal privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731)  \nhttps://www.reddit.com/r/netsec/comments/1k5roqe/local_privilege_escalation_on_zyxel_usg_flex_h/\n\nRegulating AI Behavior with a Hypervisor  \nhttps://www.schneier.com/blog/archives/2025/04/regulating-ai-behavior-with-a-hypervisor.html\n\nUnderstanding the threat landscape for Kubernetes and containerized assets  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/23/understanding-the-threat-landscape-for-kubernetes-and-containerized-assets/\n\nXRP Supplychain attack: Official NPM package infected with crypto stealing backdoor  \nhttps://www.reddit.com/r/netsec/comments/1k54dna/xrp_supplychain_attack_official_npm_package/\n\nDOGE Worker\u2019s Code Supports NLRB Whistleblower  \nhttps://krebsonsecurity.com/2025/04/doge-workers-code-supports-nlrb-whistleblower/\n\nAuthenticated Remote Code Execution on USG FLEX H Series (CVE-2025-1731 / CVE-2025-1732)  \nhttps://www.reddit.com/r/netsec/comments/1k6f52p/authenticated_remote_code_execution_on_usg_flex_h/\n\nOperation SyncHole: Lazarus APT goes back to the well  \nhttps://securelist.com/operation-synchole-watering-hole-attacks-by-lazarus/116326/\n\nScams 2.0: How Technology Is Powering the Next Generation of Fraud  \nhttps://www.tripwire.com/state-of-security/scams-how-technology-powering-next-generation-fraud\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-04-24T09:30:30.000000Z"}, {"uuid": "24dd1b47-05e3-42e9-982f-d0b0b0034be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/463", "content": "Top Security News for Today\n\nLocal privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731)  \nhttps://www.reddit.com/r/netsec/comments/1k5roqe/local_privilege_escalation_on_zyxel_usg_flex_h/\n\nRegulating AI Behavior with a Hypervisor  \nhttps://www.schneier.com/blog/archives/2025/04/regulating-ai-behavior-with-a-hypervisor.html\n\nUnderstanding the threat landscape for Kubernetes and containerized assets  \nhttps://www.microsoft.com/en-us/security/blog/2025/04/23/understanding-the-threat-landscape-for-kubernetes-and-containerized-assets/\n\nXRP Supplychain attack: Official NPM package infected with crypto stealing backdoor  \nhttps://www.reddit.com/r/netsec/comments/1k54dna/xrp_supplychain_attack_official_npm_package/\n\nDOGE Worker\u2019s Code Supports NLRB Whistleblower  \nhttps://krebsonsecurity.com/2025/04/doge-workers-code-supports-nlrb-whistleblower/\n\nAuthenticated Remote Code Execution on USG FLEX H Series (CVE-2025-1731 / CVE-2025-1732)  \nhttps://www.reddit.com/r/netsec/comments/1k6f52p/authenticated_remote_code_execution_on_usg_flex_h/\n\nOperation SyncHole: Lazarus APT goes back to the well  \nhttps://securelist.com/operation-synchole-watering-hole-attacks-by-lazarus/116326/\n\nScams 2.0: How Technology Is Powering the Next Generation of Fraud  \nhttps://www.tripwire.com/state-of-security/scams-how-technology-powering-next-generation-fraud\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-04-24T09:30:30.000000Z"}, {"uuid": "6af01d2a-80f5-4dd9-99cf-e55a4e1f1f5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "published-proof-of-concept", "source": "https://t.me/TopCyberTechNews/462", "content": "Top Security News for Today\n\nAttacking My Landlord's Boiler  \nhttps://www.reddit.com/r/netsec/comments/1k5023x/attacking_my_landlords_boiler/\n\nWindows Defender antivirus bypass in 2025 - Part 2  \nhttps://www.reddit.com/r/netsec/comments/1k50npg/windows_defender_antivirus_bypass_in_2025_part_2/\n\nLine jumping: The silent backdoor in MCP  \nhttps://www.reddit.com/r/netsec/comments/1k4j7u5/line_jumping_the_silent_backdoor_in_mcp/\n\nRussian organizations targeted by backdoor masquerading as secure networking software updates  \nhttps://securelist.com/new-backdoor-mimics-security-software-update/116246/\n\nHow I made $64k from deleted files \u2014 a bug bounty story  \nhttps://www.reddit.com/r/netsec/comments/1k59mtf/how_i_made_64k_from_deleted_files_a_bug_bounty/\n\nGlitching STM32 Read Out Protection - Anvil Secure  \nhttps://www.reddit.com/r/netsec/comments/1k5e3we/glitching_stm32_read_out_protection_anvil_secure/\n\nLocal privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731)  \nhttps://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731/\n\nFollow Top Cyber News at https://t.me/TopCyberTechNews Feel free to DM me at https://twitter.com/ShayaFeedman", "creation_timestamp": "2025-04-23T09:30:29.000000Z"}, {"uuid": "49047f87-393d-4c3c-98e2-81351054bbca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "published-proof-of-concept", "source": "https://t.me/S_E_Reborn/5775", "content": "\ud83d\ude82 \u041b\u044e\u0431\u043e\u0439 \u0442\u043e\u0432\u0430\u0440\u043d\u044b\u0439 \u043f\u043e\u0435\u0437\u0434 \u0410\u043c\u0435\u0440\u0438\u043a\u0438 \u043c\u043e\u0436\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u043e \u0440\u0430\u0434\u0438\u043e.\n\n\u2022  \u0410\u0433\u0435\u043d\u0442\u0441\u0442\u0432\u043e \u043f\u043e \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0421\u0428\u0410 (CISA) \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u043e \u043e\u0431 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 CVE-2025-1727 (8,1 \u0431\u0430\u043b\u043b\u0430 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS) \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 \u0441\u0432\u044f\u0437\u0438 End\u2011of\u2011Train (EOT) \u0438 Head\u2011of\u2011Train (HOT) \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432 \u0442\u043e\u0432\u0430\u0440\u043d\u044b\u0445 \u043f\u043e\u0435\u0437\u0434\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u0442\u043e\u0440\u0443\u044e, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e \u0440\u0430\u0434\u0438\u043e \u043f\u043e\u0432\u043b\u0438\u044f\u0442\u044c \u043d\u0430 \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435 \u0442\u0440\u0430\u043d\u0441\u043f\u043e\u0440\u0442\u0430. \u0421\u0430\u043c\u043e\u0435 \u0437\u0430\u0431\u0430\u0432\u043d\u043e\u0435, \u0447\u0442\u043e \u043e\u0431 \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u043d\u0430\u043b\u0438 \u0435\u0449\u0435 20 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043f\u0440\u043e\u0441\u0442\u0443 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442, \u043d\u0443\u0436\u043d\u043e \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043d\u043e\u0432\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043d\u0430 \u0431\u0430\u0437\u0435 802.16t.\n\n\u2022  \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u0432 \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u043e\u043c\u043e\u0442\u0438\u0432 (\u0433\u043e\u043b\u043e\u0432\u0443 \u043f\u043e\u0435\u0437\u0434\u0430) \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0432\u0430\u0433\u043e\u043d\u0435 \u2014 \u043e\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 (ETD), \u0438\u043d\u043e\u0433\u0434\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0439 EOT, \u043c\u0438\u0433\u0430\u044e\u0449\u0438\u043c \u0437\u0430\u0434\u043d\u0438\u043c \u0444\u043e\u043d\u0430\u0440\u0435\u043c (FRED) \u0438\u043b\u0438 \u0434\u0430\u0442\u0447\u0438\u043a\u043e\u043c \u0438 \u0442\u043e\u0440\u043c\u043e\u0437\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c (SBU). \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0443 EOT/HOT \u0438 \u0434\u0430\u0436\u0435 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u0430\u0432.\n\n\u2022  End\u2011of\u2011Train \u0438 Head\u2011of\u2011Train \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u043c\u0430\u0448\u0438\u043d\u0438\u0441\u0442\u043e\u0432, \u0441\u0430\u043c\u043e\u0439 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u0440\u043c\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0434\u043d\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0435\u0437\u0434\u0430. \u0423\u044f\u0437\u0432\u0438\u043c\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430 \u043f\u043e\u0434 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u044f\u043c\u0438 End\u2011of\u2011Train device \u0438\u043b\u0438 FRED (Flashing Rear\u2011End Device \u2014 \u0434\u043e\u0441\u043b\u043e\u0432\u043d\u043e \u00ab\u041c\u0438\u0433\u0430\u044e\u0449\u0435\u0435 \u0437\u0430\u0434\u043d\u0435\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u00bb). \u0422\u0430\u043a\u043e\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0443\u0441\u0442\u0430\u043d\u0430\u0432\u043b\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0432 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0432\u0430\u0433\u043e\u043d\u0435 \u0433\u0440\u0443\u0437\u043e\u0432\u044b\u0445 \u043f\u043e\u0435\u0437\u0434\u043e\u0432. FRED \u0441\u043e\u0431\u0438\u0440\u0430\u0435\u0442 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u044e \u0438 \u043f\u0435\u0440\u0435\u0434\u0430\u0451\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0432 \u043d\u0430\u0447\u0430\u043b\u0435 \u043f\u043e\u0435\u0437\u0434\u0430 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0432 \u043e\u0441\u043d\u043e\u0432\u0435 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u043b\u0435\u0436\u0438\u0442 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0430\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u0430\u044f \u0441\u0443\u043c\u043c\u0430 BCH. \u0421 \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435\u043c SDR (Software\u2011defined radio) \u043e\u043a\u0430\u0437\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0442\u0430\u043a\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u043c\u043e\u0436\u043d\u043e \u043b\u0435\u0433\u043a\u043e \u043f\u043e\u0434\u0434\u0435\u043b\u044b\u0432\u0430\u0442\u044c \u0438 \u043e\u0442\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 EoT \u0434\u043b\u044f \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432. \u0420\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u044f\u043c\u043e\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c EOT/HOT \u0432 \u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u043d \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043a\u0438\u043b\u043e\u043c\u0435\u0442\u0440\u043e\u0432, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u043e\u0435\u0437\u0434\u0430 \u0434\u043b\u0438\u043d\u043e\u0439 3\u20135 \u043a\u043c \u2014 \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c.\n\n\u2022  \u041f\u043e \u0438\u0442\u043e\u0433\u0430\u043c \u0440\u0430\u0431\u043e\u0442\u044b \u0418\u0411\u2011\u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0434\u043e\u0440\u043e\u0436\u043d\u044b\u043c \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c \u0432 \u0421\u0428\u0410 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 75 000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 EoT \u043d\u0430 \u043f\u043e\u0435\u0437\u0434\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u0439 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u0428\u0410, \u041a\u0430\u043d\u0430\u0434\u044b \u0438 \u041c\u0435\u043a\u0441\u0438\u043a\u0438. \u042d\u0442\u043e \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 2026 \u0433\u043e\u0434, \u0430 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u043e\u0441\u0442\u0430\u0432\u043e\u0432 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 5\u20137 \u043b\u0435\u0442 \u0438 \u043e\u0442 $7 \u043c\u043b\u0440\u0434 \u0434\u043e $10 \u043c\u043b\u0440\u0434.\n\n\u27a1\ufe0f https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-10\n\n\u2022  \u041a\u0441\u0442\u0430\u0442\u0438, \u044d\u0442\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0430 \u043d\u0430 DEFCON \u0418\u0411 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c \u042d\u0440\u0438\u043a\u043e\u043c \u0420\u0435\u0439\u0442\u0435\u0440\u043e\u043c 6 \u043b\u0435\u0442 \u043d\u0430\u0437\u0430\u0434. \u0415\u0441\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e, \u0442\u043e \u043d\u0430 YT \u0435\u0441\u0442\u044c \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0439 \u043e\u0431\u0437\u043e\u0440:\n\n\u27a1\ufe0f https://www.youtube.com/watch?v=vloWB0LHT_4\n\n#\u041d\u043e\u0432\u043e\u0441\u0442\u0438", "creation_timestamp": "2025-07-21T17:13:45.000000Z"}, {"uuid": "8254edf8-b466-44dc-a183-0e1e8054be2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "exploited", "source": "https://t.me/S_E_Reborn/5759", "content": "12 \u043b\u0435\u0442 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u043b\u043e\u0441\u044c \u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u043e\u0440\u043e\u0433 (AAR), \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432 \u043d\u0430 \u043f\u043e\u0435\u0437\u0434\u0430\u0445 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0438.\n\n\u042d\u0442\u043e\u0442 \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u043e\u043c\u043e\u0442\u0438\u0432 (\u0433\u043e\u043b\u043e\u0432\u0443 \u043f\u043e\u0435\u0437\u0434\u0430) \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0432\u0430\u0433\u043e\u043d\u0435 -\u00a0\u043e\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438\u00a0(ETD), \u0438\u043d\u043e\u0433\u0434\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0435\u00a0EOT,\u00a0\u043c\u0438\u0433\u0430\u044e\u0449\u0438\u043c \u0437\u0430\u0434\u043d\u0438\u043c \u0444\u043e\u043d\u0430\u0440\u0435\u043c\u00a0(FRED) \u0438\u043b\u0438\u00a0\u0434\u0430\u0442\u0447\u0438\u043a\u043e\u043c \u0438 \u0442\u043e\u0440\u043c\u043e\u0437\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\u00a0(SBU).\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0437\u0430\u0434\u043d\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0435\u0437\u0434\u0430, \u0447\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0433\u0440\u0443\u0437\u043e\u0432\u044b\u0445 \u043f\u043e\u0435\u0437\u0434\u043e\u0432, \u0434\u043b\u0438\u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u043e\u0434\u043d\u0443-\u0434\u0432\u0435 \u043c\u0438\u043b\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u043c\u0430\u0448\u0438\u043d\u0438\u0441\u0442\u043e\u0432, \u0441\u0430\u043c\u043e\u0439 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u0440\u043c\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0434\u043d\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0435\u0437\u0434\u0430.\n\n\u0415\u0449\u0435 \u0432 2012 \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041d\u0438\u043b \u0421\u043c\u0438\u0442 \u043f\u0440\u0438\u0448\u0435\u043b \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043b\u043e\u043a\u043e\u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 EoT, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0430\u0431\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 - \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0441\u0443\u043c\u043c\u0443 BCH.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u0435\u0448\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u0441\u0435\u0433\u043e 500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u043c\u0443\u044e \u0440\u0430\u0434\u0438\u043e\u0441\u0442\u0430\u043d\u0446\u0438\u044e (SDR), \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0438 \u043e\u0442\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 EoT \u0434\u043b\u044f \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432.\n\n\u0420\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u044f\u043c\u043e\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c EOT/HOT \u0432 \u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u043d \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u043d\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u0438\u043b\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u043e\u0435\u0437\u0434\u0430 \u0434\u043b\u0438\u043d\u043e\u0439 3 \u043c\u0438\u043b\u0438 - \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c.\n\n\u0421\u043c\u0438\u0442 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 ICS-CERT \u0432 2012 \u0433\u043e\u0434\u0443, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 - \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0435\u0439 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u043e\u0440\u043e\u0433.\n\nAAR, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0433\u043e\u0434\u0430\u043c\u0438 \u043f\u0440\u0435\u0443\u043c\u0435\u043d\u044c\u0448\u0430\u043b\u0430 \u0435\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044f \u0435\u0451 \u043b\u0438\u0448\u044c \u043a\u0430\u043a \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0421\u043c\u0438\u0442\u043e\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e. \u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u044b\u0442\u0430\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0432\u044b\u0434\u0430\u0432\u0430\u043b\u043e.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 AAR \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u0421\u043c\u0438\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435\u00a0\u043d\u0430 Boston Review, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u0441\u043f\u0443\u0441\u0442\u044f AAR \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0436\u0435\u043d\u0438\u0435 \u0432 Fortune.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u0421\u043c\u0438\u0442 \u0437\u0430\u0431\u0438\u043b \u043d\u0430 \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u042d\u0440\u0438\u043a \u0420\u0435\u0439\u0442\u0435\u0440, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u0443 \u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u0441\u043f\u0443\u0441\u0442\u044f \u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0435\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON.\n\n\u0422\u043e\u0433\u0434\u0430 \u0421\u043c\u0438\u0442 \u0440\u0435\u0448\u0438\u043b \u0432\u043d\u043e\u0432\u044c \u043d\u0430\u0441\u0435\u0441\u0442\u044c \u043d\u0430 AAR \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u043b \u043d\u0430 \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0435\u0439\u0441\u0430 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0430\u0441\u044c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-1727, \u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 CISA \u0434\u0430\u0436\u0435 \u0432\u044b\u0434\u0430\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u0441\u043f\u0443\u0441\u0442\u044f 12 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0430\u043c\u0430 AAR\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e \u043f\u043b\u0430\u043d\u0430\u0445 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HoT/EoT \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b IEEE 802.16t Direct Peer-to-Peer (DPP), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0442\u0430\u043a \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043c\u0435\u043d\u044c\u0448\u0443\u044e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0443.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0434\u043e\u0440\u043e\u0436\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 EoT \u043d\u0430 \u043f\u043e\u0435\u0437\u0434\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u0439 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u0428\u0410, \u041a\u0430\u043d\u0430\u0434\u044b \u0438 \u041c\u0435\u043a\u0441\u0438\u043a\u0438. \n\n\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 2026 \u0433\u043e\u0434, \u0430 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u043e\u0441\u0442\u0430\u0432\u043e\u0432 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 5\u20137 \u043b\u0435\u0442 \u0438 \u043e\u0442 7 \u0434\u043e 10 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043e\u0432 \u0434\u043e\u043b\u043b.\n\n\u042d\u0442\u0438\u043c, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0441\u0442\u0430\u0440\u0430\u043d\u0438\u044f AAR \u043f\u0440\u0438\u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u0434\u0432\u0443\u0445 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439. \n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u0440\u0438\u0441\u043a\u0438 \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-1727 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0438.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u043b\u0438\u0441\u044c. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0438\u0445 \u043c\u0435\u0440 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c WIRED, \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2023, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 (\u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b), \u043f\u0430\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0432  \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u043e\u0435\u0437\u0434\u043e\u0432 \u0432 \u0440\u0430\u0439\u043e\u043d\u0435 \u0433\u043e\u0440\u043e\u0434\u0430 \u0429\u0435\u0446\u0438\u043d.", "creation_timestamp": "2025-07-15T18:07:59.000000Z"}, {"uuid": "116dfc06-cfc6-40bf-9aab-95876dbe011e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://t.me/kasperskylab_ru/6447", "content": "\u0412 \u043d\u043e\u0432\u043e\u043c #kaspersky_securityweek:\n\n\ud83d\udfe2\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Microsoft \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447\u0438 \u0434\u043b\u044f \u0434\u0432\u0443\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0432 \u041f\u041e \u0434\u043b\u044f \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b SharePoint. \u0426\u0435\u043f\u043e\u0447\u043a\u0430 \u0438\u0437 \u044d\u0442\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u043e\u0433\u043b\u0430 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a RCE \u0438 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0432\u0435\u0431-\u0448\u0435\u043b\u043b\u043e\u0432 \u0438 \u043a\u0440\u0430\u0436\u0438 \u0434\u0430\u043d\u043d\u044b\u0445.\n\ud83d\udfe2\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0433\u0440\u0443\u0437\u043e\u0432\u044b\u043c\u0438 \u043f\u043e\u0435\u0437\u0434\u0430\u043c\u0438 \u0432 \u0421\u0428\u0410, \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u0430\u044f \u0435\u0449\u0451 \u0432 2012 \u0433\u043e\u0434\u0443, \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-1727. \u0422\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u043d\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u043f\u043e \u0440\u0430\u0434\u0438\u043e\u043a\u0430\u043d\u0430\u043b\u0443 \u0441\u0438\u0433\u043d\u0430\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c\u0443 \u0442\u043e\u0440\u043c\u043e\u0436\u0435\u043d\u0438\u044e \u0441\u043e\u0441\u0442\u0430\u0432\u0430.\n\ud83d\udfe2\u0412 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442\u0430\u0445 GIGABYTE \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0437\u0430\u0433\u0440\u0443\u0437\u0447\u0438\u043a\u0435 UEFI, \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c Secure Boot. \u041c\u043d\u043e\u0433\u0438\u0435 \u0438\u0437 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u043f\u043b\u0430\u0442 \u0443\u0436\u0435 \u043d\u0435 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u0438 \u043c\u043e\u0433\u0443\u0442 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.", "creation_timestamp": "2025-07-22T08:06:07.000000Z"}, {"uuid": "4e56cb0d-0147-44cc-89b9-697b296319d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "exploited", "source": "https://t.me/Russian_OSINT/5834", "content": "\u041a\u0430\u043d\u0430\u043b \ud83d\udd28SecAtor \u2014 @true_secator \u043f\u0438\u0448\u0435\u0442 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0435:\n\n12 \u043b\u0435\u0442 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u043b\u043e\u0441\u044c \u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u043e\u0440\u043e\u0433 (AAR), \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432 \u043d\u0430 \u043f\u043e\u0435\u0437\u0434\u0430\u0445 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0438.\n\n\u042d\u0442\u043e\u0442 \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u043e\u043c\u043e\u0442\u0438\u0432 (\u0433\u043e\u043b\u043e\u0432\u0443 \u043f\u043e\u0435\u0437\u0434\u0430) \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0432\u0430\u0433\u043e\u043d\u0435 -\u00a0\u043e\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438\u00a0(ETD), \u0438\u043d\u043e\u0433\u0434\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0435\u00a0EOT,\u00a0\u043c\u0438\u0433\u0430\u044e\u0449\u0438\u043c \u0437\u0430\u0434\u043d\u0438\u043c \u0444\u043e\u043d\u0430\u0440\u0435\u043c\u00a0(FRED) \u0438\u043b\u0438\u00a0\u0434\u0430\u0442\u0447\u0438\u043a\u043e\u043c \u0438 \u0442\u043e\u0440\u043c\u043e\u0437\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\u00a0(SBU).\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0437\u0430\u0434\u043d\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0435\u0437\u0434\u0430, \u0447\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0433\u0440\u0443\u0437\u043e\u0432\u044b\u0445 \u043f\u043e\u0435\u0437\u0434\u043e\u0432, \u0434\u043b\u0438\u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u043e\u0434\u043d\u0443-\u0434\u0432\u0435 \u043c\u0438\u043b\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u043c\u0430\u0448\u0438\u043d\u0438\u0441\u0442\u043e\u0432, \u0441\u0430\u043c\u043e\u0439 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u0440\u043c\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0434\u043d\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0435\u0437\u0434\u0430.\n\n\u0415\u0449\u0435 \u0432 2012 \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041d\u0438\u043b \u0421\u043c\u0438\u0442 \u043f\u0440\u0438\u0448\u0435\u043b \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043b\u043e\u043a\u043e\u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 EoT, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0430\u0431\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 - \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0441\u0443\u043c\u043c\u0443 BCH.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u0435\u0448\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u0441\u0435\u0433\u043e 500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u043c\u0443\u044e \u0440\u0430\u0434\u0438\u043e\u0441\u0442\u0430\u043d\u0446\u0438\u044e (SDR), \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0438 \u043e\u0442\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 EoT \u0434\u043b\u044f \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432.\n\n\u0420\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u044f\u043c\u043e\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c EOT/HOT \u0432 \u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u043d \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u043d\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u0438\u043b\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u043e\u0435\u0437\u0434\u0430 \u0434\u043b\u0438\u043d\u043e\u0439 3 \u043c\u0438\u043b\u0438 - \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c.\n\n\u0421\u043c\u0438\u0442 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 ICS-CERT \u0432 2012 \u0433\u043e\u0434\u0443, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 - \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0435\u0439 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u043e\u0440\u043e\u0433.\n\nAAR, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0433\u043e\u0434\u0430\u043c\u0438 \u043f\u0440\u0435\u0443\u043c\u0435\u043d\u044c\u0448\u0430\u043b\u0430 \u0435\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044f \u0435\u0451 \u043b\u0438\u0448\u044c \u043a\u0430\u043a \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0421\u043c\u0438\u0442\u043e\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e. \u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u044b\u0442\u0430\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0432\u044b\u0434\u0430\u0432\u0430\u043b\u043e.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 AAR \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u0421\u043c\u0438\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435\u00a0\u043d\u0430 Boston Review, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u0441\u043f\u0443\u0441\u0442\u044f AAR \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0436\u0435\u043d\u0438\u0435 \u0432 Fortune.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u0421\u043c\u0438\u0442 \u0437\u0430\u0431\u0438\u043b \u043d\u0430 \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u042d\u0440\u0438\u043a \u0420\u0435\u0439\u0442\u0435\u0440, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u0443 \u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u0441\u043f\u0443\u0441\u0442\u044f \u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0435\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON.\n\n\u0422\u043e\u0433\u0434\u0430 \u0421\u043c\u0438\u0442 \u0440\u0435\u0448\u0438\u043b \u0432\u043d\u043e\u0432\u044c \u043d\u0430\u0441\u0435\u0441\u0442\u044c \u043d\u0430 AAR \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u043b \u043d\u0430 \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0435\u0439\u0441\u0430 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0430\u0441\u044c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-1727, \u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 CISA \u0434\u0430\u0436\u0435 \u0432\u044b\u0434\u0430\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u0441\u043f\u0443\u0441\u0442\u044f 12 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0430\u043c\u0430 AAR\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e \u043f\u043b\u0430\u043d\u0430\u0445 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HoT/EoT \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b IEEE 802.16t Direct Peer-to-Peer (DPP), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0442\u0430\u043a \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043c\u0435\u043d\u044c\u0448\u0443\u044e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0443.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0434\u043e\u0440\u043e\u0436\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 EoT \u043d\u0430 \u043f\u043e\u0435\u0437\u0434\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u0439 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u0428\u0410, \u041a\u0430\u043d\u0430\u0434\u044b \u0438 \u041c\u0435\u043a\u0441\u0438\u043a\u0438. \n\n\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 2026 \u0433\u043e\u0434, \u0430 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u043e\u0441\u0442\u0430\u0432\u043e\u0432 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 5\u20137 \u043b\u0435\u0442 \u0438 \u043e\u0442 7 \u0434\u043e 10 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043e\u0432 \u0434\u043e\u043b\u043b.\n\n\u042d\u0442\u0438\u043c, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0441\u0442\u0430\u0440\u0430\u043d\u0438\u044f AAR \u043f\u0440\u0438\u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u0434\u0432\u0443\u0445 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439. \n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u0440\u0438\u0441\u043a\u0438 \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-1727 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0438.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u043b\u0438\u0441\u044c. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0438\u0445 \u043c\u0435\u0440 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c WIRED, \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2023, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 (\u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b), \u043f\u0430\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0432  \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u043e\u0435\u0437\u0434\u043e\u0432 \u0432 \u0440\u0430\u0439\u043e\u043d\u0435 \u0433\u043e\u0440\u043e\u0434\u0430 \u0429\u0435\u0446\u0438\u043d.", "creation_timestamp": "2025-07-16T13:04:25.000000Z"}, {"uuid": "a1e35ca2-0a1e-457a-bc0f-263ce5888e79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "exploited", "source": "https://t.me/true_secator/7235", "content": "12 \u043b\u0435\u0442 \u0441 \u043c\u043e\u043c\u0435\u043d\u0442\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043f\u043e\u043d\u0430\u0434\u043e\u0431\u0438\u043b\u043e\u0441\u044c \u0410\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0438 \u0430\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u0438\u0445 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u043e\u0440\u043e\u0433 (AAR), \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u043a\u0440\u0430\u0442\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u0439 \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d \u0434\u043b\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u0438 \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432 \u043d\u0430 \u043f\u043e\u0435\u0437\u0434\u0430\u0445 \u0432 \u043b\u044e\u0431\u043e\u0439 \u0442\u043e\u0447\u043a\u0435 \u0421\u0435\u0432\u0435\u0440\u043d\u043e\u0439 \u0410\u043c\u0435\u0440\u0438\u043a\u0438.\n\n\u042d\u0442\u043e\u0442 \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0441\u0432\u044f\u0437\u044b\u0432\u0430\u0435\u0442 \u043b\u043e\u043a\u043e\u043c\u043e\u0442\u0438\u0432 (\u0433\u043e\u043b\u043e\u0432\u0443 \u043f\u043e\u0435\u0437\u0434\u0430) \u0441 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438 \u043d\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u043c \u0432\u0430\u0433\u043e\u043d\u0435 -\u00a0\u043e\u043a\u043e\u043d\u0435\u0447\u043d\u043e\u0439 \u0441\u0438\u0433\u043d\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438\u00a0(ETD), \u0438\u043d\u043e\u0433\u0434\u0430 \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u043e\u0435\u00a0EOT,\u00a0\u043c\u0438\u0433\u0430\u044e\u0449\u0438\u043c \u0437\u0430\u0434\u043d\u0438\u043c \u0444\u043e\u043d\u0430\u0440\u0435\u043c\u00a0(FRED) \u0438\u043b\u0438\u00a0\u0434\u0430\u0442\u0447\u0438\u043a\u043e\u043c \u0438 \u0442\u043e\u0440\u043c\u043e\u0437\u043d\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c\u00a0(SBU).\n\n\u0423\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0441\u0431\u043e\u0440\u0430 \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0441 \u0437\u0430\u0434\u043d\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0435\u0437\u0434\u0430, \u0447\u0442\u043e \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e \u0434\u043b\u044f \u0434\u043b\u0438\u043d\u043d\u044b\u0445 \u0433\u0440\u0443\u0437\u043e\u0432\u044b\u0445 \u043f\u043e\u0435\u0437\u0434\u043e\u0432, \u0434\u043b\u0438\u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0447\u0430\u0441\u0442\u043e \u043f\u0440\u0435\u0432\u044b\u0448\u0430\u0435\u0442 \u043e\u0434\u043d\u0443-\u0434\u0432\u0435 \u043c\u0438\u043b\u0438.\n\n\u041f\u043e\u043c\u0438\u043c\u043e \u0442\u0435\u043b\u0435\u043c\u0435\u0442\u0440\u0438\u0438, \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u0442\u0430\u043a\u0436\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u043e\u0442 \u043c\u0430\u0448\u0438\u043d\u0438\u0441\u0442\u043e\u0432, \u0441\u0430\u043c\u043e\u0439 \u0432\u0430\u0436\u043d\u043e\u0439 \u0438\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0442\u043e\u0440\u043c\u043e\u0436\u0435\u043d\u0438\u0435 \u0437\u0430\u0434\u043d\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043f\u043e\u0435\u0437\u0434\u0430.\n\n\u0415\u0449\u0435 \u0432 2012 \u0433\u043e\u0434\u0443 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u041d\u0438\u043b \u0421\u043c\u0438\u0442 \u043f\u0440\u0438\u0448\u0435\u043b \u043a \u0432\u044b\u0432\u043e\u0434\u0443, \u0447\u0442\u043e \u0440\u0430\u0434\u0438\u043e\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0439 \u0434\u043b\u044f \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0438 \u043a\u043e\u043c\u0430\u043d\u0434 \u0441 \u043b\u043e\u043a\u043e\u043c\u043e\u0442\u0438\u0432\u043e\u0432 \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 EoT, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0441\u043b\u0430\u0431\u0443\u044e \u0444\u043e\u0440\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 - \u043f\u0440\u043e\u0441\u0442\u0443\u044e \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c\u043d\u0443\u044e \u0441\u0443\u043c\u043c\u0443 BCH.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u0438\u043c\u0435\u044e\u0449\u0438\u0439 \u0434\u0435\u0448\u0435\u0432\u043e\u0435 \u043e\u0431\u043e\u0440\u0443\u0434\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0442\u043e\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u0432\u0441\u0435\u0433\u043e 500 \u0434\u043e\u043b\u043b\u0430\u0440\u043e\u0432 \u0438 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e-\u043e\u043f\u0440\u0435\u0434\u0435\u043b\u044f\u0435\u043c\u0443\u044e \u0440\u0430\u0434\u0438\u043e\u0441\u0442\u0430\u043d\u0446\u0438\u044e (SDR), \u0441\u043f\u043e\u0441\u043e\u0431\u0435\u043d \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0430\u043a\u0435\u0442\u044b \u0438 \u043e\u0442\u0434\u0430\u0432\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0443 EoT \u0434\u043b\u044f \u0432\u043d\u0435\u0437\u0430\u043f\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0442\u043e\u0440\u043c\u043e\u0437\u043e\u0432.\n\n\u0420\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0437\u0430\u0432\u0438\u0441\u0438\u0442 \u043e\u0442 \u0443\u0441\u0438\u043b\u0435\u043d\u0438\u044f \u0438 \u043f\u0440\u044f\u043c\u043e\u0439 \u0432\u0438\u0434\u0438\u043c\u043e\u0441\u0442\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c EOT/HOT \u0432 \u0442\u043e\u043c \u0432\u0438\u0434\u0435, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043e\u043d \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d, \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043b\u0438\u0448\u044c \u043d\u0430 \u0440\u0430\u0441\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u043c\u0438\u043b\u044c, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u043f\u043e\u0435\u0437\u0434\u0430 \u0434\u043b\u0438\u043d\u043e\u0439 3 \u043c\u0438\u043b\u0438 - \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c.\n\n\u0421\u043c\u0438\u0442 \u0432\u043f\u0435\u0440\u0432\u044b\u0435 \u0441\u043e\u043e\u0431\u0449\u0438\u043b \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0441\u043b\u0430\u0431\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 ICS-CERT \u0432 2012 \u0433\u043e\u0434\u0443, \u043f\u043e\u0441\u043b\u0435 \u0447\u0435\u0433\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u044f \u0441\u0432\u044f\u0437\u0430\u043b\u0430\u0441\u044c \u0441 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 - \u0410\u043c\u0435\u0440\u0438\u043a\u0430\u043d\u0441\u043a\u043e\u0439 \u0430\u0441\u0441\u043e\u0446\u0438\u0430\u0446\u0438\u0435\u0439 \u0436\u0435\u043b\u0435\u0437\u043d\u044b\u0445 \u0434\u043e\u0440\u043e\u0433.\n\nAAR, \u0432 \u0441\u0432\u043e\u044e \u043e\u0447\u0435\u0440\u0435\u0434\u044c, \u0433\u043e\u0434\u0430\u043c\u0438 \u043f\u0440\u0435\u0443\u043c\u0435\u043d\u044c\u0448\u0430\u043b\u0430 \u0435\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435, \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u044f \u0435\u0451 \u043b\u0438\u0448\u044c \u043a\u0430\u043a \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0443\u0433\u0440\u043e\u0437\u0443, \u0434\u0430\u0436\u0435 \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0421\u043c\u0438\u0442\u043e\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0430 \u043e\u0431\u0440\u0430\u0442\u043d\u043e\u0433\u043e. \u0420\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0435 \u043d\u0430 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u0438\u0441\u043f\u044b\u0442\u0430\u043d\u0438\u0439 \u0442\u0430\u043a\u0436\u0435 \u043d\u0435 \u0432\u044b\u0434\u0430\u0432\u0430\u043b\u043e.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 AAR \u043e\u0442\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b, \u0421\u043c\u0438\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u0440\u0430\u0441\u043a\u0440\u044b\u043b \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0432 \u0441\u0442\u0430\u0442\u044c\u0435\u00a0\u043d\u0430 Boston Review, \u043e\u0434\u043d\u0430\u043a\u043e \u043d\u0435\u0434\u0435\u043b\u044e \u0441\u043f\u0443\u0441\u0442\u044f AAR \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u043f\u0440\u043e\u0432\u0435\u0440\u0436\u0435\u043d\u0438\u0435 \u0432 Fortune.\n\n\u041f\u043e \u0438\u0442\u043e\u0433\u0443 \u0421\u043c\u0438\u0442 \u0437\u0430\u0431\u0438\u043b \u043d\u0430 \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443.\n\n\u0422\u0435\u043c \u0432\u0440\u0435\u043c\u0435\u043d\u0435\u043c \u0434\u0440\u0443\u0433\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c, \u042d\u0440\u0438\u043a \u0420\u0435\u0439\u0442\u0435\u0440, \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u043e \u0442\u0430\u043a\u0436\u0435 \u043d\u0430\u0442\u043a\u043d\u0443\u043b\u0441\u044f \u043d\u0430 \u0442\u0443 \u0436\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u0434\u0432\u0430 \u0433\u043e\u0434\u0430 \u0441\u043f\u0443\u0441\u0442\u044f \u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u0435\u0435 \u043d\u0430 \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 DEFCON.\n\n\u0422\u043e\u0433\u0434\u0430 \u0421\u043c\u0438\u0442 \u0440\u0435\u0448\u0438\u043b \u0432\u043d\u043e\u0432\u044c \u043d\u0430\u0441\u0435\u0441\u0442\u044c \u043d\u0430 AAR \u0438 \u043d\u0430\u0441\u0442\u043e\u044f\u043b \u043d\u0430 \u0432\u043e\u0437\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043a\u0435\u0439\u0441\u0430 \u043b\u0435\u0442\u043e\u043c 2024 \u0433\u043e\u0434\u0430.\n\n\u041d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0430\u0441\u044c.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440 CVE-2025-1727, \u0438 \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435 CISA \u0434\u0430\u0436\u0435 \u0432\u044b\u0434\u0430\u043b\u0430 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435, \u0441\u043f\u0443\u0441\u0442\u044f 12 \u043b\u0435\u0442 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u0447\u0435\u0440\u0435\u0437 \u0434\u0432\u0430 \u043c\u0435\u0441\u044f\u0446\u0430 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0441\u0430\u043c\u0430 AAR\u00a0\u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430\u00a0\u043e \u043f\u043b\u0430\u043d\u0430\u0445 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b HoT/EoT \u043d\u0430 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b IEEE 802.16t Direct Peer-to-Peer (DPP), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043a\u0430\u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c, \u0442\u0430\u043a \u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u043c\u0435\u043d\u044c\u0448\u0443\u044e \u0437\u0430\u0434\u0435\u0440\u0436\u043a\u0443.\n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0434\u043e\u0440\u043e\u0436\u043d\u0438\u043a\u0430\u043c \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u0438\u0442 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0431\u043e\u043b\u0435\u0435 75\u00a0000 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 EoT \u043d\u0430 \u043f\u043e\u0435\u0437\u0434\u0430\u0445 \u043f\u043e \u0432\u0441\u0435\u0439 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u0428\u0410, \u041a\u0430\u043d\u0430\u0434\u044b \u0438 \u041c\u0435\u043a\u0441\u0438\u043a\u0438. \n\n\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0437\u0430\u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043e \u043d\u0430 2026 \u0433\u043e\u0434, \u0430 \u043d\u0430 \u043f\u043e\u043b\u043d\u0443\u044e \u043c\u043e\u0434\u0435\u0440\u043d\u0438\u0437\u0430\u0446\u0438\u044e \u0441\u043e\u0441\u0442\u0430\u0432\u043e\u0432 \u043f\u043e\u0442\u0440\u0435\u0431\u0443\u0435\u0442\u0441\u044f \u043e\u043a\u043e\u043b\u043e 5\u20137 \u043b\u0435\u0442 \u0438 \u043e\u0442 7 \u0434\u043e 10 \u043c\u0438\u043b\u043b\u0438\u0430\u0440\u0434\u043e\u0432 \u0434\u043e\u043b\u043b.\n\n\u042d\u0442\u0438\u043c, \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e, \u0438 \u043e\u0431\u044a\u044f\u0441\u043d\u044f\u044e\u0442\u0441\u044f \u0432\u0441\u0435 \u0441\u0442\u0430\u0440\u0430\u043d\u0438\u044f AAR \u043f\u0440\u0438\u0443\u043c\u0435\u043d\u044c\u0448\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u043d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u043e\u0447\u0435\u0432\u0438\u0434\u043d\u044b\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u0434\u0432\u0443\u0445 \u043d\u0435\u0437\u0430\u0432\u0438\u0441\u0438\u043c\u044b\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439. \n\n\u0422\u0435\u043f\u0435\u0440\u044c \u0436\u0435 \u043f\u043e\u0441\u043b\u0435 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044f \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0434\u0435\u0442\u0430\u043b\u0435\u0439 \u0440\u0438\u0441\u043a\u0438 \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 CVE-2025-1727 \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0432\u043e\u0437\u0440\u043e\u0441\u043b\u0438.\n\n\u041e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u0443\u0447\u0438\u0442\u044b\u0432\u0430\u0442\u044c, \u0447\u0442\u043e \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0430\u0442\u0430\u043a\u0438 \u0443\u0436\u0435 \u0441\u043e\u0432\u0435\u0440\u0448\u0430\u043b\u0438\u0441\u044c. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0441\u043c\u044f\u0433\u0447\u0430\u044e\u0449\u0438\u0445 \u043c\u0435\u0440 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043d\u0435 \u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c WIRED, \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 2023, \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 (\u0430\u0434\u0430\u043f\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043f\u043e\u0434 \u0435\u0432\u0440\u043e\u043f\u0435\u0439\u0441\u043a\u0438\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b), \u043f\u0430\u0440\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0432  \u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0435 \u043f\u043e\u0435\u0437\u0434\u043e\u0432 \u0432 \u0440\u0430\u0439\u043e\u043d\u0435 \u0433\u043e\u0440\u043e\u0434\u0430 \u0429\u0435\u0446\u0438\u043d.", "creation_timestamp": "2025-07-15T17:14:59.000000Z"}, {"uuid": "9524cdd8-8da7-48c4-9a6f-a5fd1f7df70f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1700", "type": "published-proof-of-concept", "source": "https://t.me/itsec_news/5914", "content": "\u0412 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u043e\u0433\u043e \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440\u0430 Notepad++ \u0432\u0435\u0440\u0441\u0438\u0438 8.8.1 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0443\u0440\u043e\u0432\u043d\u044f SYSTEM. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0443\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 8.8.2, \u043d\u043e \u0435\u0441\u043b\u0438 \u0432\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0435 \u0431\u043e\u043b\u0435\u0435 \u0441\u0442\u0430\u0440\u0443\u044e \u0441\u0431\u043e\u0440\u043a\u0443 \u2014 \u0440\u0438\u0441\u043a \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f.\n\n\u0421\u0443\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u0430 \u0434\u043b\u044f \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 Windows \u2014 \u0442\u0430\u043a \u043d\u0430\u0437\u044b\u0432\u0430\u0435\u043c\u044b\u0439 Search Order Hijacking. \u042d\u0442\u043e \u0442\u0435\u0445\u043d\u0438\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a Windows \u0438\u0449\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0435 \u0444\u0430\u0439\u043b\u044b. \u0412 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0435 Notepad++ \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043d\u0435 \u0443\u043a\u0430\u0437\u0430\u043b\u0438 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0439 \u043f\u0443\u0442\u044c \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0439 \u0443\u0442\u0438\u043b\u0438\u0442\u0435 regsvr32. \u0412 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0435, \u0435\u0441\u043b\u0438 \u0432 \u0442\u043e\u0439 \u0436\u0435 \u043f\u0430\u043f\u043a\u0435 \u043e\u043a\u0430\u0436\u0435\u0442\u0441\u044f \u043f\u043e\u0434\u0434\u0435\u043b\u044c\u043d\u044b\u0439 regsvr32.exe \u0441 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442 \u0438\u043c\u0435\u043d\u043d\u043e \u0435\u0433\u043e.\n\n\u0421\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u0430\u0442\u0430\u043a\u0438 \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0435\u043d: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0443\u0433\u043e\u0432\u043e\u0440\u0438\u0442\u044c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u043e\u0434\u043d\u0443 \u043f\u0430\u043f\u043a\u0443, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u00ab\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438\u00bb, \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a Notepad++ \u0432\u0435\u0440\u0441\u0438\u0438 8.8.1 \u0438 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b \u0441 \u0438\u043c\u0435\u043d\u0435\u043c regsvr32.exe. \u041f\u043e\u0441\u043b\u0435 \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u043a\u043e\u0434 \u0430\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u2014 \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 SYSTEM, \u0431\u0435\u0437 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0438 \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0439.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0436\u0435 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438, \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u0440\u0430\u0431\u043e\u0447\u0438\u0439 PoC \u0438 \u0432\u0438\u0434\u0435\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u044f. \u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 Notepad++ \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443 \u2014 \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 8.8.2 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043e\u0447\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0430\u0431\u0441\u043e\u043b\u044e\u0442\u043d\u044b\u0435 \u043f\u0443\u0442\u0438 \u043a \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c \u0443\u0442\u0438\u043b\u0438\u0442\u0430\u043c, \u043a\u0430\u043a \u0442\u043e\u0433\u043e \u0442\u0440\u0435\u0431\u0443\u044e\u0442 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 Microsoft.\n\n\u041f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043d\u0435 \u0440\u0435\u0434\u043a\u043e\u0441\u0442\u044c. Search Order Hijacking \u043e\u0441\u0442\u0430\u0451\u0442\u0441\u044f \u043e\u0434\u043d\u0438\u043c \u0438\u0437 \u0438\u0437\u043b\u044e\u0431\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u043f\u043e\u0441\u043e\u0431\u043e\u0432 \u0441\u043a\u0440\u044b\u0442\u044b\u0445 \u0430\u0442\u0430\u043a, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u043d\u0442\u0438\u0432\u0438\u0440\u0443\u0441\u044b \u0438 \u0437\u0430\u0449\u0438\u0442\u0443 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0437\u0430 \u0441\u0447\u0451\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u043e\u0433\u043e \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f Windows. \u0420\u0430\u043d\u0435\u0435 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b\u0435 \u0434\u044b\u0440\u044b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0430\u043b\u0438 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445 Motorola Software Fix (CVE-2025-1700) \u0438 \u0440\u044f\u0434\u0435 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439.\n\n\u0420\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0438 \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u043c\u0438: \u043d\u0435 \u0445\u0440\u0430\u043d\u0438\u0442\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0449\u0438\u043a\u0438 \u0432 \u043f\u0430\u043f\u043a\u0430\u0445 \u0441 \u0441\u043e\u043c\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u043c\u0438 \u0444\u0430\u0439\u043b\u0430\u043c\u0438, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0439\u0442\u0435 \u041f\u041e \u0442\u043e\u043b\u044c\u043a\u043e \u0441 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0430\u0439\u0442\u043e\u0432, \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0439\u0442\u0435 \u00ab\u0417\u0430\u0433\u0440\u0443\u0437\u043a\u0438\u00bb, \u0441\u0432\u043e\u0435\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0439\u0442\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0443. \u0414\u0430\u0436\u0435 \u043f\u0440\u0438\u0432\u044b\u0447\u043d\u044b\u0439 \u0442\u0435\u043a\u0441\u0442\u043e\u0432\u044b\u0439 \u0440\u0435\u0434\u0430\u043a\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u0441\u0442\u0430\u0442\u044c \u0442\u043e\u0447\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u0430 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438, \u0435\u0441\u043b\u0438 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0431\u0430\u0437\u043e\u0432\u044b\u0435 \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438.\n\n\u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0432\u0435\u0440\u0441\u0438\u044e Notepad++, \u043e\u0442\u043a\u0440\u043e\u0439\u0442\u0435 \u043c\u0435\u043d\u044e \u00ab\u0421\u043f\u0440\u0430\u0432\u043a\u0430\u00bb \u2192 \u00ab\u041e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0435\u00bb.\n\n#notepad #\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c #exploit #\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\n\nITsec NEWS", "creation_timestamp": "2025-06-24T08:19:54.000000Z"}, {"uuid": "5fe473f0-4bb5-4378-9ebf-4f8428398a66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1718", "type": "published-proof-of-concept", "source": "Telegram/Od3SFIwTXU85oXzkcR6Q-PR-rjVZLt3U6sXYvEmQ4ovgOa8", "content": "", "creation_timestamp": "2025-06-24T21:00:04.000000Z"}, {"uuid": "569ef99e-60dd-4b04-9b72-337065580d15", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1718", "type": "published-proof-of-concept", "source": "Telegram/7MW7zOv0TdbqiEW55ttQkmV4myzTV7w2cRbEuquVZ4QPSdc", "content": "", "creation_timestamp": "2025-06-24T19:00:05.000000Z"}, {"uuid": "01a31cf4-0b70-46f9-8375-83858d058e5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1718", "type": "published-proof-of-concept", "source": "Telegram/Xd5Dp2K-pK8eim0GR99MlfqC5INsxluEke7iGLM_07w0WZI", "content": "", "creation_timestamp": "2025-06-25T09:00:03.000000Z"}, {"uuid": "09e6dbf9-2068-4034-baec-75e73f065d26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1752", "type": "seen", "source": "https://t.me/cvedetector/25009", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1752 - Llama Index Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1752 \nPublished : May 10, 2025, 2:15 p.m. | 27\u00a0minutes ago \nDescription : A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0.12.15). The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. This allows an attacker to exhaust Python's recursion limit through repeated function calls, leading to resource consumption and ultimately crashing the Python process. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-10T17:17:29.000000Z"}, {"uuid": "3b843b31-a392-4616-b35f-633b8827e216", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/cvedetector/23479", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1732 - \"Fortinet USG FLEX H Series Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1732 \nPublished : April 22, 2025, 3:15 a.m. | 35\u00a0minutes ago \nDescription : An improper privilege management vulnerability in the recovery function of the USG FLEX H series uOS firmware version V1.31 and earlier could allow an authenticated local attacker with administrator privileges to upload a crafted configuration file and escalate privileges on a vulnerable device. \nSeverity: 6.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T05:51:43.000000Z"}, {"uuid": "ba6cbd0a-62dd-4329-8176-c698b0a35a00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/cvedetector/23478", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1731 - \"USG FLEX H series PostgreSQL Command Privilege Escalation Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1731 \nPublished : April 22, 2025, 3:15 a.m. | 35\u00a0minutes ago \nDescription : An incorrect permission assignment vulnerability in the PostgreSQL commands of the USG FLEX H series uOS firmware versions from V1.20 through V1.31 could allow an authenticated local attacker with low privileges to gain access to the Linux shell and escalate their privileges by crafting malicious scripts or modifying system configurations with administrator-level access through a stolen token. Modifying the system configuration is only possible if the administrator has not logged out and the token remains valid. \nSeverity: 7.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T05:51:42.000000Z"}, {"uuid": "ccfb842d-48e3-4d1b-b2e0-0d7954a0f589", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://t.me/cvedetector/22885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1782 - HylaFAX Enterprise Web Interface and AvantFAX File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1782 \nPublished : April 14, 2025, 7:15 p.m. | 1\u00a0hour, 27\u00a0minutes ago \nDescription : In HylaFAX Enterprise Web Interface and AvantFAX, the language form element is not properly sanitized   \nbefore being used and can be misused to include an arbitrary file in the  \n PHP code allowing an attacker to do anything as the web server user.   \nThis flaw requires the attacker to be authenticated with a valid user account. \nSeverity: 9.9 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T23:02:13.000000Z"}, {"uuid": "24cb8c9e-1586-4440-8c7d-9327c745699b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1704", "type": "seen", "source": "https://t.me/cvedetector/23198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1704 - Google ChromeOS ComponentInstaller Unenrollment and Device Management Request Interception Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1704 \nPublished : April 16, 2025, 11:15 p.m. | 39\u00a0minutes ago \nDescription : ComponentInstaller Modification in ComponentInstaller in Google ChromeOS 124.0.6367.34 on Chromebooks allows enrolled users with local access to unenroll devices   \nand intercept device management requests via loading components from the unencrypted stateful partition. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-17T02:06:35.000000Z"}, {"uuid": "ccca8eaf-6156-485f-95eb-cb5661b603fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "https://t.me/cvedetector/21510", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1734 - Apache HTTP Server Header Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1734 \nPublished : March 30, 2025, 6:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when receiving headers from HTTP server, the headers missing a colon (:) are treated as valid headers even though they are not. This may confuse applications into accepting invalid headers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-30T10:34:16.000000Z"}, {"uuid": "19618228-b64e-47f1-a78f-698c170fcbdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "https://t.me/cvedetector/21511", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1736 - Apache PHP Header Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1736 \nPublished : March 30, 2025, 6:15 a.m. | 1\u00a0hour, 55\u00a0minutes ago \nDescription : In PHP from 8.1.* before 8.1.32, from 8.2.* before 8.2.28, from 8.3.* before 8.3.19, from 8.4.* before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-30T10:34:16.000000Z"}, {"uuid": "7ab1c08c-724c-488c-8b82-c9fd4e21fc0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1705", "type": "seen", "source": "https://t.me/cvedetector/21389", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1705 - TagDiv Composer WordPress CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-1705 \nPublished : March 28, 2025, 9:15 a.m. | 1\u00a0hour, 1\u00a0minute ago \nDescription : The tagDiv Composer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.3. This is due to missing or incorrect nonce validation within the td_ajax_get_views AJAX action. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T11:53:29.000000Z"}, {"uuid": "8c22661e-464a-448a-9000-cece3a8a0844", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1762", "type": "seen", "source": "https://t.me/cvedetector/21382", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1762 - \"WordPress Event Tickets with Ticket Scanner CSRF Settings Update\"\", \n  \"Content\": \"CVE ID : CVE-2025-1762 \nPublished : March 28, 2025, 6:15 a.m. | 1\u00a0hour, 53\u00a0minutes ago \nDescription : The Event Tickets with Ticket Scanner WordPress plugin before 2.5.4 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-28T09:23:05.000000Z"}, {"uuid": "d7397974-19cd-4e93-b04c-6064bf447095", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1783", "type": "seen", "source": "Telegram/oOKj6pT3iKGz0Ess693FlvEstrC7o3N8UOFeSkcTwWodmu7L", "content": "", "creation_timestamp": "2025-03-08T16:29:02.000000Z"}, {"uuid": "a029bbef-a080-4c29-a84e-3d567bec1837", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1774", "type": "seen", "source": "https://t.me/cvedetector/20476", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1774 - NASK PIB BotSense String Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1774 \nPublished : March 17, 2025, 3:15 p.m. | 33\u00a0minutes ago \nDescription : Incorrect string encoding\u00a0vulnerability in NASK - PIB BotSense allows injection of an additional field separator character or value in the content of some fields of the generated event. A field with additional field separator characters or values can be included in the \"extraData\" field.This issue affects BotSense in versions before 2.8.0. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T17:28:07.000000Z"}, {"uuid": "92e5eb75-07a8-44cb-b6b6-088f443a5325", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1724", "type": "seen", "source": "https://t.me/cvedetector/20435", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1724 - Zohocorp ManageEngine Analytics Plus/Zoho Analytics Hardcoded Token Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1724 \nPublished : March 17, 2025, 7:15 a.m. | 16\u00a0minutes ago \nDescription : Zohocorp's ManageEngine Analytics Plus and Zoho Analytics on-premise versions older than 6130 are vulnerable to an AD only account takeover because of a hardcoded sensitive token. \nSeverity: 7.4 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"17 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-17T09:06:07.000000Z"}, {"uuid": "0fc1b08d-b613-4a58-b4af-735a1104c890", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "seen", "source": "https://t.me/cvedetector/20350", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1771 - WordPress Traveler Theme Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1771 \nPublished : March 15, 2025, 5:15 a.m. | 34\u00a0minutes ago \nDescription : The Traveler theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 3.1.8 via the 'hotel_alone_load_more_post' function 'style' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where php file type can be uploaded and included. \nSeverity: 9.8 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:37.000000Z"}, {"uuid": "0cbdf32f-cde3-4920-8771-e0f308050d76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1773", "type": "seen", "source": "https://t.me/cvedetector/20349", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1773 - WordPress Traveler Theme Reflected Cross-Site Scripting\", \n  \"Content\": \"CVE ID : CVE-2025-1773 \nPublished : March 15, 2025, 5:15 a.m. | 34\u00a0minutes ago \nDescription : The Traveler theme for WordPress is vulnerable to Reflected Cross-Site Scripting via multiple parameters in all versions up to, and including, 3.1.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-15T06:55:36.000000Z"}, {"uuid": "e7cf9c7f-b949-4b66-abf9-bb057e5ccc6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1764", "type": "seen", "source": "https://t.me/cvedetector/20267", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1764 - LoginPress | wp-login Custom Login Page Customizer CSRF\", \n  \"Content\": \"CVE ID : CVE-2025-1764 \nPublished : March 14, 2025, 6:15 a.m. | 27\u00a0minutes ago \nDescription : The LoginPress | wp-login Custom Login Page Customizer plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.3.1. This is due to missing or incorrect nonce validation on the 'custom_plugin_set_option' function. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site. The 'WPBRIGADE_SDK__DEV_MODE' constant must be set to 'true' to exploit the vulnerability. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-14T08:20:45.000000Z"}, {"uuid": "04d859d5-721e-43b5-acbe-4502aa9bb684", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1769", "type": "seen", "source": "https://t.me/cvedetector/21165", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1769 - WooCommerce Product Import Export Directory Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1769 \nPublished : March 26, 2025, 12:15 p.m. | 26\u00a0minutes ago \nDescription : The Product Import Export for WooCommerce \u2013 Import Export Product CSV Suite plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.5.0 via the download_file() function. This makes it possible for authenticated attackers, with Administrator-level access and above, to read the contents of arbitrary log files on the server, which can contain sensitive information. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T13:53:15.000000Z"}, {"uuid": "0dbaf4cd-a371-40cc-9f4f-adb2bf4d7af4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1703", "type": "seen", "source": "https://t.me/cvedetector/21156", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1703 - WordPress Ultimate Blocks Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1703 \nPublished : March 26, 2025, 10:15 a.m. | 17\u00a0minutes ago \nDescription : The Ultimate Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the \u2018content\u2019 parameter in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T12:12:41.000000Z"}, {"uuid": "07f95e9e-80cd-40d4-b006-e5a77a5e2253", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1784", "type": "seen", "source": "https://t.me/cvedetector/21153", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1784 - Spectra WordPress Gutenberg Blocks Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-1784 \nPublished : March 26, 2025, 6:15 a.m. | 2\u00a0hours, 17\u00a0minutes ago \nDescription : The Spectra \u2013 WordPress Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the uagb block in all versions up to, and including, 2.19.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"26 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-26T09:42:23.000000Z"}, {"uuid": "ab86ace9-45ec-41d4-a076-8ab20dc36206", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1798", "type": "seen", "source": "https://t.me/cvedetector/21068", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1798 - Apache Struts Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1798 \nPublished : March 25, 2025, 6:15 a.m. | 1\u00a0hour, 32\u00a0minutes ago \nDescription : The  does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-25T09:27:47.000000Z"}, {"uuid": "8e7d01c0-f58a-4081-8cd3-1704025f7b59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1770", "type": "seen", "source": "https://t.me/cvedetector/20699", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1770 - Eventin WordPress Plugin Local File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1770 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Event Manager, Events Calendar, Tickets, Registrations \u2013 Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.24 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other \u201csafe\u201d file types can be uploaded and included. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:19.000000Z"}, {"uuid": "1a5cb895-be1c-43a7-9a5b-52a5786bcbcd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1766", "type": "seen", "source": "https://t.me/cvedetector/20698", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1766 - \"Eventin WordPress Plugin Payment Status Tampering Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1766 \nPublished : March 20, 2025, 6:15 a.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : The Event Manager, Events Calendar, Tickets, Registrations \u2013 Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'payment_complete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to 'completed', possibly resulting in financial loss. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T09:02:18.000000Z"}, {"uuid": "0078f153-2e53-4111-b072-5fd70463a23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1702", "type": "seen", "source": "https://t.me/cvedetector/19628", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1702 - Ultimate Member - SQL Injection\", \n  \"Content\": \"CVE ID : CVE-2025-1702 \nPublished : March 5, 2025, 12:15 p.m. | 51\u00a0minutes ago \nDescription : The Ultimate Member \u2013 User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'search' parameter in all versions up to, and including, 2.10.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T14:26:13.000000Z"}, {"uuid": "db016658-d1c9-45d6-86f8-61f4f59ecd89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1796", "type": "seen", "source": "https://t.me/cvedetector/20707", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1796 - \"Langgenius Dify PRNG Predictable Password Reset Code Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-1796 \nPublished : March 20, 2025, 10:15 a.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random number generator (PRNG) used for generating password reset codes. The application uses `random.randint` for this purpose, which is not suitable for cryptographic use and can be cracked. An attacker with access to workflow tools can extract the PRNG output and predict future password reset codes, leading to a complete compromise of the application. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"20 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-20T13:12:59.000000Z"}, {"uuid": "0186693e-50b4-4b43-93c7-b6d99c05d5ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "https://t.me/cvedetector/20654", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1758 - Progress LoadMaster Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-1758 \nPublished : March 19, 2025, 4:15 p.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects:  \n  \n* LoadMaster: 7.2.40.0 and above  \n  \n* ECS: All versions  \n  \n* Multi-Tenancy: 7.1.35.4 and above \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"19 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-19T18:49:30.000000Z"}, {"uuid": "5de2e86e-e7ac-4b2c-9882-03148d48f402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1714", "type": "seen", "source": "https://t.me/cvedetector/19646", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-1714 - Perforce Gliffy Sign-up Workflow Authentication Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-1714 \nPublished : March 5, 2025, 3:15 p.m. | 2\u00a0hours, 3\u00a0minutes ago \nDescription : Lack of Rate Limiting in Sign-up workflow in Perforce Gliffy prior to version 4.14.0-7\u00a0on Gliffy online allows attacker to enumerate valid user emails and potentially DOS the server \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-05T18:37:08.000000Z"}, {"uuid": "4fad0efc-1cc0-4f40-8338-ded57c0b10cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "https://t.me/CyberBulletin/2791", "content": "\u26a1CVE-2025-1758: Critical Buffer Overflow in Kemp LoadMaster Opens Door to Remote Code Execution.\n\n#CyberBulletin", "creation_timestamp": "2025-03-23T12:19:02.000000Z"}, {"uuid": "6036d8d1-3eb4-47c9-8f4c-14df829fcabb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "https://t.me/CyberBulletin/2438", "content": "\u26a1CVE-2025-1751: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'.\n\n#CyberBulletin", "creation_timestamp": "2025-02-28T12:24:24.000000Z"}, {"uuid": "41785a51-af8a-471e-ae9f-47918ac9a680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1776", "type": "seen", "source": "Telegram/6ARVCAVolEZ7RUDtB0fis-aGWaZXKyOqLVKvMERYz5HQ0T0q", "content": "", "creation_timestamp": "2025-03-02T11:44:23.000000Z"}, {"uuid": "b8c81366-30f8-4beb-97c1-d8e1670939d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1749", "type": "seen", "source": "Telegram/Ir0aBMzlQ-9QLhI8BqaBKdS1A3dQ1LmZ07TjYzZ0dMrS8ose", "content": "", "creation_timestamp": "2025-03-02T11:44:23.000000Z"}, {"uuid": "db2c29b2-8d1b-49ff-a79c-bc6a19cac90f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/13386", "content": "\ud83d\udea8CVE-2025-1751: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')\n\nhttps://darkwebinformer.com/cve-2025-1751-improper-neutralization-of-special-elements-used-in-an-sql-command-sql-injection/", "creation_timestamp": "2025-02-27T20:21:35.000000Z"}, {"uuid": "3d461eee-4963-44b0-bd31-dbd7cd367cd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1780", "type": "seen", "source": "Telegram/5KyYCsk6sHSq8tU0OLK5gjllt5IqFxwdjYOd1E3ZC82Ej64L", "content": "", "creation_timestamp": "2025-03-02T11:46:31.000000Z"}, {"uuid": "512bac40-0400-4686-9be7-7683ba333065", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "Telegram/z3hrnS4sCgLCaWMA7rI3OA9UpXy1hGKImXcclK-WChPDY5I", "content": "", "creation_timestamp": "2025-04-22T05:00:32.000000Z"}, {"uuid": "3d3fd32b-7302-4f94-aafc-3e59237ad1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1752", "type": "published-proof-of-concept", "source": "Telegram/2SdsDq4v2n707e_0JKXkdQoXAcGWQI-9qidZ-mF77dQcdfs", "content": "", "creation_timestamp": "2025-05-10T16:31:19.000000Z"}, {"uuid": "d0348555-d080-4807-b77e-d378e95a2b0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1717", "type": "seen", "source": "Telegram/u5U5HkdsjVTNTjKDjqO60RM8YSduevD2fdfzdqTTMF2XVOk", "content": "", "creation_timestamp": "2025-02-27T11:00:55.000000Z"}, {"uuid": "4970a39e-6fd4-4cd5-a111-48b85e1103c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1771", "type": "seen", "source": "Telegram/y8CFJHM1cjDY_tcN3BSfCGqantJOg2RjqZfbc4Sqrxn94AE", "content": "", "creation_timestamp": "2025-03-15T06:00:37.000000Z"}, {"uuid": "9452d974-1d62-4949-9f1d-f2677044684c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1744", "type": "published-proof-of-concept", "source": "Telegram/2j9dDfxEn4zzxplHxmSFVJ_VctTjIgqmnm6Kr1emkEpUxu8", "content": "", "creation_timestamp": "2025-02-28T05:00:35.000000Z"}, {"uuid": "9c21f27f-1763-475c-90d9-20bce9448030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1755", "type": "seen", "source": "Telegram/s7lNZ7oTwjkbaq_oXmtT9504WAfgfkXCkulm8loNhiv2dlQ", "content": "", "creation_timestamp": "2025-02-27T18:00:35.000000Z"}, {"uuid": "51bdff21-49df-41b6-a770-9fa3742059cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1756", "type": "seen", "source": "Telegram/s7lNZ7oTwjkbaq_oXmtT9504WAfgfkXCkulm8loNhiv2dlQ", "content": "", "creation_timestamp": "2025-02-27T18:00:35.000000Z"}, {"uuid": "3ccdbff0-9737-44fd-8464-305c782bf135", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1751", "type": "seen", "source": "Telegram/8yOYO6tlUL_8g395Wy_bOOGl_JbQsya4zgpogj5jDmK3igg", "content": "", "creation_timestamp": "2025-02-27T14:30:56.000000Z"}, {"uuid": "ead5d51b-88ec-4e3b-97ca-dbfc0ac4748f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1739", "type": "seen", "source": "Telegram/8yOYO6tlUL_8g395Wy_bOOGl_JbQsya4zgpogj5jDmK3igg", "content": "", "creation_timestamp": "2025-02-27T14:30:56.000000Z"}, {"uuid": "60a06b83-25cf-477b-b1c6-7842d89564a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1702", "type": "published-proof-of-concept", "source": "Telegram/DsqY2xCUAceOk6gVX-WbKwN-bFih9TINF-Jy-5d0JrLUuxc", "content": "", "creation_timestamp": "2025-03-05T13:00:21.000000Z"}, {"uuid": "6f78e88e-487c-460c-ac90-d5f81fe7bf1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "published-proof-of-concept", "source": "Telegram/B00WHQsRDE7JVKYOf8yUGl6ojwx9yH5tJgPqXO_MPOY24Pc", "content": "", "creation_timestamp": "2025-03-03T10:01:09.000000Z"}, {"uuid": "e433f86f-f223-411b-91a9-e05bef977cfd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1770", "type": "published-proof-of-concept", "source": "Telegram/b-Rq9xwdT73IsZjP78xaFrbA6w7n-vMDyPG9dLICCFXP7XU", "content": "", "creation_timestamp": "2025-03-20T07:30:50.000000Z"}, {"uuid": "3f8ca177-12c7-41e0-aa2e-81af1fca96ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1724", "type": "seen", "source": "Telegram/-FMXSYahWig25nQuB7I2QzpPjaWCCxYrxe4H_Jbi6y-FKiw", "content": "", "creation_timestamp": "2025-03-17T09:00:16.000000Z"}, {"uuid": "fdbea82f-8a36-4a2e-9dc8-9dc49b70f59a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://t.me/proxy_bar/2545", "content": "CVE-2025-1767 Kubernetes \n*\nVulnerability and Exploitation", "creation_timestamp": "2025-03-14T17:53:27.000000Z"}, {"uuid": "9d0e5535-525f-47d8-af26-3866ff06bec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5132", "content": "Local privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731) #LocalPrivilegeEscalation #ZyxelUSGFLEX #CVE20251731 #HNsecurity #fuzzing https://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731/", "creation_timestamp": "2026-08-03T02:14:12.767349Z"}, {"uuid": "9ead016b-5d86-4e15-ac6d-0d7cd359f1ee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1736", "type": "seen", "source": "https://t.me/anti_malware/20065", "content": "\ud83d\udee0\ufe0f PHP \u0441\u043d\u043e\u0432\u0430 \u043b\u0430\u0442\u0430\u0435\u0442 \u0434\u044b\u0440\u044b: \u043d\u0430 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0435\u043d\u044c\u0448\u0435, \u043d\u043e \u0440\u0438\u0441\u043a\u0438 \u0431\u044b\u043b\u0438 \u0437\u043d\u0430\u0442\u043d\u044b\u0435! \ud83d\udc18\ud83d\udca8\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u044f\u043b\u0438 \u043c\u043e\u043b\u043e\u0442\u043e\u043a \u0438 \u0437\u0430\u043a\u043e\u043b\u043e\u0442\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u044b\u0440 \u0432 \u043a\u043e\u0434\u0435! \ud83d\udd28\ud83d\udea7 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u0430\u0448\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0448\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u0438\u0439 \u0441\u044b\u0440 \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \ud83e\uddc0\n\n\ud83e\ude79 CVE-2025-1861 \u2014 \ud83e\udd26\u200d\u2642\ufe0f \u0411\u0443\u0444\u0435\u0440 \u043f\u043e\u0434 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Location \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043c\u0430\u043b\u043e\u0432\u0430\u0442 (1024 \u0431\u0430\u0439\u0442\u0430 \u0432\u043c\u0435\u0441\u0442\u043e 8000). \u0418\u0442\u043e\u0433: \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u043e\u043f\u0430\u0441\u0442\u044c \u0432\u0430\u0436\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u0438 URI \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043b\u0443\u0447\u0438\u0442\u044c\u0441\u044f \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u0445\u0430\u043e\u0441! \ud83d\udd04\n\ud83e\ude79 CVE-2025-1734 \u2014 \ud83d\udd75\ufe0f\u200d\u2642\ufe0f \u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0431\u0435\u0437 \u0434\u0432\u043e\u0435\u0442\u043e\u0447\u0438\u044f \u0438\u043b\u0438 \u0441 \u043f\u0440\u043e\u0431\u0435\u043b\u043e\u043c \u043f\u0435\u0440\u0435\u0434 \u043d\u0438\u043c \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u0442\u044c request smuggling \u0438 \u0448\u043f\u0438\u043e\u043d\u0438\u0442\u044c \u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438! \ud83d\ude08\n\ud83e\ude79 CVE-2025-1217 \u2014 \ud83d\udcdc \u041f\u0430\u0440\u0441\u0435\u0440 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u043b \u0441\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438, \u0447\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u0441\u043b\u043e\u043c\u0430\u0442\u044c MIME-\u0442\u0438\u043f\u044b \u0438 \u043f\u043e\u0434\u043f\u043e\u0440\u0442\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432. \ud83c\udfad\n\ud83e\ude79 CVE-2025-1219 \u2014 \ud83d\udd04 libxml \u043f\u0443\u0442\u0430\u043b\u0441\u044f \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438. \u041a\u0442\u043e \u0442\u0430\u043c \u0445\u043e\u0442\u0435\u043b \u00ab\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043f\u0430\u0440\u0441\u0438\u043d\u0433 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u00bb? \ud83c\udfab\ud83d\udeaa\n\ud83e\ude79 CVE-2025-1736 \u2014 \ud83d\udce1 \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 check_has_header \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Authorization) \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c. \u042d\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \ud83e\udd37\u200d\u2642\ufe0f", "creation_timestamp": "2025-03-18T18:06:01.000000Z"}, {"uuid": "060824bf-cf91-4978-9d05-ca306deadb65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1734", "type": "seen", "source": "https://t.me/anti_malware/20065", "content": "\ud83d\udee0\ufe0f PHP \u0441\u043d\u043e\u0432\u0430 \u043b\u0430\u0442\u0430\u0435\u0442 \u0434\u044b\u0440\u044b: \u043d\u0430 5 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043c\u0435\u043d\u044c\u0448\u0435, \u043d\u043e \u0440\u0438\u0441\u043a\u0438 \u0431\u044b\u043b\u0438 \u0437\u043d\u0430\u0442\u043d\u044b\u0435! \ud83d\udc18\ud83d\udca8\n\n\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0441\u043d\u043e\u0432\u0430 \u0432\u0437\u044f\u043b\u0438 \u043c\u043e\u043b\u043e\u0442\u043e\u043a \u0438 \u0437\u0430\u043a\u043e\u043b\u043e\u0442\u0438\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u044b\u0445 \u0434\u044b\u0440 \u0432 \u043a\u043e\u0434\u0435! \ud83d\udd28\ud83d\udea7 \u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043f\u044f\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u0435\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u0430\u0448\u0435 \u0432\u0435\u0431-\u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u0432 \u0448\u0432\u0435\u0439\u0446\u0430\u0440\u0441\u043a\u0438\u0439 \u0441\u044b\u0440 \u0434\u043b\u044f \u0445\u0430\u043a\u0435\u0440\u043e\u0432. \ud83e\uddc0\n\n\ud83e\ude79 CVE-2025-1861 \u2014 \ud83e\udd26\u200d\u2642\ufe0f \u0411\u0443\u0444\u0435\u0440 \u043f\u043e\u0434 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a Location \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u043c\u0430\u043b\u043e\u0432\u0430\u0442 (1024 \u0431\u0430\u0439\u0442\u0430 \u0432\u043c\u0435\u0441\u0442\u043e 8000). \u0418\u0442\u043e\u0433: \u043c\u043e\u0433\u043b\u0438 \u043f\u0440\u043e\u043f\u0430\u0441\u0442\u044c \u0432\u0430\u0436\u043d\u044b\u0435 \u0447\u0430\u0441\u0442\u0438 URI \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0441\u043b\u0443\u0447\u0438\u0442\u044c\u0441\u044f \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u0445\u0430\u043e\u0441! \ud83d\udd04\n\ud83e\ude79 CVE-2025-1734 \u2014 \ud83d\udd75\ufe0f\u200d\u2642\ufe0f \u0417\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 \u0431\u0435\u0437 \u0434\u0432\u043e\u0435\u0442\u043e\u0447\u0438\u044f \u0438\u043b\u0438 \u0441 \u043f\u0440\u043e\u0431\u0435\u043b\u043e\u043c \u043f\u0435\u0440\u0435\u0434 \u043d\u0438\u043c \u043d\u0435 \u0432\u044b\u0437\u044b\u0432\u0430\u043b\u0438 \u043e\u0448\u0438\u0431\u043a\u0438, \u0430 \u0437\u043d\u0430\u0447\u0438\u0442, \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u043e\u0432\u0435\u0440\u043d\u0443\u0442\u044c request smuggling \u0438 \u0448\u043f\u0438\u043e\u043d\u0438\u0442\u044c \u0437\u0430 \u0434\u0430\u043d\u043d\u044b\u043c\u0438! \ud83d\ude08\n\ud83e\ude79 CVE-2025-1217 \u2014 \ud83d\udcdc \u041f\u0430\u0440\u0441\u0435\u0440 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u0447\u0438\u0442\u0430\u043b \u0441\u0432\u0435\u0440\u043d\u0443\u0442\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438, \u0447\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u0441\u043b\u043e\u043c\u0430\u0442\u044c MIME-\u0442\u0438\u043f\u044b \u0438 \u043f\u043e\u0434\u043f\u043e\u0440\u0442\u0438\u0442\u044c \u0440\u0430\u0431\u043e\u0442\u0443 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432. \ud83c\udfad\n\ud83e\ude79 CVE-2025-1219 \u2014 \ud83d\udd04 libxml \u043f\u0443\u0442\u0430\u043b\u0441\u044f \u0432 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0430\u0445 \u0440\u0435\u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0432, \u0438\u0437-\u0437\u0430 \u0447\u0435\u0433\u043e \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438. \u041a\u0442\u043e \u0442\u0430\u043c \u0445\u043e\u0442\u0435\u043b \u00ab\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u0439 \u043f\u0430\u0440\u0441\u0438\u043d\u0433 \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442\u0430\u00bb? \ud83c\udfab\ud83d\udeaa\n\ud83e\ude79 CVE-2025-1736 \u2014 \ud83d\udce1 \u041e\u0448\u0438\u0431\u043a\u0430 \u0432 check_has_header \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u043b\u0430 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043a\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Authorization) \u043f\u0440\u043e\u0441\u0442\u043e \u043d\u0435 \u043e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u043b\u0438\u0441\u044c. \u042d\u0442\u043e \u043c\u043e\u0433\u043b\u043e \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 \u0434\u0440\u0443\u0433\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b. \ud83e\udd37\u200d\u2642\ufe0f", "creation_timestamp": "2025-03-18T18:06:01.000000Z"}, {"uuid": "95f10d20-80e1-4005-bfae-b30d291fbae0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-08-03T02:14:13.175535Z"}, {"uuid": "b4939f5d-cb9a-4346-b80c-edad59cad6c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-08-03T02:14:13.255485Z"}, {"uuid": "8a99f4b6-97aa-441f-9640-89490b439a24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5277", "content": "CVE-2025-1729 - Privilege Escalation Using TPQMAssistant.exe #CVE20251729 #PrivilegeEscalation #LenovoSecurity #DLLSideloading #TPQMAssistant https://trustedsec.com/blog/cve-2025-1729-privilege-escalation-using-tpqmassistant-exe", "creation_timestamp": "2026-08-03T03:23:04.760204Z"}, {"uuid": "9b14b3ec-3b4c-4015-90a1-968ff017cdd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-04T10:00:05.519656Z"}, {"uuid": "0a9b565d-be1d-445d-801a-75a5e47354b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/suboxone_chatroom/7470", "content": "\u26a0\ufe0fCVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus\n\n\ud83d\udd3dDorks:\nHUNTER : http://product.name=\"ManageEngine ADSelfService Plus\"\nFOFA : product=\"ManageEngine-ADSelfService-Plus\"\nSHODAN : title:\"ADSelfService Plus\"\n\n\ud83d\udda5Refer:https://securityonline.info/cve-2025-1723-zoho-patches-account-takeover-vulnerability-in-adselfservice-plus/\nhttps://manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2025-04-01T12:38:04.000000Z"}, {"uuid": "cfdd09e1-55ee-4c8b-868d-9d006166e84c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/purp_sec/341", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-0114 \u0438 CVE-2024-0141 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 NVIDIA Hopper HGX 8-GPU HMC, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a HMC \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0435\u0435\u0441\u0442\u0440, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-1723 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ADSelfService Plus, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0435\u0430\u043d\u0441\u0430. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 ADSelfService Plus \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\ud83d\udd35CVE-2024-53676 \u2014 PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Hewlett Packard Enterprise Insight Remote Support (HPE IRS). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2025-22224, CVE-2025-22225, \u0438 CVE-2025-22226 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 VMware ESXi, vSphere, Workstation, Fusion, Cloud Foundation \u0438 Telco Cloud Platform. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Virtual Machine Executable (VMX), \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u044f\u0434\u0440\u043e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 VMX. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-05T00:00:25.753719Z"}, {"uuid": "65619375-3a95-4306-a320-337ff8a0f220", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5277", "content": "CVE-2025-1729 - Privilege Escalation Using TPQMAssistant.exe #CVE20251729 #PrivilegeEscalation #LenovoSecurity #DLLSideloading #TPQMAssistant https://trustedsec.com/blog/cve-2025-1729-privilege-escalation-using-tpqmassistant-exe", "creation_timestamp": "2026-08-02T01:00:03.946381Z"}, {"uuid": "db66d2d6-2e94-4ee4-8b0c-3e5af899d694", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5132", "content": "Local privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731) #LocalPrivilegeEscalation #ZyxelUSGFLEX #CVE20251731 #HNsecurity #fuzzing https://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731/", "creation_timestamp": "2026-08-02T02:00:03.885111Z"}, {"uuid": "9d64a651-306d-4d77-885a-1ce47fb5a359", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-08-02T02:00:04.099344Z"}, {"uuid": "48f77a82-3c63-4cd6-b3ab-e9e26f3eaf92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "published-proof-of-concept", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-08-02T02:00:04.146601Z"}, {"uuid": "d404a516-fbc7-4a73-acca-29775dc736b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/purp_sec/341", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35CVE-2024-0114 \u0438 CVE-2024-0141 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 NVIDIA Hopper HGX 8-GPU HMC, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a HMC \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0435 \u0432 \u043d\u0435\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0435\u0435\u0441\u0442\u0440, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438.\n\n\ud83d\udd35CVE-2025-1723 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ADSelfService Plus, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u0430\u044f \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0441\u0435\u0430\u043d\u0441\u0430. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0435\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0435\u0441\u043b\u0438 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430 \u0432 ADSelfService Plus \u043d\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0430 \u043c\u043d\u043e\u0433\u043e\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u0430\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f.\n\n\ud83d\udd35CVE-2024-53676 \u2014 PoC \u0434\u043b\u044f \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Hewlett Packard Enterprise Insight Remote Support (HPE IRS). \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0445\u0430\u043a\u0435\u0440 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35CVE-2025-22224, CVE-2025-22225, \u0438 CVE-2025-22226 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 VMware ESXi, vSphere, Workstation, Fusion, Cloud Foundation \u0438 Telco Cloud Platform. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u043e\u0442 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 Virtual Machine Executable (VMX), \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0433\u043e \u043d\u0430 \u0445\u043e\u0441\u0442\u0435, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u044f\u0434\u0440\u043e, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0438\u043d\u0438\u0446\u0438\u0430\u0446\u0438\u0438 \u0443\u0442\u0435\u0447\u043a\u0438 \u043f\u0430\u043c\u044f\u0442\u0438 \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 VMX. \n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-04T13:00:09.234401Z"}, {"uuid": "0863e63d-7550-4147-885b-6820b85e2301", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://bsky.app/profile/hugovalters.bsky.social/post/3mms3zvjdu42r", "content": "CVE-2025-1782 - Critical RCE in HylaFAX. Unpatched. CVSS 9.9. Authenticated users can exploit file inclusion for full server compromise. Isolate or disable immediately. #CVE #HylaFAX #infosec\n\nhttps://www.valtersit.com/cve/CVE-2025-1782/", "creation_timestamp": "2026-05-26T23:03:10.967216Z"}, {"uuid": "d7cc11e8-5fa3-454f-862b-3116bbdfd2d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "published-proof-of-concept", "source": "Telegram/r4YAq9sqiCZdls8-ldA7XAIZMKynCRrGuzy5h6EQSIOA624", "content": "", "creation_timestamp": "2026-08-05T00:00:47.669087Z"}, {"uuid": "d9580d09-15cf-4094-8939-c1ed7548b65b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-1716", "type": "published-proof-of-concept", "source": "https://github.com/advisories/GHSA-655q-fx9r-782v", "content": "", "creation_timestamp": "2025-03-03T20:05:49.000000Z"}, {"uuid": "247ecadf-aa6e-4530-9409-a92958b9cf0e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://t.me/purp_sec/911", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE\u20112025\u20115333 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Broadcom/Symantec Altiris Inventory Rule Management (IRM), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 .NET-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 legacy-endpoint. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u044d\u0442\u043e\u0442 endpoint, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE\u20112025\u201149127 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kafbat UI (Apache Kafka), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 endpoint, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 JMX-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Kafka-\u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c JMX-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0437\u0430\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 UI \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0442\u0440\u0438\u043a\u0438 \u0442\u0438\u043f\u0430 JMX, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044f \u0430\u0434\u0440\u0435\u0441. \u041f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u044d\u0442\u043e\u043c\u0443 JMX-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 Kafbat UI \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e java.rmi.server \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e BinaryServerFormatterSinkProvider, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a RCE.\n\n\ud83d\udd35 CVE-2025-48384 \u2014 \u0431\u0430\u0433 \u0432 Git \u0434\u043b\u044f Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 git clone --recursive, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 submodule \u0441 \u043f\u0443\u0442\u0435\u043c, \u043e\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u0441\u0438\u043c\u0432\u043e\u043b \\r (carriage return). Git \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u043f\u0443\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 symlinks \u0438 malicious hook-\u0444\u0430\u0439\u043b\u043e\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35 CVE-2025-1727 \u2014 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u0445 End\u2011of\u2011Train (EoT) \u0438 Head\u2011of\u2011Train (HoT), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0434\u043e\u0440\u043e\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0421\u0428\u0410. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0434\u0438\u043e\u043f\u0435\u0440\u0435\u0434\u0430\u0442\u0447\u0438\u043a\u0430 (SDR), \u0437\u043d\u0430\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 BCH-\u043f\u0430\u043a\u0435\u0442\u0430, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0442\u043e\u0440\u043c\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e EoT \u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0435\u0437\u0434.\n\n\ud83d\udd35 CVE-2025-6558 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Google Chrome, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ANGLE/GPU. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c sandbox escape: \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0432\u043a\u043b\u0430\u0434\u043a\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0430 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435, \u043e\u0431\u0445\u043e\u0434\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0439 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:09.732725Z"}, {"uuid": "75d1d9f6-81ae-4a91-a7d6-8bb87cd7e239", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:10.224724Z"}, {"uuid": "1e339c9b-339e-4a28-853e-a61d3213a83d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1750", "type": "seen", "source": "https://t.me/purp_sec/747", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-5847 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 Tenda AC9 (\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 15.03.02.13). \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e formSetSafeWanWebMan \u0444\u0430\u0439\u043b\u0430 /goform/SetRemoteWebCfg \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 HTTP POST Request Handler. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 remoteIp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c stack-based buffer overflow \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-5861 \u2014 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0431\u0430\u0433 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 Tenda, \u043d\u043e \u0443\u0436\u0435 \u0432 Tenda AC7 (\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 15.03.06.44). \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e fromadvsetlanip \u0432 \u0444\u0430\u0439\u043b\u0435 /goform/AdvSetLanip. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c lanMask \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-5865, CVE-2025-5866 \u0438 CVE-2025-5869 \u2014 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 RT-Thread 5.1.0, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0430\u0439\u043b rt-thread/components/lwp/lwp_syscall.c. \u041f\u0435\u0440\u0432\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 sys_select (\u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c timeout \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438), \u0432\u0442\u043e\u0440\u0430\u044f \u2014 c sys_sigprocmask (\u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c how \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0438\u043d\u0434\u0435\u043a\u0441\u0430 \u043c\u0430\u0441\u0441\u0438\u0432\u0430), \u0442\u0440\u0435\u0442\u044c\u044f \u2014 c sys_recvfrom (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 from \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438).\n\n\ud83d\udd35 CVE-2025-5875 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 TP-Link TL-IPC544EP-W4, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 sub_69064 \u0432 \u0444\u0430\u0439\u043b\u0435 /bin/main. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0442\u0435\u043a\u0441\u0442\u043e\u043c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e. \u0423\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0431\u0430\u0433\u0435, \u043d\u043e \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442.\n\n\ud83d\udd35 CVE-2025-1750 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 llama_index (GPT Index) \u2014 Python-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 LLM \u0441 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 ref_doc_id \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:12.285862Z"}, {"uuid": "c0ea9714-13c7-4f29-98b1-a955d89c11cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:16.241302Z"}, {"uuid": "d4e7a805-cd42-4f46-b3f9-f6cacf0cd52e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:17.067215Z"}, {"uuid": "8bbc9bfb-6e7f-41b3-87e5-b34dd53b765e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:17.269996Z"}, {"uuid": "7268460f-3597-4141-8f62-219544f46fa3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:21.509876Z"}, {"uuid": "eed7d5ce-47b7-4bfe-9540-220582edcc63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://gist.github.com/cwayne18/5a965b20d5d77b66faec2e6e18802a48", "content": "cwayne@geeko ~ % vexscan --image docker.io/rancher/helm-controller:v0.17.7 --all --vexhub https://github.com/rancher/vexhub --severity CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN --llm --llm-command \"gh copilot\" --mine-advisories --triage --details\nLLM overlay: asking command gh\nExtracting docker.io/rancher/helm-controller:v0.17.7 (linux/amd64)...\nScanning for Go binaries...\nFound 1 Go binaries.\nResolving advisories for 73 components (73 OSV queries)...\nFound 16 OS packages to check (Alpine:v3.24).\nResolving advisories for 10 components (14 OSV queries)...\nBuilding the shared-library closure...\n  18 ELF objects\n  8 of 18 reachable from 6 roots\nVEX hub https://github.com/rancher/vexhub: 1090 products indexed\nVEX hub https://github.com/rancher/vexhub: 2 finding(s) already covered by a published statement\nTriaging 5 findings against EPSS and CISA KEV (5 CVE ids)\nvexscan report (image) for docker.io/rancher/helm-controller:v0.17.7\n\n  golang   Go                         73 components     5 findings\n  os       Alpine:v3.24               16 components     0 findings\n  affected by severity: 3 unknown\n  3 affected: 1 fixable, 2 with no fix yet\n  already vexed: 1 by Rancher Security team\n  priority: none in CISA's known-exploited catalog, 0 at or above the 90th EPSS percentile, 3 scored\n  priority data: EPSS 2026-08-05, KEV catalog 2026.08.05\n\nAFFECTED (3) - vulnerable code is present and can be loaded\nSEVERITY  ADVISORY      PACKAGE            VERSION  FIXED IN  EPSS   BASIS\nUNKNOWN   GO-2025-3521  k8s.io/kubernetes  v1.35.1  no fix    41.1%\nUNKNOWN   GO-2026-5970  golang.org/x/text  v0.37.0  0.39.0    36.6%\nUNKNOWN   GO-2025-3547  k8s.io/kubernetes  v1.35.1  no fix    22.3%\n\n[LINKED]               k8s.io/kubernetes@v1.35.1\n  cve:      GO-2025-3521\n  from:     golang\n  epss:     41.1% percentile (epss 0.00516) for CVE-2025-1767\n  purl:     pkg:golang/k8s.io%2Fkubernetes@v1.35.1\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: k8s.io/kubernetes (module)\n  detail:   linked\n  llm:      exploitable=unlikely confidence=medium\n            helm-controller merely vendors k8s.io/kubernetes as a library dependency and static analysis shows only linkage, not call-graph reachability; such binaries typically use small subsets (client/apimachinery types) rather than the vulnerable server-side code paths, and GO-2025-3521 class kube vulnerabilities generally require running as an apiserver/kubelet component to be triggered by attacker input.\n\n[LINKED]               golang.org/x/text@v0.37.0\n  cve:      GO-2026-5970\n  from:     golang\n  fixed in: 0.39.0\n  epss:     36.6% percentile (epss 0.00446) for CVE-2026-56852\n  purl:     pkg:golang/golang.org%2Fx%2Ftext@v0.37.0\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: golang.org/x/text/unicode/norm (package)\n  detail:   linked\n  llm:      exploitable=unlikely confidence=medium\n            golang.org/x/text/unicode/norm is a transitive dependency typically pulled in for string normalization; helm-controller is a Kubernetes reconciliation controller unlikely to run Unicode normalization on attacker-controlled input paths, and static linkage alone doesn't establish reachability from network-facing code.\n\n[LINKED]               k8s.io/kubernetes@v1.35.1\n  cve:      GO-2025-3547\n  from:     golang\n  epss:     22.3% percentile (epss 0.00301) for CVE-2024-7598\n  purl:     pkg:golang/k8s.io%2Fkubernetes@v1.35.1\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: k8s.io/kubernetes (module)\n  detail:   linked\n  llm:      exploitable=unlikely confidence=low\n            k8s.io/kubernetes is a large module often pulled in only for API types/client libraries rather than actual server logic, and static analysis shows only linkage (not reachability) in a helm-controller binary, which typically doesn't run the vulnerable kube-apiserver/kubelet code paths; without confirmed call-path reachability or attacker-controlled input to the vulnerable function, real-world exploitability is low.\n\n\nALREADY VEXED (1) - a published statement answers these; vexscan's own verdict is unchanged\nSEVERITY  ADVISORY      PACKAGE           VERSION  FIXED IN  EPSS   VEX STATUS    JUSTIFICATION\nUNKNOWN   GO-2026-5942  golang.org/x/net  v0.55.0  0.56.0    26.4%  not_affected  vulnerable_code_not_present\n\n[LINKED]               golang.org/x/net@v0.55.0\n  cve:      GO-2026-5942\n  from:     golang\n  fixed in: 0.56.0\n  epss:     26.4% percentile (epss 0.00339) for CVE-2026-46600\n  purl:     pkg:golang/golang.org%2Fx%2Fnet@v0.55.0\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: golang.org/x/net/dns/dnsmessage (package)\n  detail:   linked\n  evidence: [vendor-vex] Rancher Security team published not_affected for pkg:golang/github.com/k3s-io/helm-controller (vulnerable_code_not_present);\nstatement names pkg:golang/golang.org/x/net@v0.47.0; component is pkg:golang/golang.org%2Fx%2Fnet@v0.55.0\n  vendor:   Rancher Security team says not_affected (vulnerable_code_not_present)\n            Govulncheck determined that the vulnerable code isn't called\n            product pkg:golang/github.com/k3s-io/helm-controller, published 2026-07-22T03:28:02Z\n            matched loosely: statement names pkg:golang/golang.org/x/net@v0.47.0; component is pkg:golang/golang.org%2Fx%2Fnet@v0.55.0\n  llm:      exploitable=unlikely confidence=medium\n            helm-controller links golang.org/x/net/dns/dnsmessage transitively (e.g. via net/http or Kubernetes client libraries) but does not itself\nperform custom DNS message parsing of attacker-controlled data; typical Go DNS resolution paths rarely trigger the vulnerable code path with untrusted\n input.\n\n\nRULED OUT (1) - the vulnerable code is not present or cannot run\nSEVERITY  ADVISORY      PACKAGE                   VERSION  FIXED IN  EPSS   BASIS\nUNKNOWN   GO-2026-5158  go.opentelemetry.io/otel  v1.41.0  1.44.0    14.7%  pclntab\n\n[NOT PRESENT]          go.opentelemetry.io/otel@v1.41.0\n  cve:      GO-2026-5158\n  from:     golang\n  fixed in: 1.44.0\n  epss:     14.7% percentile (epss 0.00237) for CVE-2026-41178\n  purl:     pkg:golang/go.opentelemetry.io%2Fotel@v1.41.0\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: go.opentelemetry.io/otel/baggage, go.opentelemetry.io/otel/propagation (package)\n  vex:      vulnerable_code_not_present [pclntab]\n  evidence: [vendor-vex] Rancher Security team published not_affected for pkg:golang/github.com/k3s-io/helm-controller (vulnerable_code_not_present);\nstatement names pkg:golang/go.opentelemetry.io/otel@v1.41.0; component is pkg:golang/go.opentelemetry.io%2Fotel@v1.41.0\n  vendor:   Rancher Security team says not_affected (vulnerable_code_not_present)\n            Govulncheck determined that the vulnerable code isn't called\n            product pkg:golang/github.com/k3s-io/helm-controller, published 2026-07-25T03:31:58Z\n            matched loosely: statement names pkg:golang/go.opentelemetry.io/otel@v1.41.0; component is pkg:golang/go.opentelemetry.io%2Fotel@v1.41.0\n\n\n  golang   Go                         73 components     5 findings\n  os       Alpine:v3.24               16 components     0 findings\n  affected by severity: 3 unknown\n  3 affected: 1 fixable, 2 with no fix yet\n  already vexed: 1 by Rancher Security team\n  priority: none in CISA's known-exploited catalog, 0 at or above the 90th EPSS percentile, 3 scored\n  priority data: EPSS 2026-08-05, KEV catalog 2026.08.05\n  5 findings in 3 section(s): AFFECTED (3), ALREADY VEXED (1), RULED OUT (1)", "creation_timestamp": "2026-08-05T22:37:18.569272Z"}, {"uuid": "2b2f3cea-2fc2-4c1b-993b-e0ef84cf9573", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://gist.github.com/cwayne18/5a965b20d5d77b66faec2e6e18802a48", "content": "cwayne@geeko ~ % vexscan --image docker.io/rancher/helm-controller:v0.17.7 --all --vexhub https://github.com/rancher/vexhub --severity CRITICAL,HIGH,MEDIUM,LOW,UNKNOWN --llm --llm-command \"gh copilot\" --mine-advisories --triage --details\nLLM overlay: asking command gh\nExtracting docker.io/rancher/helm-controller:v0.17.7 (linux/amd64)...\nScanning for Go binaries...\nFound 1 Go binaries.\nResolving advisories for 73 components (73 OSV queries)...\nFound 16 OS packages to check (Alpine:v3.24).\nResolving advisories for 10 components (14 OSV queries)...\nBuilding the shared-library closure...\n  18 ELF objects\n  8 of 18 reachable from 6 roots\nVEX hub https://github.com/rancher/vexhub: 1090 products indexed\nVEX hub https://github.com/rancher/vexhub: 2 finding(s) already covered by a published statement\nTriaging 5 findings against EPSS and CISA KEV (5 CVE ids)\nvexscan report (image) for docker.io/rancher/helm-controller:v0.17.7\n\n  golang   Go                         73 components     5 findings\n  os       Alpine:v3.24               16 components     0 findings\n  affected by severity: 3 unknown\n  3 affected: 1 fixable, 2 with no fix yet\n  already vexed: 1 by Rancher Security team\n  priority: none in CISA's known-exploited catalog, 0 at or above the 90th EPSS percentile, 3 scored\n  priority data: EPSS 2026-08-05, KEV catalog 2026.08.05\n\nAFFECTED (3) - vulnerable code is present and can be loaded\nSEVERITY  ADVISORY      PACKAGE            VERSION  FIXED IN  EPSS   BASIS\nUNKNOWN   GO-2025-3521  k8s.io/kubernetes  v1.35.1  no fix    41.1%\nUNKNOWN   GO-2026-5970  golang.org/x/text  v0.37.0  0.39.0    36.6%\nUNKNOWN   GO-2025-3547  k8s.io/kubernetes  v1.35.1  no fix    22.3%\n\n[LINKED]               k8s.io/kubernetes@v1.35.1\n  cve:      GO-2025-3521\n  from:     golang\n  epss:     41.1% percentile (epss 0.00516) for CVE-2025-1767\n  purl:     pkg:golang/k8s.io%2Fkubernetes@v1.35.1\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: k8s.io/kubernetes (module)\n  detail:   linked\n  llm:      exploitable=unlikely confidence=medium\n            helm-controller merely vendors k8s.io/kubernetes as a library dependency and static analysis shows only linkage, not call-graph reachability; such binaries typically use small subsets (client/apimachinery types) rather than the vulnerable server-side code paths, and GO-2025-3521 class kube vulnerabilities generally require running as an apiserver/kubelet component to be triggered by attacker input.\n\n[LINKED]               golang.org/x/text@v0.37.0\n  cve:      GO-2026-5970\n  from:     golang\n  fixed in: 0.39.0\n  epss:     36.6% percentile (epss 0.00446) for CVE-2026-56852\n  purl:     pkg:golang/golang.org%2Fx%2Ftext@v0.37.0\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: golang.org/x/text/unicode/norm (package)\n  detail:   linked\n  llm:      exploitable=unlikely confidence=medium\n            golang.org/x/text/unicode/norm is a transitive dependency typically pulled in for string normalization; helm-controller is a Kubernetes reconciliation controller unlikely to run Unicode normalization on attacker-controlled input paths, and static linkage alone doesn't establish reachability from network-facing code.\n\n[LINKED]               k8s.io/kubernetes@v1.35.1\n  cve:      GO-2025-3547\n  from:     golang\n  epss:     22.3% percentile (epss 0.00301) for CVE-2024-7598\n  purl:     pkg:golang/k8s.io%2Fkubernetes@v1.35.1\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: k8s.io/kubernetes (module)\n  detail:   linked\n  llm:      exploitable=unlikely confidence=low\n            k8s.io/kubernetes is a large module often pulled in only for API types/client libraries rather than actual server logic, and static analysis shows only linkage (not reachability) in a helm-controller binary, which typically doesn't run the vulnerable kube-apiserver/kubelet code paths; without confirmed call-path reachability or attacker-controlled input to the vulnerable function, real-world exploitability is low.\n\n\nALREADY VEXED (1) - a published statement answers these; vexscan's own verdict is unchanged\nSEVERITY  ADVISORY      PACKAGE           VERSION  FIXED IN  EPSS   VEX STATUS    JUSTIFICATION\nUNKNOWN   GO-2026-5942  golang.org/x/net  v0.55.0  0.56.0    26.4%  not_affected  vulnerable_code_not_present\n\n[LINKED]               golang.org/x/net@v0.55.0\n  cve:      GO-2026-5942\n  from:     golang\n  fixed in: 0.56.0\n  epss:     26.4% percentile (epss 0.00339) for CVE-2026-46600\n  purl:     pkg:golang/golang.org%2Fx%2Fnet@v0.55.0\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: golang.org/x/net/dns/dnsmessage (package)\n  detail:   linked\n  evidence: [vendor-vex] Rancher Security team published not_affected for pkg:golang/github.com/k3s-io/helm-controller (vulnerable_code_not_present);\nstatement names pkg:golang/golang.org/x/net@v0.47.0; component is pkg:golang/golang.org%2Fx%2Fnet@v0.55.0\n  vendor:   Rancher Security team says not_affected (vulnerable_code_not_present)\n            Govulncheck determined that the vulnerable code isn't called\n            product pkg:golang/github.com/k3s-io/helm-controller, published 2026-07-22T03:28:02Z\n            matched loosely: statement names pkg:golang/golang.org/x/net@v0.47.0; component is pkg:golang/golang.org%2Fx%2Fnet@v0.55.0\n  llm:      exploitable=unlikely confidence=medium\n            helm-controller links golang.org/x/net/dns/dnsmessage transitively (e.g. via net/http or Kubernetes client libraries) but does not itself\nperform custom DNS message parsing of attacker-controlled data; typical Go DNS resolution paths rarely trigger the vulnerable code path with untrusted\n input.\n\n\nRULED OUT (1) - the vulnerable code is not present or cannot run\nSEVERITY  ADVISORY      PACKAGE                   VERSION  FIXED IN  EPSS   BASIS\nUNKNOWN   GO-2026-5158  go.opentelemetry.io/otel  v1.41.0  1.44.0    14.7%  pclntab\n\n[NOT PRESENT]          go.opentelemetry.io/otel@v1.41.0\n  cve:      GO-2026-5158\n  from:     golang\n  fixed in: 1.44.0\n  epss:     14.7% percentile (epss 0.00237) for CVE-2026-41178\n  purl:     pkg:golang/go.opentelemetry.io%2Fotel@v1.41.0\n  binary:   /usr/bin/helm-controller (stripped)\n  packages: go.opentelemetry.io/otel/baggage, go.opentelemetry.io/otel/propagation (package)\n  vex:      vulnerable_code_not_present [pclntab]\n  evidence: [vendor-vex] Rancher Security team published not_affected for pkg:golang/github.com/k3s-io/helm-controller (vulnerable_code_not_present);\nstatement names pkg:golang/go.opentelemetry.io/otel@v1.41.0; component is pkg:golang/go.opentelemetry.io%2Fotel@v1.41.0\n  vendor:   Rancher Security team says not_affected (vulnerable_code_not_present)\n            Govulncheck determined that the vulnerable code isn't called\n            product pkg:golang/github.com/k3s-io/helm-controller, published 2026-07-25T03:31:58Z\n            matched loosely: statement names pkg:golang/go.opentelemetry.io/otel@v1.41.0; component is pkg:golang/go.opentelemetry.io%2Fotel@v1.41.0\n\n\n  golang   Go                         73 components     5 findings\n  os       Alpine:v3.24               16 components     0 findings\n  affected by severity: 3 unknown\n  3 affected: 1 fixable, 2 with no fix yet\n  already vexed: 1 by Rancher Security team\n  priority: none in CISA's known-exploited catalog, 0 at or above the 90th EPSS percentile, 3 scored\n  priority data: EPSS 2026-08-05, KEV catalog 2026.08.05\n  5 findings in 3 section(s): AFFECTED (3), ALREADY VEXED (1), RULED OUT (1)", "creation_timestamp": "2026-08-06T00:00:18.137148Z"}, {"uuid": "ab571861-bd6d-42e0-9c2e-f684a5be3dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1782", "type": "seen", "source": "https://t.me/purp_sec/614", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-47188 (Command Injection) \u0438 CVE-2025-47187 \u2014 \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Mitel SIP \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u0430\u0445, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u0434\u043b\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446-\u0441\u0432\u044f\u0437\u0438. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u044e \u0438\u043b\u0438 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438 \u043d\u0430\u0440\u0443\u0448\u0435\u043d\u0438\u044e \u0440\u0430\u0431\u043e\u0442\u044b \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430.\n\n\ud83d\udd35 CVE-2024-26809 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 nftables \u044f\u0434\u0440\u0430 Linux, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root) \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u044f\u0434\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Meshtastic, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0438 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n\ud83d\udd35 CVE-2025-28137 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 TOTOLINK A810R, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438. \u0410\u0442\u0430\u043a\u0430 \u043e\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 NoticeUrl \u0444\u0443\u043d\u043a\u0446\u0438\u0438 setNoticeCfg, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \u0432 \u041e\u0421.\n\n\ud83d\udd35 CVE-2025-1782 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0435 HylaFAX Enterprise \u0438 AvantFAX. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0444\u0438\u043b\u044c\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 language \u0432 \u0444\u043e\u0440\u043c\u0430\u0445, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0430\u0439\u043b\u043e\u0432. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\n\ud83d\udd35 CVE-2025-2567 \u2014 \u0431\u0430\u0433 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0430\u0445 Lantronix, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438\u043b\u0438 \u043e\u0442\u043a\u043b\u044e\u0447\u0430\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u0430\u0436\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:06.669263Z"}, {"uuid": "1708c567-ee8a-4955-85ca-740e2991ad92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1750", "type": "seen", "source": "https://t.me/purp_sec/747", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u0432\u0430\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-5847 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0433 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0435 Tenda AC9 (\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 15.03.02.13). \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e formSetSafeWanWebMan \u0444\u0430\u0439\u043b\u0430 /goform/SetRemoteWebCfg \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 HTTP POST Request Handler. \u0423\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 remoteIp \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c stack-based buffer overflow \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0435.\n\n\ud83d\udd35 CVE-2025-5861 \u2014 \u0435\u0449\u0435 \u043e\u0434\u0438\u043d \u0431\u0430\u0433 \u0432 \u0440\u043e\u0443\u0442\u0435\u0440\u0435 Tenda, \u043d\u043e \u0443\u0436\u0435 \u0432 Tenda AC7 (\u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430 15.03.06.44). \u0417\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0444\u0443\u043d\u043a\u0446\u0438\u044e fromadvsetlanip \u0432 \u0444\u0430\u0439\u043b\u0435 /goform/AdvSetLanip. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c lanMask \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441\u043f\u0440\u043e\u0432\u043e\u0446\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-5865, CVE-2025-5866 \u0438 CVE-2025-5869 \u2014 \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 RT-Thread 5.1.0, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0444\u0430\u0439\u043b rt-thread/components/lwp/lwp_syscall.c. \u041f\u0435\u0440\u0432\u0430\u044f \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 sys_select (\u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c timeout \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438), \u0432\u0442\u043e\u0440\u0430\u044f \u2014 c sys_sigprocmask (\u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u043e\u043c how \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0435 \u0438\u043d\u0434\u0435\u043a\u0441\u0430 \u043c\u0430\u0441\u0441\u0438\u0432\u0430), \u0442\u0440\u0435\u0442\u044c\u044f \u2014 c sys_recvfrom (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 from \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438).\n\n\ud83d\udd35 CVE-2025-5875 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 TP-Link TL-IPC544EP-W4, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 sub_69064 \u0432 \u0444\u0430\u0439\u043b\u0435 /bin/main. \u041c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u0442\u0435\u043a\u0441\u0442\u043e\u043c \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0431\u0443\u0444\u0435\u0440\u0430. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e. \u0423\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u0441 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c \u0441\u0432\u044f\u0437\u0430\u043b\u0438\u0441\u044c \u0438 \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u043e \u0431\u0430\u0433\u0435, \u043d\u043e \u0440\u0435\u0430\u043a\u0446\u0438\u0438 \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u043d\u0435\u0442.\n\n\ud83d\udd35 CVE-2025-1750 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 llama_index (GPT Index) \u2014 Python-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0434\u043b\u044f \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0438 LLM \u0441 \u0432\u043d\u0435\u0448\u043d\u0438\u043c\u0438 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445. \u0418\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0439 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 ref_doc_id \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 SQL-\u0437\u0430\u043f\u0440\u043e\u0441\u044b. \u042d\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:08.404654Z"}, {"uuid": "41d648f1-525b-4b00-af75-618ada247bdd", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/cb9b87e1-b41a-4c8c-99cb-fbca425c07ea", "content": "", "creation_timestamp": "2026-06-19T12:45:59.792108Z"}, {"uuid": "e567552d-14f9-4dde-a4a8-c45bddecffa5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://t.me/purp_sec/880", "content": "\ud83d\udd12 \u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-32023 (RCE) \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0421\u0423\u0411\u0414 Redis. \u0412\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u0437\u0430\u043f\u0438\u0441\u0438 \u0437\u0430 \u043f\u0440\u0435\u0434\u0435\u043b\u044b \u043c\u0430\u0441\u0441\u0438\u0432\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u043a\u043e\u043c\u0430\u043d\u0434 PFADD, PFCOUNT \u0438 PFMERGE \u0432 HyperLogLog (HLL). \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a, \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0432 Redis \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u0441\u0442\u0440\u043e\u043a\u0443, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u043f\u0430\u043c\u044f\u0442\u0438 \u0432 \u043a\u0443\u0447\u0435 \u0438\u043b\u0438 \u0441\u0442\u0435\u043a\u0435. \n\n\ud83d\udd35 CVE-2025\u201324477 \u2014 \u0431\u0430\u0433 \u0432 FortiOS. \u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 heap-based buffer overflow \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 cw_stad, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438\u043b\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0430\u0432\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u0430 \u0432 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 FortiWiFi-\u043c\u043e\u0434\u0435\u043b\u0435\u0439 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u0430, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0434\u043b\u044f \u0434\u0430\u043b\u044c\u043d\u0435\u0439\u0448\u0435\u0433\u043e \u043f\u0440\u043e\u043d\u0438\u043a\u043d\u043e\u0432\u0435\u043d\u0438\u044f \u043f\u043e \u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25271, CVE-2025-25270, CVE-2025-25269 \u0438 CVE-2025-25268 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u0437\u0430\u0440\u044f\u0434\u043e\u043a Phoenix\u202fContact (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, CHARX\u202fSEC\u20113100), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u043b\u0443\u0447\u0430\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f. \u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043e\u0442\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044e \u0437\u0430\u0440\u044f\u0434\u043d\u044b\u0445 \u0441\u0442\u0430\u043d\u0446\u0438\u0439, \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u043b\u0438 \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u044e \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b EV\u2011\u0441\u0435\u0442\u0438.\n\n\ud83d\udd35 CVE-2025-25257 \u2014 SQL-\u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0432 \u0432\u0435\u0431\u2011GUI FortiGate. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0431\u0435\u0437 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c SQL\u2011\u0437\u0430\u043f\u0440\u043e\u0441\u044b \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0444\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u044f \u0432\u0445\u043e\u0434 \u043a \u0431\u0430\u0437\u0435 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u0434\u0430\u043d\u043d\u044b\u0445, \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0437\u0430\u043f\u0443\u0441\u043a\u0443 \u0432\u0442\u043e\u0440\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u0438\u043b\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u0434\u0430 \u0432 \u0441\u0432\u044f\u0437\u043a\u0435 \u0441 \u0434\u0440\u0443\u0433\u0438\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-1729 \u2014 \u0431\u0430\u0433 \u0432 \u041f\u041e Lenovo ThinkPad P1 Gen7. \u0418\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u0439 \u0444\u0430\u0439\u043b TPQMAssistant.exe, \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u043c\u044b\u0439 \u043f\u0440\u0438 \u0432\u0445\u043e\u0434\u0435 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f, \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0430\u0435\u0442\u0441\u044f \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439, \u043f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 DLL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u043f\u043e\u0434\u043c\u0435\u043d\u0438\u0442\u044c. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043f\u043e\u043c\u0435\u0449\u0430\u0435\u0442 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0440\u044f\u0434\u043e\u043c \u0441 \u0438\u0441\u043f\u043e\u043b\u043d\u044f\u0435\u043c\u044b\u043c \u0444\u0430\u0439\u043b\u043e\u043c \u0438 \u043f\u0440\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u043c \u0437\u0430\u043f\u0443\u0441\u043a\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0441 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0430\u0432\u0430\u043c\u0438.\n\n#CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:12.930511Z"}, {"uuid": "57512c80-3216-409c-97c8-be55122e84c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1727", "type": "seen", "source": "https://t.me/purp_sec/911", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE\u20112025\u20115333 \u2014 \u0431\u0430\u0433 \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 Broadcom/Symantec Altiris Inventory Rule Management (IRM), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 RCE-\u0430\u0442\u0430\u043a\u0443. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 .NET-\u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 \u0447\u0435\u0440\u0435\u0437 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 legacy-endpoint. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f \u044d\u0442\u043e\u0442 endpoint, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043a\u043e\u043d\u0441\u0442\u0440\u0443\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438 \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435.\n\n\ud83d\udd35 CVE\u20112025\u201149127 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kafbat UI (Apache Kafka), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0447\u0435\u0440\u0435\u0437 endpoint, \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0439 JMX-\u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441\u043e\u0437\u0434\u0430\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 Kafka-\u043a\u043b\u0430\u0441\u0442\u0435\u0440 \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u0435\u043c\u044b\u043c JMX-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c \u0438 \u0437\u0430\u0442\u0435\u043c \u0447\u0435\u0440\u0435\u0437 UI \u043d\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u0442 \u043c\u0435\u0442\u0440\u0438\u043a\u0438 \u0442\u0438\u043f\u0430 JMX, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u044f \u0430\u0434\u0440\u0435\u0441. \u041f\u0440\u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043a \u044d\u0442\u043e\u043c\u0443 JMX-\u0441\u0435\u0440\u0432\u0435\u0440\u0443 Kafbat UI \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0443\u0435\u0442 \u0434\u0430\u043d\u043d\u044b\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e java.rmi.server \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0433\u043e BinaryServerFormatterSinkProvider, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0432\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043e\u0431\u044a\u0435\u043a\u0442-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a RCE.\n\n\ud83d\udd35 CVE-2025-48384 \u2014 \u0431\u0430\u0433 \u0432 Git \u0434\u043b\u044f Unix-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 git clone --recursive, \u0435\u0441\u043b\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 submodule \u0441 \u043f\u0443\u0442\u0435\u043c, \u043e\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0449\u0438\u043c\u0441\u044f \u043d\u0430 \u0441\u0438\u043c\u0432\u043e\u043b \\r (carriage return). Git \u0438\u043d\u0442\u0435\u0440\u043f\u0440\u0435\u0442\u0438\u0440\u0443\u0435\u0442 \u0442\u0430\u043a\u043e\u0439 \u043f\u0443\u0442\u044c \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e, \u0447\u0442\u043e \u0432 \u0441\u043e\u0447\u0435\u0442\u0430\u043d\u0438\u0438 \u0441 symlinks \u0438 malicious hook-\u0444\u0430\u0439\u043b\u043e\u043c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u043a\u0440\u0438\u043f\u0442 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\ud83d\udd35 CVE-2025-1727 \u2014 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043d\u0430\u0434\u0435\u0436\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u0445 End\u2011of\u2011Train (EoT) \u0438 Head\u2011of\u2011Train (HoT), \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u0432 \u0436\u0435\u043b\u0435\u0437\u043d\u043e\u0434\u043e\u0440\u043e\u0436\u043d\u043e\u0439 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0435 \u0421\u0428\u0410. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u0440\u043e\u0441\u0442\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u0440\u0430\u0434\u0438\u043e\u043f\u0435\u0440\u0435\u0434\u0430\u0442\u0447\u0438\u043a\u0430 (SDR), \u0437\u043d\u0430\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 BCH-\u043f\u0430\u043a\u0435\u0442\u0430, \u043c\u043e\u0436\u0435\u0442 \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u0442\u044c \u0444\u0430\u043b\u044c\u0448\u0438\u0432\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0442\u043e\u0440\u043c\u043e\u0436\u0435\u043d\u0438\u044f \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e EoT \u0438 \u043e\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043f\u043e\u0435\u0437\u0434.\n\n\ud83d\udd35 CVE-2025-6558 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Google Chrome, \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0430\u044f\u0441\u044f \u0432 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 ANGLE/GPU. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u0443\u044e HTML-\u0441\u0442\u0440\u0430\u043d\u0438\u0446\u0443 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c sandbox escape: \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0437\u0430\u043f\u0443\u0441\u043a\u0430\u0435\u0442\u0441\u044f \u043d\u0435 \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0432\u043a\u043b\u0430\u0434\u043a\u0438 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430, \u0430 \u0432 GPU-\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435, \u043e\u0431\u0445\u043e\u0434\u044f \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u043d\u043e\u0439 \u043f\u0435\u0441\u043e\u0447\u043d\u0438\u0446\u044b.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:13.351807Z"}, {"uuid": "39b2281d-ab41-4966-bd59-59606e04493e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:36.077691Z"}, {"uuid": "d5331ab0-795a-4c69-9574-a24a5fcb69d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:36.330691Z"}, {"uuid": "5559ac5b-adac-480e-b11c-def7d0e48c82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:43.766122Z"}, {"uuid": "a18c5f23-a11d-45cc-8576-6021166792e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/brutsecurity/1607", "content": "\u26a0\ufe0fCVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus\n\n\ud83d\udd3dDorks:\nHUNTER : http://product.name=\"ManageEngine ADSelfService Plus\"\nFOFA : product=\"ManageEngine-ADSelfService-Plus\"\nSHODAN : title:\"ADSelfService Plus\"\n\n\ud83d\udda5Refer:https://securityonline.info/cve-2025-1723-zoho-patches-account-takeover-vulnerability-in-adselfservice-plus/\nhttps://manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-09T03:00:09.234662Z"}, {"uuid": "88f4e685-acd3-48e6-a3f6-c1671b483fe8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/brutsecurity/1607", "content": "\u26a0\ufe0fCVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus\n\n\ud83d\udd3dDorks:\nHUNTER : http://product.name=\"ManageEngine ADSelfService Plus\"\nFOFA : product=\"ManageEngine-ADSelfService-Plus\"\nSHODAN : title:\"ADSelfService Plus\"\n\n\ud83d\udda5Refer:https://securityonline.info/cve-2025-1723-zoho-patches-account-takeover-vulnerability-in-adselfservice-plus/\nhttps://manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-10T00:00:32.831239Z"}, {"uuid": "e516c08c-a8b2-411f-b26f-8ef76600da0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/brutsecurity/1607", "content": "\u26a0\ufe0fCVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus\n\n\ud83d\udd3dDorks:\nHUNTER : http://product.name=\"ManageEngine ADSelfService Plus\"\nFOFA : product=\"ManageEngine-ADSelfService-Plus\"\nSHODAN : title:\"ADSelfService Plus\"\n\n\ud83d\udda5Refer:https://securityonline.info/cve-2025-1723-zoho-patches-account-takeover-vulnerability-in-adselfservice-plus/\nhttps://manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-11T14:00:04.211586Z"}, {"uuid": "cef5ee0b-93a6-47e9-bcbd-595100427f03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/brutsecurity/1607", "content": "\u26a0\ufe0fCVE-2025-1723: Zoho Patches Account Takeover Vulnerability in ADSelfService Plus\n\n\ud83d\udd3dDorks:\nHUNTER : http://product.name=\"ManageEngine ADSelfService Plus\"\nFOFA : product=\"ManageEngine-ADSelfService-Plus\"\nSHODAN : title:\"ADSelfService Plus\"\n\n\ud83d\udda5Refer:https://securityonline.info/cve-2025-1723-zoho-patches-account-takeover-vulnerability-in-adselfservice-plus/\nhttps://manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html\n\n#hunterhow #infosec #infosecurity #OSINT #Vulnerability", "creation_timestamp": "2026-07-12T00:00:47.977036Z"}, {"uuid": "fb47c842-d5bb-4073-aec0-10ce5ba58326", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1758", "type": "seen", "source": "https://t.me/purp_sec/409", "content": "\u041f\u043e\u0434\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2025-27888 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Apache Druid. \u041e\u0442\u043a\u0440\u044b\u0432\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u0442\u0438\u043f\u0430 SSRF (Server-Side Request Forgery) \u0438 XSS (Cross-Site Scripting).\n\n\ud83d\udd35 CVE-2025-2538 \u2014 \u0431\u0430\u0433 \u0432 ArcGIS Enterprise, \u043e\u0434\u043d\u043e\u043c \u0438\u0437 \u0432\u0435\u0434\u0443\u0449\u0438\u0445 \u0433\u0435\u043e\u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0448\u0435\u043d\u0438\u0439. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0441\u0438\u0441\u0442\u0435\u043c\u043e\u0439.\n\n\ud83d\udd35 CVE-2025-1758 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kemp LoadMaster (\u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0435 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430). \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0441\u0438\u0441\u0442\u0435\u043c\u0443, \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0441 \u0432\u044b\u0441\u0448\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.\n\n\ud83d\udd35 CVE-2025-29783 \u2014 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 vLLM, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0435\u0435 \u0438\u043d\u0442\u0435\u0433\u0440\u0430\u0446\u0438\u0435\u0439 \u0441 Mooncake. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c RCE-\u0430\u0442\u0430\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0443\u044e \u0434\u0435\u0441\u0435\u0440\u0438\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043f\u043e ZMQ/TCP.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:51.810059Z"}, {"uuid": "d4895ff4-f4fb-4469-ba75-af4e17736642", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/securixy_kz/1119", "content": "\u0414\u0430\u0432\u043d\u0435\u043d\u044c\u043a\u043e, \u0441 2021 \u0433\u043e\u0434\u0430 Zoho \u043d\u0430\u0441 \u043d\u0435 \u0440\u0430\u0434\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \n\n#CVE-2025-1723 Account Takeover \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ADSelfService Plus\n\nBase Score: 8.1 HIGH\n\nhttps://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html", "creation_timestamp": "2026-07-12T22:00:09.149828Z"}, {"uuid": "dc4b2197-6ea1-4147-96c7-d3dd347b4683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/securixy_kz/1119", "content": "\u0414\u0430\u0432\u043d\u0435\u043d\u044c\u043a\u043e, \u0441 2021 \u0433\u043e\u0434\u0430 Zoho \u043d\u0430\u0441 \u043d\u0435 \u0440\u0430\u0434\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \n\n#CVE-2025-1723 Account Takeover \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ADSelfService Plus\n\nBase Score: 8.1 HIGH\n\nhttps://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html", "creation_timestamp": "2026-07-13T00:00:33.660592Z"}, {"uuid": "eb01f523-bd22-42a8-a5b5-32d2bf69180f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:56.689624Z"}, {"uuid": "39d1b928-8f16-4f59-821b-f24060516d3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/purp_sec/564", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-33452 \u2014  \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 HTTP Request Smuggling \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 lua-nginx-module \u0432 OpenResty. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e\u0439 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 HTTP-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432 \u0441 \u043c\u0435\u0442\u043e\u0434\u043e\u043c HEAD, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0442\u0435\u043b\u043e \u0437\u0430\u043f\u0440\u043e\u0441\u0430. \u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u0438\u0433\u043d\u043e\u0440\u0438\u0440\u0443\u044e\u0442 \u0442\u0435\u043b\u043e \u0442\u0430\u043a\u0438\u0445 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432, lua-nginx-module \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u043a\u0430\u043a \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u0439 \u0437\u0430\u043f\u0440\u043e\u0441, \u0447\u0442\u043e \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0440\u0430\u0441\u0441\u0438\u043d\u0445\u0440\u043e\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u043c\u0435\u0436\u0434\u0443 \u043f\u0440\u043e\u043a\u0441\u0438 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u043c.\u200b\n\n\ud83d\udd35 CVE-2025-1731 \u0438 CVE-2025-1732 \u2014 \u0431\u0430\u0433 \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435 Zyxel uOS, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 USG FLEX H Series. \u0421\u0432\u044f\u0437\u0430\u043d \u0441 \u043d\u0435\u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u044b\u043c \u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435\u043c \u043f\u0440\u0430\u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0432 PostgreSQL-\u043a\u043e\u043c\u0430\u043d\u0434\u0430\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043d\u0438\u0437\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043e\u0431\u043e\u043b\u043e\u0447\u043a\u0435 Linux \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0434\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430.\n\n\ud83d\udd35 CVE-2025-34028 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Commvault Command Center Innovation Release, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0437\u0430\u0433\u0440\u0443\u0436\u0430\u0442\u044c ZIP-\u0430\u0440\u0445\u0438\u0432\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u0440\u0438 \u0440\u0430\u0441\u043f\u0430\u043a\u043e\u0432\u043a\u0435 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430.\n\n\u0418 \u043f\u0430\u0440\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 WordPress:\n\n\ud83d\udd35 CVE-2025-3065 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Database Toolset. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0442\u0435\u0439 \u0444\u0430\u0439\u043b\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-3603 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Flynax Bridge. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043f\u043e\u0432\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0437\u0430\u0445\u0432\u0430\u0442 \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438.\n\n\ud83d\udd35 CVE-2025-3058 \u2014 \u043f\u043b\u0430\u0433\u0438\u043d Xelion Webchat. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0441 \u0443\u0440\u043e\u0432\u043d\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u00ab\u041f\u043e\u0434\u043f\u0438\u0441\u0447\u0438\u043a\u00bb \u0438 \u0432\u044b\u0448\u0435 \u043c\u0435\u043d\u044f\u0442\u044c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0430\u0439\u0442\u0430.\n\n\ud83d\udd35 CVE-2025-2558 \u2014 \u0442\u0435\u043c\u0430 The Wound. \u0411\u0430\u0433 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c LFI-\u0430\u0442\u0430\u043a\u0438 (Local File Inclusion).\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:56.873270Z"}, {"uuid": "2dca3919-f902-457a-8815-b69d419b7e6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1723", "type": "seen", "source": "https://t.me/securixy_kz/1119", "content": "\u0414\u0430\u0432\u043d\u0435\u043d\u044c\u043a\u043e, \u0441 2021 \u0433\u043e\u0434\u0430 Zoho \u043d\u0430\u0441 \u043d\u0435 \u0440\u0430\u0434\u043e\u0432\u0430\u043b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438 \n\n#CVE-2025-1723 Account Takeover \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ADSelfService Plus\n\nBase Score: 8.1 HIGH\n\nhttps://www.manageengine.com/products/self-service-password/advisory/CVE-2025-1723.html", "creation_timestamp": "2026-07-14T00:01:01.690235Z"}, {"uuid": "3e3bfd4d-ddcc-4659-9a1a-6d16f39b0611", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1716", "type": "seen", "source": "https://gist.github.com/rahulXs/33981c9d91701115bb44ac406396c782", "content": "# The AI Odyssey: When Your Model Is the Trojan Horse\n\n### All resources from my talk at **OOSC 4.0 | IIIT Allahabad | Aug 28\u201330, 2026**\n\n**Rahul Sharma** | Senior Software Engineer, Red Hat | [@rahulXs](https://github.com/rahulXs)\n\n---\n\n## Contents\n\n1. [Quick Start - Sign Your First Model](#-quick-start--sign-your-first-model)\n2. [Demo Code (in this gist)](#-demo-code-in-this-gist)\n3. [Safety Checklist](#-safety-checklist)\n4. [Open Source Projects (contribute!)](#-open-source-projects-contribute)\n5. [CVEs & Security Advisories](#-cves--security-advisories)\n6. [Research Papers](#-research-papers)\n7. [Articles & Deep Dives](#-articles--deep-dives)\n8. [Incident Timeline](#-incident-timeline)\n9. [About Me](#-about-me)\n\n---\n\n## Quick Start - Sign Your First Model\n\nThree commands. No key management. No GPG. No certificate rotation.\n\n```bash\npip install model-signing\n\nmodel_signing sign ./my-model/\n\nmodel_signing verify ./my-model/ \\\n  --signature model.sig \\\n  --identity \"your-email@example.com\" \\\n  --identity_provider \"https://accounts.google.com\"\n```\n\n- Signing authenticates via OIDC in your browser (Google/GitHub login).\n- The signature is a detached Sigstore bundle (`model.sig`) wrapping an in-toto attestation of SHA-256 hashes.\n- Verification works offline once you have the bundle.\n\n---\n\n## Demo Code (in this gist)\n\nThe exact files from Demo 1; everything runs on **localhost only**, nothing leaves your machine:\n\n| File | What it does |\n|---|---|\n| [`create_demo_model.py`](./create_demo_model.py) | Creates a small legitimate PyTorch model (the contrast) |\n| [`create_malicious_model.py`](./create_malicious_model.py) | Creates a `.pt` file with a reverse shell in `__reduce__` (**DEMO ONLY**, connects to `127.0.0.1:9999`) |\n| [`load_model.py`](./load_model.py) | Loads the model with `weights_only=False` - what legacy tutorials still teach |\n\nRun it yourself (in a VM/container if you want to be extra safe):\n\n```bash\nmkdir -p models && cd oosc-demo\npython create_demo_model.py\npython create_malicious_model.py\n\n# Terminal A (attacker):   nc -l 9999\n# Terminal B (victim):     python load_model.py\n```\n\n> **How it works:** `torch.save()` uses pickle internally. During `torch.load()`, pickle calls `__reduce__()` to reconstruct objects, whatever it returns gets executed. Here that's `os.system(reverse_shell)`, backgrounded so the load \"succeeds\" silently. Not a bug - documented Python behavior. Python docs literally say *\"Never unpickle data from an untrusted source.\"*\n\n---\n\n## Safety Checklist\n\n**Do:**\n\n- Use **SafeTensors** for all new models \u2014 no pickle, no code execution on load\n- Use `torch.load(..., weights_only=True)` at minimum (default since PyTorch 2.6)\n- **Sign** models before sharing (`pip install model-signing`)\n- **Verify** signatures before loading any model\n- Pin models by **commit hash**, not branch name\n\n**Don't:**\n\n- Never disable safety flags (`weights_only=False`) on untrusted files\n- Never set `trust_remote_code=True` without reading the code first\n- Never load pickle models outside a sandbox/VM if you can avoid it\n- Never assume a scanner passing = file is safe (see ShadowPickle below)\n\n---\n\n## Open Source Projects (contribute!)\n\nAll are beginner-friendly and accepting contributions:\n\n| Project | Link | Why it matters |\n|---|---|---|\n| **Model Signing (OMS)** | https://github.com/sigstore/model-transparency | Sign/verify model artifacts. Implements the OpenSSF Model Signing spec. `pip install model-signing` |\n| **OMS Specification** | https://github.com/ossf/model-signing-spec | The formal spec (June 2025), backed by Google, NVIDIA, HiddenLayer, Red Hat |\n| **SafeTensors** | https://github.com/huggingface/safetensors | Safe serialization format tensors + JSON only, zero-copy. Joined PyTorch Foundation, Mar 2026 |\n| **Fickling** | https://github.com/trailofbits/fickling | Pickle decompiler & safety analyzer by Trail of Bits. Inspect suspicious pickles without executing them |\n| **Sigstore** | https://www.sigstore.dev/ | Keyless signing infra (\"Let's Encrypt for code signing\") Fulcio CA + Rekor transparency log |\n\n---\n\n## CVEs & Security Advisories\n\n| ID | What happened | Reference |\n|---|---|---|\n| **CVE-2026-24747** | `weights_only=True` bypassed via heap corruption (type confusion in C++ restricted unpickler, `SETITEM` opcode). CVSS 8.8. Fixed in PyTorch 2.10.0 | [GHSA-63CW-57P8-FM3P](https://github.com/advisories/GHSA-63CW-57P8-FM3P) \u00b7 [RAXE-2026-019](https://raxe.ai/labs/advisories/RAXE-2026-019) |\n| **CVE-2026-3490** | PickleScan blocklist universally bypassed via `pkgutil.resolve_name(\"os:system\")` indirection; 11+ RCE chains all reported CLEAN | [GHSA-VVPJ-8CMC-GX39](https://github.com/advisories/ghsa-vvpj-8cmc-gx39) \u00b7 [RAXE-2026-015](https://raxe.ai/labs/advisories/RAXE-2026-015) |\n| **CVE-2025-1716, -1889, -1944, -1945** | Four PickleScan zero-days | See timeline below |\n\n**Key takeaway:** both the framework defense *and* the principal scanner were broken in 2026. You cannot blocklist your way out of a Turing-complete format. Defense = safer format + cryptographic verification.\n\n---\n\n## Research Papers\n\n- **ShadowPickle: Evading ML Model Scanners via Stealthy Pickle Attacks** *(arXiv, Jul 2026)* three novel attacks exploiting pickle's module import mechanism; best variant evades **63% of scanners** including Hugging Face's. Introduces PickleBench.\n  https://arxiv.org/html/2607.17503\n- **Exploiting Python pickling** David Hamann's classic walkthrough of `__reduce__` RCE (the technique behind our Demo 1).\n  https://davidhamann.de/2020/04/05/exploiting-python-pickle/\n- **DEF CON 33: Loading Models, Launching Shells** Cyrus Parzian, 2025.\n  https://media.defcon.org/DEF%20CON%2033/DEF%20CON%2033%20presentations/\n\n## Articles & Deep Dives\n\n**Model signing / Sigstore:**\n- An Introduction to the OpenSSF Model Signing (OMS) Specification - OpenSSF blog, Jun 2025\n  https://openssf.org/blog/2025/06/25/an-introduction-to-the-openssf-model-signing-oms-specification/\n- Case Study: Google Secures ML Models with Sigstore - OpenSSF, Jul 2025\n  https://openssf.org/blog/2025/07/23/case-study-google-secures-machine-learning-models-with-sigstore/\n- Model authenticity and transparency with Sigstore - Red Hat, Apr 2025\n  https://next.redhat.com/2025/04/10/model-authenticity-and-transparency-with-sigstore/\n- Taming the Wild West of ML: Practical Model Signing with Sigstore \u2014 Sigstore blog\n  https://blog.sigstore.dev/model-transparency-v1.0/\n- model-signing on PyPI\n  https://pypi.org/project/model-signing/\n\n**SafeTensors:**\n- SafeTensors joins the PyTorch Foundation - Hugging Face blog, Mar 2026\n  https://huggingface.co/blog/safetensors-joins-pytorch-foundation\n- PyTorch Foundation announcement - PR Newswire, Apr 2026\n  https://www.prnewswire.com/news-releases/pytorch-foundation-announces-safetensors-as-newest-contributed-project-to-secure-ai-model-execution-302736068.html\n- SafeTensors - official PyTorch ecosystem page\n  https://pytorch.org/projects/safetensors/\n\n**Malicious models on Hugging Face:**\n- ReversingLabs identifies malware ML model on Hugging Face (*nullifAI*) - Feb 2025\n  https://www.reversinglabs.com/blog/rl-identifies-malware-ml-model-hosted-on-hugging-face\n- The Poisoned Model Registry: Hugging Face as Malware Distribution Channel - Lyrie Research, 2026\n  https://lyrie.ai/research/research/huggingface-model-supply-chain-nullifai-pickle-rce\n- Malicious AI Model Repositories Attack Surface - Cloud Security Alliance\n  https://labs.cloudsecurityalliance.org/research/csa-research-note-malicious-ai-model-repositories-attack-sur/\n- Poisoned AI: How Hugging Face Became a Malware Distribution Platform - Hive Security, 2026\n  https://hivesecurity.gitlab.io/blog/huggingface-ai-supply-chain-attacks-2026/\n\n\n---\n\n## About Me\n\nSenior Software Engineer at Red Hat. Builds Python and Go systems for RHEL and OpenShift; works on rule-driven diagnostics engines, multi-agent workflows, and more recently harness engineering.\n\n- GitHub: https://github.com/rahulXs\n- Slides PDF: Upcoming\n\nQuestions about the talk? Leave a comment on this gist, I'll try to answer.\n", "creation_timestamp": "2026-08-24T15:42:13.244588Z"}, {"uuid": "3bf1887d-c8a6-4af4-aed5-dcf077e7151d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1716", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-27T12:00:11.048243Z"}, {"uuid": "13e3e89a-ba44-40fa-b19e-db43f0b7b87a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/pphm_HackerNews/358", "content": "Enterprise Network Security Strengthened Against Escalation Flaws\n\nSecurity researchers discovered two high-severity vulnerabilities in the USG FLEX H series uOS firmware\u2014CVE-2025-1731 and CVE-2025-1732\u2014that permit local privilege escalation under certain conditions. The advisory, published April 22, 2025, outlines how both flaws exploit the update service\u2019s execution flow to run attacker-supplied binaries with elevated rights.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:04.043484Z"}, {"uuid": "025cb165-5baf-4981-9a09-1ae27f18b95f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/pphm_HackerNews/358", "content": "Enterprise Network Security Strengthened Against Escalation Flaws\n\nSecurity researchers discovered two high-severity vulnerabilities in the USG FLEX H series uOS firmware\u2014CVE-2025-1731 and CVE-2025-1732\u2014that permit local privilege escalation under certain conditions. The advisory, published April 22, 2025, outlines how both flaws exploit the update service\u2019s execution flow to run attacker-supplied binaries with elevated rights.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-20T22:00:04.082667Z"}, {"uuid": "d2a6e356-6e8f-4866-9683-c65c50cb5658", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/pphm_HackerNews/358", "content": "Enterprise Network Security Strengthened Against Escalation Flaws\n\nSecurity researchers discovered two high-severity vulnerabilities in the USG FLEX H series uOS firmware\u2014CVE-2025-1731 and CVE-2025-1732\u2014that permit local privilege escalation under certain conditions. The advisory, published April 22, 2025, outlines how both flaws exploit the update service\u2019s execution flow to run attacker-supplied binaries with elevated rights.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:10.343949Z"}, {"uuid": "4b6f145a-0b29-40ba-8632-b5374aef532f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/pphm_HackerNews/358", "content": "Enterprise Network Security Strengthened Against Escalation Flaws\n\nSecurity researchers discovered two high-severity vulnerabilities in the USG FLEX H series uOS firmware\u2014CVE-2025-1731 and CVE-2025-1732\u2014that permit local privilege escalation under certain conditions. The advisory, published April 22, 2025, outlines how both flaws exploit the update service\u2019s execution flow to run attacker-supplied binaries with elevated rights.\n\n\ud83d\udd17 Read More", "creation_timestamp": "2026-07-21T00:00:10.373290Z"}, {"uuid": "bb67d3c7-e4d8-4d4a-b7ad-34ad02b58784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1716", "type": "seen", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-28T00:00:54.701899Z"}, {"uuid": "f37ffbcf-4991-4458-8d28-d5378f2c5d25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1716", "type": "published-proof-of-concept", "source": "Telegram/IBDLQiEWHO72tUJ2Ylqd3zBHJI3jkAPrj_4aeIoADYB6Hgg", "content": "", "creation_timestamp": "2026-08-29T00:00:15.482940Z"}, {"uuid": "3182c8d1-9595-4669-a1c4-8401aefa3f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://t.me/EchelonEyes/3742", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kubernetes: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c Git \n\n\u041d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Kubernetes \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-1767, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043c\u0430 gitRepo \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c Git \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0432 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0443\u0437\u043b\u0435. \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0440\u0435\u0434\u043d\u0438\u0439 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 6.5). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0442\u043e\u043c\u0430 in-tree gitRepo \u0434\u043b\u044f \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0432 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0443\u0437\u043b\u0435. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0441\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0451, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 init \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b git clone \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u0432 \u043f\u043e\u0434\u0435. \u0422\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043c\u0430 gitRepo \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ValidatingAdmissionPolicy \u0438\u043b\u0438 Restricted pod security standard.\n\n\u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0430 \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430, \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e\u0434\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0442\u043e\u043c in-tree gitRepo. \n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b!\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://github.com/kubernetes/kubernetes/issues/130786", "creation_timestamp": "2026-07-26T02:00:31.742424Z"}, {"uuid": "d1b101c4-50de-4a0f-b4c9-964259ae713a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "seen", "source": "https://t.me/EchelonEyes/3742", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kubernetes: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c Git \n\n\u041d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Kubernetes \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-1767, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043c\u0430 gitRepo \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c Git \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0432 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0443\u0437\u043b\u0435. \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0440\u0435\u0434\u043d\u0438\u0439 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 6.5). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0442\u043e\u043c\u0430 in-tree gitRepo \u0434\u043b\u044f \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0432 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0443\u0437\u043b\u0435. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0441\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0451, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 init \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b git clone \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u0432 \u043f\u043e\u0434\u0435. \u0422\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043c\u0430 gitRepo \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ValidatingAdmissionPolicy \u0438\u043b\u0438 Restricted pod security standard.\n\n\u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0430 \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430, \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e\u0434\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0442\u043e\u043c in-tree gitRepo. \n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b!\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://github.com/kubernetes/kubernetes/issues/130786", "creation_timestamp": "2026-07-27T00:00:37.446369Z"}, {"uuid": "a83ffc87-a9e7-47d7-bde4-1be7d6dbb40b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1767", "type": "published-proof-of-concept", "source": "https://t.me/EchelonEyes/3742", "content": "\u041e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Kubernetes: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0447\u0443\u0436\u0438\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c Git \n\n\u041d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435 Kubernetes \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-1767, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043f\u043e\u0434\u043e\u0432 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0442\u043e\u043c\u0430 gitRepo \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u043c Git \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0432 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0443\u0437\u043b\u0435. \u0423\u0440\u043e\u0432\u0435\u043d\u044c \u0443\u0433\u0440\u043e\u0437\u044b \u043e\u0446\u0435\u043d\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0440\u0435\u0434\u043d\u0438\u0439 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 6.5). \n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0435 \u0442\u043e\u043c\u0430 in-tree gitRepo \u0434\u043b\u044f \u043a\u043b\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 Git \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u043e\u0434\u043e\u0432 \u043d\u0430 \u0442\u043e\u043c \u0436\u0435 \u0443\u0437\u043b\u0435. \u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u044d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0435\u0439 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u0442 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0432\u0441\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0435\u0451, \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c\u0438.\n\n\u0414\u043b\u044f \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 init \u0434\u043b\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b git clone \u0441 \u043f\u043e\u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0438\u0438 \u0432 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440 \u0432 \u043f\u043e\u0434\u0435. \u0422\u0430\u043a\u0436\u0435 \u043c\u043e\u0436\u043d\u043e \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0442\u043e\u043c\u0430 gitRepo \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043f\u043e\u043b\u0438\u0442\u0438\u043a, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a ValidatingAdmissionPolicy \u0438\u043b\u0438 Restricted pod security standard.\n\n\u0427\u0442\u043e\u0431\u044b \u043f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c, \u0431\u044b\u043b\u0430 \u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0430, \u043c\u043e\u0436\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 \u0434\u043b\u044f \u043f\u043e\u0438\u0441\u043a\u0430 \u043f\u043e\u0434\u043e\u0432, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0442\u043e\u043c in-tree gitRepo. \n\n\u0411\u0443\u0434\u044c\u0442\u0435 \u0431\u0434\u0438\u0442\u0435\u043b\u044c\u043d\u044b \u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u0435 \u0441\u0432\u043e\u0438 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b!\n\n#\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \n\n\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: https://github.com/kubernetes/kubernetes/issues/130786", "creation_timestamp": "2026-07-28T00:00:52.417764Z"}, {"uuid": "eb1642db-5149-4bc7-b3ab-7e8e163e0420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://t.me/reverseame/5277", "content": "CVE-2025-1729 - Privilege Escalation Using TPQMAssistant.exe #CVE20251729 #PrivilegeEscalation #LenovoSecurity #DLLSideloading #TPQMAssistant https://trustedsec.com/blog/cve-2025-1729-privilege-escalation-using-tpqmassistant-exe", "creation_timestamp": "2026-07-29T12:02:02.802927Z"}, {"uuid": "5b9195b1-35bd-4103-9d12-58a052d5e76e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-07-29T12:02:03.880220Z"}, {"uuid": "29d1999a-1c09-4295-a204-96e02ad7c4d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-07-29T12:02:03.922842Z"}, {"uuid": "3303cb98-33b9-41cc-826e-5b89e018f9e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/reverseame/5132", "content": "Local privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731) #LocalPrivilegeEscalation #ZyxelUSGFLEX #CVE20251731 #HNsecurity #fuzzing https://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731/", "creation_timestamp": "2026-07-29T12:02:04.112300Z"}, {"uuid": "38bbef26-ead2-4e9d-9c63-7e70bf390305", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/reverseame/5132", "content": "Local privilege escalation on Zyxel USG FLEX H Series (CVE-2025-1731) #LocalPrivilegeEscalation #ZyxelUSGFLEX #CVE20251731 #HNsecurity #fuzzing https://security.humanativaspa.it/local-privilege-escalation-on-zyxel-usg-flex-h-series-cve-2025-1731/", "creation_timestamp": "2026-07-30T00:02:15.189594Z"}, {"uuid": "28a7cf66-129e-4322-8128-3487b0a74fc7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1729", "type": "seen", "source": "https://t.me/reverseame/5277", "content": "CVE-2025-1729 - Privilege Escalation Using TPQMAssistant.exe #CVE20251729 #PrivilegeEscalation #LenovoSecurity #DLLSideloading #TPQMAssistant https://trustedsec.com/blog/cve-2025-1729-privilege-escalation-using-tpqmassistant-exe", "creation_timestamp": "2026-07-30T00:02:14.060056Z"}, {"uuid": "aabc0111-36cd-4480-bb62-b7dbfc9b7f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1731", "type": "seen", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-07-30T00:02:14.968822Z"}, {"uuid": "14449bd4-540b-42e3-9b9b-de2ff7b3d5cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-1732", "type": "seen", "source": "https://t.me/reverseame/5134", "content": "Remote Code Execution in ZYXEL FLEX-H Series. #summary #coding #hexadecimal #programming #deadcode https://0xdeadc0de.xyz/blog/cve-2025-1731_cve-2025-1732", "creation_timestamp": "2026-07-30T00:02:15.010761Z"}]}